Security Bulletin
This security bulletin contains information about 21 vulnerabilities.
EUVDB-ID: #VU59811
Risk: Low
CVSSv3.1: 6.1 [CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C]
CVE-ID: CVE-2021-0920
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error within the unix_scm_to_skb() function of af_unix.c in Linux kernel. A local user can run a specially crafted program to trigger a race condition and execute arbitrary code with elevated privileges.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Realtime Extension: 15-SP2
SUSE Linux Enterprise Micro: 5.0
SUSE Enterprise Storage: 7.1
SUSE Linux Enterprise High Availability: 15-SP2
SUSE Linux Enterprise Server for SAP Applications: 15-SP2
SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS
SUSE Linux Enterprise Module for Live Patching: 15-SP2
SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS
SUSE Manager Server: 4.1
SUSE Manager Retail Branch Server: 4.1
SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Server for SAP: 15-SP2
ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
ocfs2-kmp-default: before 5.3.18-150200.24.112.1
gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
gfs2-kmp-default: before 5.3.18-150200.24.112.1
dlm-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
dlm-kmp-default: before 5.3.18-150200.24.112.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
cluster-md-kmp-default: before 5.3.18-150200.24.112.1
kernel-livepatch-SLE15-SP2_Update_26-debugsource: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default-debuginfo: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default: before 1-150200.5.5.1
kernel-default-livepatch-devel: before 5.3.18-150200.24.112.1
kernel-default-livepatch: before 5.3.18-150200.24.112.1
kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt-devel: before 5.3.18-150200.24.112.1
kernel-preempt-debugsource: before 5.3.18-150200.24.112.1
kernel-preempt-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt: before 5.3.18-150200.24.112.1
kernel-source: before 5.3.18-150200.24.112.1
kernel-macros: before 5.3.18-150200.24.112.1
kernel-docs: before 5.3.18-150200.24.112.1
kernel-devel: before 5.3.18-150200.24.112.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
reiserfs-kmp-default: before 5.3.18-150200.24.112.1
kernel-syms: before 5.3.18-150200.24.112.1
kernel-obs-build-debugsource: before 5.3.18-150200.24.112.1
kernel-obs-build: before 5.3.18-150200.24.112.1
kernel-default-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-devel: before 5.3.18-150200.24.112.1
kernel-default-debugsource: before 5.3.18-150200.24.112.1
kernel-default-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-base: before 5.3.18-150200.24.112.1.150200.9.52.2
kernel-default: before 5.3.18-150200.24.112.1
External linkshttp://www.suse.com/support/update/announcement/2022/suse-su-20221197-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
Yes. This vulnerability is being exploited in the wild.
EUVDB-ID: #VU61097
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-39698
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error in Linux kernel. A local user can run a specially crafted program to trigger the use-after-free error and execute arbitrary code with elevated privileges.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Realtime Extension: 15-SP2
SUSE Linux Enterprise Micro: 5.0
SUSE Enterprise Storage: 7.1
SUSE Linux Enterprise High Availability: 15-SP2
SUSE Linux Enterprise Server for SAP Applications: 15-SP2
SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS
SUSE Linux Enterprise Module for Live Patching: 15-SP2
SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS
SUSE Manager Server: 4.1
SUSE Manager Retail Branch Server: 4.1
SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Server for SAP: 15-SP2
ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
ocfs2-kmp-default: before 5.3.18-150200.24.112.1
gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
gfs2-kmp-default: before 5.3.18-150200.24.112.1
dlm-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
dlm-kmp-default: before 5.3.18-150200.24.112.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
cluster-md-kmp-default: before 5.3.18-150200.24.112.1
kernel-livepatch-SLE15-SP2_Update_26-debugsource: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default-debuginfo: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default: before 1-150200.5.5.1
kernel-default-livepatch-devel: before 5.3.18-150200.24.112.1
kernel-default-livepatch: before 5.3.18-150200.24.112.1
kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt-devel: before 5.3.18-150200.24.112.1
kernel-preempt-debugsource: before 5.3.18-150200.24.112.1
kernel-preempt-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt: before 5.3.18-150200.24.112.1
kernel-source: before 5.3.18-150200.24.112.1
kernel-macros: before 5.3.18-150200.24.112.1
kernel-docs: before 5.3.18-150200.24.112.1
kernel-devel: before 5.3.18-150200.24.112.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
reiserfs-kmp-default: before 5.3.18-150200.24.112.1
kernel-syms: before 5.3.18-150200.24.112.1
kernel-obs-build-debugsource: before 5.3.18-150200.24.112.1
kernel-obs-build: before 5.3.18-150200.24.112.1
kernel-default-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-devel: before 5.3.18-150200.24.112.1
kernel-default-debugsource: before 5.3.18-150200.24.112.1
kernel-default-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-base: before 5.3.18-150200.24.112.1.150200.9.52.2
kernel-default: before 5.3.18-150200.24.112.1
External linkshttp://www.suse.com/support/update/announcement/2022/suse-su-20221197-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63422
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2021-45868
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to perform a denial-of-service attack.
