SUSE update for the Linux Kernel

1) Race condition

EUVDB-ID: #VU89388

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52489

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition within the section_deactivate() function in mm/sparse.c. A local user can exploit the race and escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Improper locking

EUVDB-ID: #VU103086

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52923

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the nft_rbtree_cmp(), __nft_rbtree_lookup(), nft_rbtree_get(), nft_rbtree_gc_elem(), nft_rbtree_activate(), nft_rbtree_flush() and nft_rbtree_gc() functions in net/netfilter/nft_set_rbtree.c, within the pipapo_drop(), pipapo_gc() and nft_pipapo_activate() functions in net/netfilter/nft_set_pipapo.c, within the nft_rhash_cmp(), nft_rhash_activate(), nft_rhash_flush(), nft_rhash_deactivate(), nft_rhash_gc() and nft_rhash_destroy() functions in net/netfilter/nft_set_hash.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Out-of-bounds read

EUVDB-ID: #VU90362

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26596

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the EXPORT_SYMBOL_GPL() and dsa_user_changeupper() functions in net/dsa/user.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Resource management error

EUVDB-ID: #VU89055

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-26924

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources within the nft_pipapo_remove() function in net/netfilter/nft_set_pipapo.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Improper locking

EUVDB-ID: #VU92027

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-27397

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the __nft_rbtree_insert(), nft_rbtree_deactivate() and nft_rbtree_gc() functions in net/netfilter/nft_set_rbtree.c, within the pipapo_get(), nft_pipapo_get(), nft_pipapo_insert(), pipapo_gc() and pipapo_deactivate() functions in net/netfilter/nft_set_pipapo.c, within the nft_rhash_key(), nft_rhash_cmp(), nft_rhash_lookup(), nft_rhash_get(), nft_rhash_update(), nft_rhash_insert() and nft_rhash_deactivate() functions in net/netfilter/nft_set_hash.c, within the nft_trans_gc_catchall_sync() and nf_tables_valid_genid() functions in net/netfilter/nf_tables_api.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Improper locking

EUVDB-ID: #VU93386

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-35839

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the nf_reject6_fill_skb_dst() and nf_send_reset6() functions in net/ipv6/netfilter/nf_reject_ipv6.c, within the nf_reject_fill_skb_dst() and nf_send_reset() functions in net/ipv4/netfilter/nf_reject_ipv4.c, within the br_nf_pre_routing_finish_ipv6() function in net/bridge/br_netfilter_ipv6.c, within the br_nf_pre_routing_finish_bridge(), br_nf_ipv4_daddr_was_changed(), bridge_parent_rtable(), skb_dst_set_noref(), setup_pre_routing(), br_nf_forward_finish(), ip_sabotage_in() and br_nf_pre_routing_finish_bridge_slow() functions in net/bridge/br_netfilter_hooks.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) NULL pointer dereference

EUVDB-ID: #VU102920

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-36476

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the send_io_resp_imm() function in drivers/infiniband/ulp/rtrs/rtrs-srv.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Resource management error

EUVDB-ID: #VU93278

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-36908

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the iocg_pay_debt() function in block/blk-iocost.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Out-of-bounds read

EUVDB-ID: #VU90268

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-36915

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the nfc_llcp_setsockopt() function in net/nfc/llcp_sock.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Resource management error

EUVDB-ID: #VU102972

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-39282

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the t7xx_fsm_broadcast_state(), fsm_main_thread() and t7xx_fsm_append_cmd() functions in drivers/net/wwan/t7xx/t7xx_state_monitor.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Buffer overflow

EUVDB-ID: #VU93827

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-39480

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to memory corruption within the kdb_printf() function in kernel/debug/kdb/kdb_io.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Input validation error

EUVDB-ID: #VU95003

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-41042

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the nf_tables_rule_release(), nft_chain_validate(), nft_chain_validate_hooks() and nft_validate_register_store() functions in net/netfilter/nf_tables_api.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Memory leak

EUVDB-ID: #VU96511

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-43913

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the devm_apple_nvme_mempool_destroy() and apple_nvme_probe() functions in drivers/nvme/host/apple.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

14) Use-after-free

EUVDB-ID: #VU96517

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-44934

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the br_multicast_del_port() function in net/bridge/br_multicast.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

15) Resource management error

EUVDB-ID: #VU96879

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-44996

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the __vsock_recvmsg() function in net/vmw_vsock/vsock_bpf.c, within the __vsock_dgram_recvmsg(), vsock_connectible_recvmsg() and release_sock() functions in net/vmw_vsock/af_vsock.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