The vulnerability exists due to fs/quota/quota_tree.c does not validate the block number in the quota tree (on disk). A local user can trigger use-after-free error and perform a denial-of-service attack.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Realtime Extension: 15-SP2
SUSE Linux Enterprise Micro: 5.0
SUSE Enterprise Storage: 7.1
SUSE Linux Enterprise High Availability: 15-SP2
SUSE Linux Enterprise Server for SAP Applications: 15-SP2
SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS
SUSE Linux Enterprise Module for Live Patching: 15-SP2
SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS
SUSE Manager Server: 4.1
SUSE Manager Retail Branch Server: 4.1
SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Server for SAP: 15-SP2
ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
ocfs2-kmp-default: before 5.3.18-150200.24.112.1
gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
gfs2-kmp-default: before 5.3.18-150200.24.112.1
dlm-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
dlm-kmp-default: before 5.3.18-150200.24.112.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
cluster-md-kmp-default: before 5.3.18-150200.24.112.1
kernel-livepatch-SLE15-SP2_Update_26-debugsource: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default-debuginfo: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default: before 1-150200.5.5.1
kernel-default-livepatch-devel: before 5.3.18-150200.24.112.1
kernel-default-livepatch: before 5.3.18-150200.24.112.1
kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt-devel: before 5.3.18-150200.24.112.1
kernel-preempt-debugsource: before 5.3.18-150200.24.112.1
kernel-preempt-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt: before 5.3.18-150200.24.112.1
kernel-source: before 5.3.18-150200.24.112.1
kernel-macros: before 5.3.18-150200.24.112.1
kernel-docs: before 5.3.18-150200.24.112.1
kernel-devel: before 5.3.18-150200.24.112.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
reiserfs-kmp-default: before 5.3.18-150200.24.112.1
kernel-syms: before 5.3.18-150200.24.112.1
kernel-obs-build-debugsource: before 5.3.18-150200.24.112.1
kernel-obs-build: before 5.3.18-150200.24.112.1
kernel-default-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-devel: before 5.3.18-150200.24.112.1
kernel-default-debugsource: before 5.3.18-150200.24.112.1
kernel-default-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-base: before 5.3.18-150200.24.112.1.150200.9.52.2
kernel-default: before 5.3.18-150200.24.112.1
External linkshttp://www.suse.com/support/update/announcement/2022/suse-su-20221197-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63423
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-0850
CWE-ID:
CWE-200 - Information exposure
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to potentially sensitive information.
The vulnerability exists due to excessive data output in the copy_page_to_iter() function in iov_iter.c in Linux kernel. A local user can gain unauthorized access to sensitive information on the system.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Realtime Extension: 15-SP2
SUSE Linux Enterprise Micro: 5.0
SUSE Enterprise Storage: 7.1
SUSE Linux Enterprise High Availability: 15-SP2
SUSE Linux Enterprise Server for SAP Applications: 15-SP2
SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS
SUSE Linux Enterprise Module for Live Patching: 15-SP2
SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS
SUSE Manager Server: 4.1
SUSE Manager Retail Branch Server: 4.1
SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Server for SAP: 15-SP2
ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
ocfs2-kmp-default: before 5.3.18-150200.24.112.1
gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
gfs2-kmp-default: before 5.3.18-150200.24.112.1
dlm-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
dlm-kmp-default: before 5.3.18-150200.24.112.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
cluster-md-kmp-default: before 5.3.18-150200.24.112.1
kernel-livepatch-SLE15-SP2_Update_26-debugsource: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default-debuginfo: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default: before 1-150200.5.5.1
kernel-default-livepatch-devel: before 5.3.18-150200.24.112.1
kernel-default-livepatch: before 5.3.18-150200.24.112.1
kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt-devel: before 5.3.18-150200.24.112.1
kernel-preempt-debugsource: before 5.3.18-150200.24.112.1
kernel-preempt-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt: before 5.3.18-150200.24.112.1
kernel-source: before 5.3.18-150200.24.112.1
kernel-macros: before 5.3.18-150200.24.112.1
kernel-docs: before 5.3.18-150200.24.112.1
kernel-devel: before 5.3.18-150200.24.112.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
reiserfs-kmp-default: before 5.3.18-150200.24.112.1
kernel-syms: before 5.3.18-150200.24.112.1
kernel-obs-build-debugsource: before 5.3.18-150200.24.112.1
kernel-obs-build: before 5.3.18-150200.24.112.1
kernel-default-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-devel: before 5.3.18-150200.24.112.1
kernel-default-debugsource: before 5.3.18-150200.24.112.1
kernel-default-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-base: before 5.3.18-150200.24.112.1.150200.9.52.2
kernel-default: before 5.3.18-150200.24.112.1
External linkshttp://www.suse.com/support/update/announcement/2022/suse-su-20221197-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63427
Risk: Low
CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-0854
CWE-ID:
CWE-401 - Missing release of memory after effective lifetime
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due memory leak in the Linux kernel’s DMA subsystem when processing DMA_FROM_DEVICE calls. A local user can trigger a memory leak error and read random memory from the kernel space.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Realtime Extension: 15-SP2
SUSE Linux Enterprise Micro: 5.0
SUSE Enterprise Storage: 7.1
SUSE Linux Enterprise High Availability: 15-SP2
SUSE Linux Enterprise Server for SAP Applications: 15-SP2
SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS
SUSE Linux Enterprise Module for Live Patching: 15-SP2
SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS
SUSE Manager Server: 4.1
SUSE Manager Retail Branch Server: 4.1
SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Server for SAP: 15-SP2
ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
ocfs2-kmp-default: before 5.3.18-150200.24.112.1
gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
gfs2-kmp-default: before 5.3.18-150200.24.112.1
dlm-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
dlm-kmp-default: before 5.3.18-150200.24.112.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
cluster-md-kmp-default: before 5.3.18-150200.24.112.1
kernel-livepatch-SLE15-SP2_Update_26-debugsource: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default-debuginfo: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default: before 1-150200.5.5.1
kernel-default-livepatch-devel: before 5.3.18-150200.24.112.1
kernel-default-livepatch: before 5.3.18-150200.24.112.1
kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt-devel: before 5.3.18-150200.24.112.1
kernel-preempt-debugsource: before 5.3.18-150200.24.112.1
kernel-preempt-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt: before 5.3.18-150200.24.112.1
kernel-source: before 5.3.18-150200.24.112.1
kernel-macros: before 5.3.18-150200.24.112.1
kernel-docs: before 5.3.18-150200.24.112.1
kernel-devel: before 5.3.18-150200.24.112.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
reiserfs-kmp-default: before 5.3.18-150200.24.112.1
kernel-syms: before 5.3.18-150200.24.112.1
kernel-obs-build-debugsource: before 5.3.18-150200.24.112.1
kernel-obs-build: before 5.3.18-150200.24.112.1
kernel-default-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-devel: before 5.3.18-150200.24.112.1
kernel-default-debugsource: before 5.3.18-150200.24.112.1
kernel-default-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-base: before 5.3.18-150200.24.112.1.150200.9.52.2
kernel-default: before 5.3.18-150200.24.112.1
External linkshttp://www.suse.com/support/update/announcement/2022/suse-su-20221197-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU62028
Risk: Low
CVSSv3.1: 2.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-1016
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain access to sensitive information.