16) NULL pointer dereference

EUVDB-ID: #VU102922

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-45828

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the hci_dma_cleanup() function in drivers/i3c/master/mipi-i3c-hci/dma.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

17) Input validation error

EUVDB-ID: #VU97270

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-46680

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the ps_wakeup(), btnxpuart_close() and nxp_serdev_remove() functions in drivers/bluetooth/btnxpuart.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

18) NULL pointer dereference

EUVDB-ID: #VU97522

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-46765

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the ice_xsk_pool_setup() function in drivers/net/ethernet/intel/ice/ice_xsk.c, within the ice_clear_hw_tbls(), ice_xdp_setup_prog() and ice_xdp() functions in drivers/net/ethernet/intel/ice/ice_main.c, within the ice_vsi_free(), ice_vsi_alloc() and ice_vsi_rebuild() functions in drivers/net/ethernet/intel/ice/ice_lib.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

19) Use-after-free

EUVDB-ID: #VU97501

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-46800

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the qdisc_enqueue() function in net/sched/sch_netem.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

20) NULL pointer dereference

EUVDB-ID: #VU102923

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-46896

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the amdgpu_job_set_resources() and amdgpu_job_free_resources() functions in drivers/gpu/drm/amd/amdgpu/amdgpu_job.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

21) NULL pointer dereference

EUVDB-ID: #VU102924

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-47141

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the pr_fmt(), pinmux_can_be_used_for_gpio(), pin_request(), pin_free(), pinmux_enable_setting(), pinmux_disable_setting() and pinmux_pins_show() functions in drivers/pinctrl/pinmux.c, within the pinctrl_register_one_pin() function in drivers/pinctrl/core.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

22) Improper locking

EUVDB-ID: #VU102949

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-47143

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the check_unmap() function in kernel/dma/debug.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

23) Improper locking

EUVDB-ID: #VU99030

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-47678

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the icmpv6_mask_allow(), icmpv6_global_allow(), icmpv6_xrlim_allow(), icmp6_send() and icmpv6_echo_reply() functions in net/ipv6/icmp.c, within the __SPIN_LOCK_UNLOCKED(), icmpv4_mask_allow(), icmpv4_global_allow(), icmpv4_xrlim_allow(), icmp_reply() and __icmp_send() functions in net/ipv4/icmp.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

24) NULL pointer dereference

EUVDB-ID: #VU102925

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-47809

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the validate_lock_args() function in fs/dlm/lock.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

25) NULL pointer dereference

EUVDB-ID: #VU102926

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-48873

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the rtw89_update_6ghz_rnr_chan() function in drivers/net/wireless/realtek/rtw89/fw.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

26) NULL pointer dereference

EUVDB-ID: #VU102927

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-48881

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the cache_set_flush() function in drivers/md/bcache/super.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

27) Improper locking

EUVDB-ID: #VU102946

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-49569

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the nvme_stop_keep_alive() function in drivers/nvme/host/rdma.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

28) Use-after-free

EUVDB-ID: #VU98892

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-49854

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the bfq_prepare_request() and bfq_init_rq() functions in block/bfq-iosched.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

29) Use-after-free

EUVDB-ID: #VU98867

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-49884

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the ext4_split_extent_at() and ext4_ext_dirty() functions in fs/ext4/extents.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

30) NULL pointer dereference

EUVDB-ID: #VU98932

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-49915

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the dcn32_init_hw() function in drivers/gpu/drm/amd/display/dc/hwss/dcn32/dcn32_hwseq.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

31) NULL pointer dereference

EUVDB-ID: #VU98953

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-49944

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the sctp_listen_start() function in net/sctp/socket.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

32) Resource management error

EUVDB-ID: #VU99171

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-49951

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the cmd_status_rsp(), mgmt_index_added(), mgmt_power_on() and __mgmt_power_off() functions in net/bluetooth/mgmt.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

33) Buffer overflow

EUVDB-ID: #VU99151

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-49952

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory corruption within the nf_dup_ipv6_route() and nf_dup_ipv6() functions in net/ipv6/netfilter/nf_dup_ipv6.c, within the nf_dup_ipv4() function in net/ipv4/netfilter/nf_dup_ipv4.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

34) NULL pointer dereference

EUVDB-ID: #VU98944

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-49998

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the EXPORT_SYMBOL_GPL() and dsa_switch_shutdown() functions in net/dsa/dsa.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