The vulnerability exists due to a use-after-free error in net/netfilter/nf_tables_core.c:nft_do_chain in Linux kernel.. A local user can trigger a use-after-free error and gain access to sensitive information.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Realtime Extension: 15-SP2
SUSE Linux Enterprise Micro: 5.0
SUSE Enterprise Storage: 7.1
SUSE Linux Enterprise High Availability: 15-SP2
SUSE Linux Enterprise Server for SAP Applications: 15-SP2
SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS
SUSE Linux Enterprise Module for Live Patching: 15-SP2
SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS
SUSE Manager Server: 4.1
SUSE Manager Retail Branch Server: 4.1
SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Server for SAP: 15-SP2
ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
ocfs2-kmp-default: before 5.3.18-150200.24.112.1
gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
gfs2-kmp-default: before 5.3.18-150200.24.112.1
dlm-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
dlm-kmp-default: before 5.3.18-150200.24.112.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
cluster-md-kmp-default: before 5.3.18-150200.24.112.1
kernel-livepatch-SLE15-SP2_Update_26-debugsource: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default-debuginfo: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default: before 1-150200.5.5.1
kernel-default-livepatch-devel: before 5.3.18-150200.24.112.1
kernel-default-livepatch: before 5.3.18-150200.24.112.1
kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt-devel: before 5.3.18-150200.24.112.1
kernel-preempt-debugsource: before 5.3.18-150200.24.112.1
kernel-preempt-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt: before 5.3.18-150200.24.112.1
kernel-source: before 5.3.18-150200.24.112.1
kernel-macros: before 5.3.18-150200.24.112.1
kernel-docs: before 5.3.18-150200.24.112.1
kernel-devel: before 5.3.18-150200.24.112.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
reiserfs-kmp-default: before 5.3.18-150200.24.112.1
kernel-syms: before 5.3.18-150200.24.112.1
kernel-obs-build-debugsource: before 5.3.18-150200.24.112.1
kernel-obs-build: before 5.3.18-150200.24.112.1
kernel-default-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-devel: before 5.3.18-150200.24.112.1
kernel-default-debugsource: before 5.3.18-150200.24.112.1
kernel-default-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-base: before 5.3.18-150200.24.112.1.150200.9.52.2
kernel-default: before 5.3.18-150200.24.112.1
External linkshttp://www.suse.com/support/update/announcement/2022/suse-su-20221197-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63428
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-1048
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to execute arbitrary code with elevated privileges.
The vulnerability exists due to a use-after-free error in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. A local user can execute arbitrary code with elevated privileges and perform a denial-of-service attack.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Realtime Extension: 15-SP2
SUSE Linux Enterprise Micro: 5.0
SUSE Enterprise Storage: 7.1
SUSE Linux Enterprise High Availability: 15-SP2
SUSE Linux Enterprise Server for SAP Applications: 15-SP2
SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS
SUSE Linux Enterprise Module for Live Patching: 15-SP2
SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS
SUSE Manager Server: 4.1
SUSE Manager Retail Branch Server: 4.1
SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Server for SAP: 15-SP2
ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
ocfs2-kmp-default: before 5.3.18-150200.24.112.1
gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
gfs2-kmp-default: before 5.3.18-150200.24.112.1
dlm-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
dlm-kmp-default: before 5.3.18-150200.24.112.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
cluster-md-kmp-default: before 5.3.18-150200.24.112.1
kernel-livepatch-SLE15-SP2_Update_26-debugsource: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default-debuginfo: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default: before 1-150200.5.5.1
kernel-default-livepatch-devel: before 5.3.18-150200.24.112.1
kernel-default-livepatch: before 5.3.18-150200.24.112.1
kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt-devel: before 5.3.18-150200.24.112.1
kernel-preempt-debugsource: before 5.3.18-150200.24.112.1
kernel-preempt-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt: before 5.3.18-150200.24.112.1
kernel-source: before 5.3.18-150200.24.112.1
kernel-macros: before 5.3.18-150200.24.112.1
kernel-docs: before 5.3.18-150200.24.112.1
kernel-devel: before 5.3.18-150200.24.112.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
reiserfs-kmp-default: before 5.3.18-150200.24.112.1
kernel-syms: before 5.3.18-150200.24.112.1
kernel-obs-build-debugsource: before 5.3.18-150200.24.112.1
kernel-obs-build: before 5.3.18-150200.24.112.1
kernel-default-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-devel: before 5.3.18-150200.24.112.1
kernel-default-debugsource: before 5.3.18-150200.24.112.1
kernel-default-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-base: before 5.3.18-150200.24.112.1.150200.9.52.2
kernel-default: before 5.3.18-150200.24.112.1
External linkshttp://www.suse.com/support/update/announcement/2022/suse-su-20221197-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU61765
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-1055