35) Integer overflow

EUVDB-ID: #VU99090

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50016

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to integer overflow within the dp_set_test_pattern() function in drivers/gpu/drm/amd/display/dc/link/accessories/link_dp_cts.c. A local user can execute arbitrary code.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

36) Integer overflow

EUVDB-ID: #VU99091

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50018

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to integer overflow within the NETDEVICE_SHOW_RW() and napi_defer_hard_irqs_store() functions in net/core/net-sysfs.c, within the netif_elide_gro() function in Documentation/networking/net_cachelines/net_device.rst. A local user can execute arbitrary code.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

37) Resource management error

EUVDB-ID: #VU99133

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50039

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the qdisc_skb_cb() function in net/sched/sch_api.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

38) Improper locking

EUVDB-ID: #VU98995

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50047

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the SMB2_negotiate() function in fs/smb/client/smb2pdu.c, within the smb2_get_enc_key(), crypt_message(), smb3_init_transform_rq() and decrypt_raw_data() functions in fs/smb/client/smb2ops.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

39) Use-after-free

EUVDB-ID: #VU102917

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50051

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the mpc52xx_spi_remove() function in drivers/spi/spi-mpc52xx.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

40) Use-after-free

EUVDB-ID: #VU99802

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50106

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the destroy_delegation(), nfsd4_revoke_states(), nfs4_laundromat(), nfsd4_free_stateid() and nfsd4_delegreturn() functions in fs/nfsd/nfs4state.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

41) Use of uninitialized resource

EUVDB-ID: #VU100084

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50143

CWE-ID: CWE-908 - Use of Uninitialized Resource

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to use of uninitialized resource within the udf_current_aext() function in fs/udf/inode.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

42) Out-of-bounds read

EUVDB-ID: #VU100066

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50151

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the SMB2_ioctl_init() function in fs/cifs/smb2pdu.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

43) Use-after-free

EUVDB-ID: #VU100062

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50154

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the reqsk_queue_unlink() and reqsk_timer_handler() functions in net/ipv4/inet_connection_sock.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

44) Use-after-free

EUVDB-ID: #VU100120

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50199

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the unuse_mm() function in mm/swapfile.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

45) Input validation error

EUVDB-ID: #VU100130

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50202

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the nilfs_lookup(), nilfs_do_unlink(), nilfs_rename() and nilfs_get_parent() functions in fs/nilfs2/namei.c, within the nilfs_readdir(), nilfs_find_entry() and nilfs_inode_by_name() functions in fs/nilfs2/dir.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

46) Buffer overflow

EUVDB-ID: #VU100139

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50203

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to memory corruption within the prepare_trampoline() function in arch/arm64/net/bpf_jit_comp.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

47) Improper error handling

EUVDB-ID: #VU100134

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50211

CWE-ID: CWE-388 - Error Handling

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper error handling within the udf_truncate_extents() function in fs/udf/truncate.c, within the udf_try_read_meta() function in fs/udf/partition.c, within the udf_map_block(), udf_extend_file(), udf_delete_aext() and inode_bmap() functions in fs/udf/inode.c, within the udf_fiiter_init() and udf_fiiter_append_blk() functions in fs/udf/directory.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

48) Improper locking

EUVDB-ID: #VU100182

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50228

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the shmem_getattr() function in mm/shmem.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

49) Memory leak

EUVDB-ID: #VU100163

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50252

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the mlxsw_sp_ipip_ol_netdev_change_gre6() function in drivers/net/ethernet/mellanox/mlxsw/spectrum_ipip.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

50) Improper error handling

EUVDB-ID: #VU100192

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50256

CWE-ID: CWE-388 - Error Handling

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper error handling within the nf_reject6_fill_skb_dst() and nf_send_reset6() functions in net/ipv6/netfilter/nf_reject_ipv6.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

51) Out-of-bounds read

EUVDB-ID: #VU100173

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50262

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the trie_get_next_key() function in kernel/bpf/lpm_trie.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

52) Infinite loop

EUVDB-ID: #VU100640

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50272

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop within the filemap_read() function in mm/filemap.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

53) Out-of-bounds read

EUVDB-ID: #VU100619

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50278

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the get_cache_dev_size() and cache_preresume() functions in drivers/md/dm-cache-target.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

54) Out-of-bounds read

EUVDB-ID: #VU100620

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50279

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the can_resize() function in drivers/md/dm-cache-target.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

55) Use-after-free

EUVDB-ID: #VU100614

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50280

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the check_migrations(), destroy(), cache_create() and cache_ctr() functions in drivers/md/dm-cache-target.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