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a use-after-free error within the tc_new_tfilter in Linux kernel. A local user can run a specially crafted program to trigger a use-after-free error and execute arbitrary code with elevated privileges.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Realtime Extension: 15-SP2
SUSE Linux Enterprise Micro: 5.0
SUSE Enterprise Storage: 7.1
SUSE Linux Enterprise High Availability: 15-SP2
SUSE Linux Enterprise Server for SAP Applications: 15-SP2
SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS
SUSE Linux Enterprise Module for Live Patching: 15-SP2
SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS
SUSE Manager Server: 4.1
SUSE Manager Retail Branch Server: 4.1
SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Server for SAP: 15-SP2
ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
ocfs2-kmp-default: before 5.3.18-150200.24.112.1
gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
gfs2-kmp-default: before 5.3.18-150200.24.112.1
dlm-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
dlm-kmp-default: before 5.3.18-150200.24.112.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
cluster-md-kmp-default: before 5.3.18-150200.24.112.1
kernel-livepatch-SLE15-SP2_Update_26-debugsource: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default-debuginfo: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default: before 1-150200.5.5.1
kernel-default-livepatch-devel: before 5.3.18-150200.24.112.1
kernel-default-livepatch: before 5.3.18-150200.24.112.1
kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt-devel: before 5.3.18-150200.24.112.1
kernel-preempt-debugsource: before 5.3.18-150200.24.112.1
kernel-preempt-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt: before 5.3.18-150200.24.112.1
kernel-source: before 5.3.18-150200.24.112.1
kernel-macros: before 5.3.18-150200.24.112.1
kernel-docs: before 5.3.18-150200.24.112.1
kernel-devel: before 5.3.18-150200.24.112.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
reiserfs-kmp-default: before 5.3.18-150200.24.112.1
kernel-syms: before 5.3.18-150200.24.112.1
kernel-obs-build-debugsource: before 5.3.18-150200.24.112.1
kernel-obs-build: before 5.3.18-150200.24.112.1
kernel-default-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-devel: before 5.3.18-150200.24.112.1
kernel-default-debugsource: before 5.3.18-150200.24.112.1
kernel-default-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-base: before 5.3.18-150200.24.112.1.150200.9.52.2
kernel-default: before 5.3.18-150200.24.112.1
External linkshttp://www.suse.com/support/update/announcement/2022/suse-su-20221197-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63305
Risk: Low
CVSSv3.1: 6.1 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-23036
Exploit availability: No
DescriptionThe vulnerability allows a local user to bypass implemented security restrictions.
The vulnerability exists due to a race condition in the blkfront ring buffer. A malicious backend can exploit the race condition and read or write data or perform a denial of service attack.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Realtime Extension: 15-SP2
SUSE Linux Enterprise Micro: 5.0
SUSE Enterprise Storage: 7.1
SUSE Linux Enterprise High Availability: 15-SP2
SUSE Linux Enterprise Server for SAP Applications: 15-SP2
SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS
SUSE Linux Enterprise Module for Live Patching: 15-SP2
SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS
SUSE Manager Server: 4.1
SUSE Manager Retail Branch Server: 4.1
SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Server for SAP: 15-SP2
ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
ocfs2-kmp-default: before 5.3.18-150200.24.112.1
gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
gfs2-kmp-default: before 5.3.18-150200.24.112.1
dlm-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
dlm-kmp-default: before 5.3.18-150200.24.112.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
cluster-md-kmp-default: before 5.3.18-150200.24.112.1
kernel-livepatch-SLE15-SP2_Update_26-debugsource: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default-debuginfo: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default: before 1-150200.5.5.1
kernel-default-livepatch-devel: before 5.3.18-150200.24.112.1
kernel-default-livepatch: before 5.3.18-150200.24.112.1
kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt-devel: before 5.3.18-150200.24.112.1
kernel-preempt-debugsource: before 5.3.18-150200.24.112.1
kernel-preempt-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt: before 5.3.18-150200.24.112.1
kernel-source: before 5.3.18-150200.24.112.1
kernel-macros: before 5.3.18-150200.24.112.1
kernel-docs: before 5.3.18-150200.24.112.1
kernel-devel: before 5.3.18-150200.24.112.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
reiserfs-kmp-default: before 5.3.18-150200.24.112.1
kernel-syms: before 5.3.18-150200.24.112.1
kernel-obs-build-debugsource: before 5.3.18-150200.24.112.1
kernel-obs-build: before 5.3.18-150200.24.112.1
kernel-default-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-devel: before 5.3.18-150200.24.112.1
kernel-default-debugsource: before 5.3.18-150200.24.112.1
kernel-default-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-base: before 5.3.18-150200.24.112.1.150200.9.52.2
kernel-default: before 5.3.18-150200.24.112.1
External linkshttp://www.suse.com/support/update/announcement/2022/suse-su-20221197-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63306
Risk: Low
CVSSv3.1: 6.1 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-23037
Exploit availability: No
DescriptionThe vulnerability allows a local user to bypass implemented security restrictions.