56) NULL pointer dereference

EUVDB-ID: #VU100626

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50296

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the hnae3_unregister_ae_algo_prepare() function in drivers/net/ethernet/hisilicon/hns3/hnae3.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

57) Input validation error

EUVDB-ID: #VU100631

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-50299

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the sctp_sf_ootb() function in net/sctp/sm_statefuns.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

58) Resource management error

EUVDB-ID: #VU102974

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-52332

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the igb_init_module() function in drivers/net/ethernet/intel/igb/igb_main.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

59) Input validation error

EUVDB-ID: #VU100747

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53043

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the mctp_i2c_header_create() function in drivers/net/mctp/mctp-i2c.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

60) NULL pointer dereference

EUVDB-ID: #VU100709

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53050

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the intel_dp_hdcp2_get_capability() function in drivers/gpu/drm/i915/display/intel_dp_hdcp.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

61) NULL pointer dereference

EUVDB-ID: #VU100710

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53051

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the intel_hdcp_read_valid_bksv() function in drivers/gpu/drm/i915/display/intel_hdcp.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

62) Infinite loop

EUVDB-ID: #VU100734

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53055

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop within the iwl_mvm_umac_scan_cfg_channels_v6_6g() function in drivers/net/wireless/intel/iwlwifi/mvm/scan.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

63) NULL pointer dereference

EUVDB-ID: #VU100711

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53056

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the mtk_crtc_destroy() function in drivers/gpu/drm/mediatek/mtk_crtc.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

64) NULL pointer dereference

EUVDB-ID: #VU100714

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53064

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the idpf_init_hard_reset() function in drivers/net/ethernet/intel/idpf/idpf_lib.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

65) Improper locking

EUVDB-ID: #VU100833

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53090

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the afs_deferred_free_worker(), afs_alloc_call(), afs_put_call(), afs_wake_up_call_waiter() and afs_wake_up_async_call() functions in fs/afs/rxrpc.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

66) Input validation error

EUVDB-ID: #VU100836

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53091

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the include/net/tls.h. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

67) Use-after-free

EUVDB-ID: #VU100830

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53095

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the clean_demultiplex_info(), cifs_put_tcp_session() and generic_ip_connect() functions in fs/smb/client/connect.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

68) Out-of-bounds read

EUVDB-ID: #VU100938

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53099

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the bpf_link_show_fdinfo() function in kernel/bpf/syscall.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

69) NULL pointer dereference

EUVDB-ID: #VU101106

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53103

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the hvs_destruct() function in net/vmw_vsock/hyperv_transport.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

70) Double free

EUVDB-ID: #VU101108

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53105

CWE-ID: CWE-415 - Double Free

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a double free error within the __page_cache_release() function in mm/swap.c, within the free_pages_prepare() function in mm/page_alloc.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

71) Buffer overflow

EUVDB-ID: #VU101116

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53110

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory corruption within the vp_vdpa_probe() function in drivers/vdpa/virtio_pci/vp_vdpa.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

72) Integer overflow

EUVDB-ID: #VU101110

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53111

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to integer overflow within the mm/mremap.c. A local user can execute arbitrary code.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

73) NULL pointer dereference

EUVDB-ID: #VU101103

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53113

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the alloc_pages_bulk_noprof() function in mm/page_alloc.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

74) Memory leak

EUVDB-ID: #VU101096

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53117

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the virtio_transport_send_pkt_info() function in net/vmw_vsock/virtio_transport_common.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

Confidential Computing Module: 15-SP6

SUSE Linux Enterprise Server for SAP Applications 15: SP6

SUSE Linux Enterprise Server 15: SP6

kernel-source-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-devel-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-vdso-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-syms-coco: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

reiserfs-kmp-coco: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel-debuginfo: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-debugsource: before 6.4.0-15061.12.coco15sp6.1

kernel-coco-devel: before 6.4.0-15061.12.coco15sp6.1

kernel-coco_debug: before 6.4.0-15061.12.coco15sp6.1

kernel-coco: before 6.4.0-15061.12.coco15sp6.1

• cpe:2.3:o:suse:confidential_computing_module:15-SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP6:*:*:*:*:*:*:*
• cpe:2.3:a:suse:kernel-source-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-devel-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-syms-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:reiserfs-kmp-coco:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:a:suse:kernel-coco:*:*:*:*:*:suse_linux:*:*

https://www.suse.com/support/update/announcement/2025/suse-su-20250289-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

75) Memory leak

EUVDB-ID: #VU101097

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2024-53118

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No