The vulnerability exists due to a race condition in the netfront ring buffer. A malicious backend can exploit the race condition and read or write data or perform a denial of service attack.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Realtime Extension: 15-SP2
SUSE Linux Enterprise Micro: 5.0
SUSE Enterprise Storage: 7.1
SUSE Linux Enterprise High Availability: 15-SP2
SUSE Linux Enterprise Server for SAP Applications: 15-SP2
SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS
SUSE Linux Enterprise Module for Live Patching: 15-SP2
SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS
SUSE Manager Server: 4.1
SUSE Manager Retail Branch Server: 4.1
SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Server for SAP: 15-SP2
ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
ocfs2-kmp-default: before 5.3.18-150200.24.112.1
gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
gfs2-kmp-default: before 5.3.18-150200.24.112.1
dlm-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
dlm-kmp-default: before 5.3.18-150200.24.112.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
cluster-md-kmp-default: before 5.3.18-150200.24.112.1
kernel-livepatch-SLE15-SP2_Update_26-debugsource: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default-debuginfo: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default: before 1-150200.5.5.1
kernel-default-livepatch-devel: before 5.3.18-150200.24.112.1
kernel-default-livepatch: before 5.3.18-150200.24.112.1
kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt-devel: before 5.3.18-150200.24.112.1
kernel-preempt-debugsource: before 5.3.18-150200.24.112.1
kernel-preempt-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt: before 5.3.18-150200.24.112.1
kernel-source: before 5.3.18-150200.24.112.1
kernel-macros: before 5.3.18-150200.24.112.1
kernel-docs: before 5.3.18-150200.24.112.1
kernel-devel: before 5.3.18-150200.24.112.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
reiserfs-kmp-default: before 5.3.18-150200.24.112.1
kernel-syms: before 5.3.18-150200.24.112.1
kernel-obs-build-debugsource: before 5.3.18-150200.24.112.1
kernel-obs-build: before 5.3.18-150200.24.112.1
kernel-default-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-devel: before 5.3.18-150200.24.112.1
kernel-default-debugsource: before 5.3.18-150200.24.112.1
kernel-default-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-base: before 5.3.18-150200.24.112.1.150200.9.52.2
kernel-default: before 5.3.18-150200.24.112.1
External linkshttp://www.suse.com/support/update/announcement/2022/suse-su-20221197-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63307
Risk: Low
CVSSv3.1: 6.1 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-23038
Exploit availability: No
DescriptionThe vulnerability allows a local user to bypass implemented security restrictions.
The vulnerability exists due to a race condition in the scsifront ring buffer. A malicious backend can exploit the race condition and read or write data or perform a denial of service attack.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Realtime Extension: 15-SP2
SUSE Linux Enterprise Micro: 5.0
SUSE Enterprise Storage: 7.1
SUSE Linux Enterprise High Availability: 15-SP2
SUSE Linux Enterprise Server for SAP Applications: 15-SP2
SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS
SUSE Linux Enterprise Module for Live Patching: 15-SP2
SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS
SUSE Manager Server: 4.1
SUSE Manager Retail Branch Server: 4.1
SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Server for SAP: 15-SP2
ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
ocfs2-kmp-default: before 5.3.18-150200.24.112.1
gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
gfs2-kmp-default: before 5.3.18-150200.24.112.1
dlm-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
dlm-kmp-default: before 5.3.18-150200.24.112.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
cluster-md-kmp-default: before 5.3.18-150200.24.112.1
kernel-livepatch-SLE15-SP2_Update_26-debugsource: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default-debuginfo: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default: before 1-150200.5.5.1
kernel-default-livepatch-devel: before 5.3.18-150200.24.112.1
kernel-default-livepatch: before 5.3.18-150200.24.112.1
kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt-devel: before 5.3.18-150200.24.112.1
kernel-preempt-debugsource: before 5.3.18-150200.24.112.1
kernel-preempt-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt: before 5.3.18-150200.24.112.1
kernel-source: before 5.3.18-150200.24.112.1
kernel-macros: before 5.3.18-150200.24.112.1
kernel-docs: before 5.3.18-150200.24.112.1
kernel-devel: before 5.3.18-150200.24.112.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
reiserfs-kmp-default: before 5.3.18-150200.24.112.1
kernel-syms: before 5.3.18-150200.24.112.1
kernel-obs-build-debugsource: before 5.3.18-150200.24.112.1
kernel-obs-build: before 5.3.18-150200.24.112.1
kernel-default-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-devel: before 5.3.18-150200.24.112.1
kernel-default-debugsource: before 5.3.18-150200.24.112.1
kernel-default-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-base: before 5.3.18-150200.24.112.1.150200.9.52.2
kernel-default: before 5.3.18-150200.24.112.1
External linkshttp://www.suse.com/support/update/announcement/2022/suse-su-20221197-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63308
Risk: Low
CVSSv3.1: 6.1 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-23039
Exploit availability: No
DescriptionThe vulnerability allows a local user to bypass implemented security restrictions.
The vulnerability exists due to a race condition in the gntalloc ring buffer. A malicious backend can exploit the race condition and read or write data or perform a denial of service attack.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Realtime Extension: 15-SP2
SUSE Linux Enterprise Micro: 5.0
SUSE Enterprise Storage: 7.1
SUSE Linux Enterprise High Availability: 15-SP2
SUSE Linux Enterprise Server for SAP Applications: 15-SP2
SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS
SUSE Linux Enterprise Module for Live Patching: 15-SP2
SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS
SUSE Manager Server: 4.1
SUSE Manager Retail Branch Server: 4.1
SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Server for SAP: 15-SP2
ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
ocfs2-kmp-default: before 5.3.18-150200.24.112.1
gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
gfs2-kmp-default: before 5.3.18-150200.24.112.1
dlm-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
dlm-kmp-default: before 5.3.18-150200.24.112.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
cluster-md-kmp-default: before 5.3.18-150200.24.112.1
kernel-livepatch-SLE15-SP2_Update_26-debugsource: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default-debuginfo: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default: before 1-150200.5.5.1
kernel-default-livepatch-devel: before 5.3.18-150200.24.112.1
kernel-default-livepatch: before 5.3.18-150200.24.112.1
kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt-devel: before 5.3.18-150200.24.112.1
kernel-preempt-debugsource: before 5.3.18-150200.24.112.1
kernel-preempt-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt: before 5.3.18-150200.24.112.1
kernel-source: before 5.3.18-150200.24.112.1
kernel-macros: before 5.3.18-150200.24.112.1
kernel-docs: before 5.3.18-150200.24.112.1
kernel-devel: before 5.3.18-150200.24.112.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
reiserfs-kmp-default: before 5.3.18-150200.24.112.1
kernel-syms: before 5.3.18-150200.24.112.1
kernel-obs-build-debugsource: before 5.3.18-150200.24.112.1
kernel-obs-build: before 5.3.18-150200.24.112.1
kernel-default-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-devel: before 5.3.18-150200.24.112.1
kernel-default-debugsource: before 5.3.18-150200.24.112.1
kernel-default-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-base: before 5.3.18-150200.24.112.1.150200.9.52.2
kernel-default: before 5.3.18-150200.24.112.1
External linkshttp://www.suse.com/support/update/announcement/2022/suse-su-20221197-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63309
Risk: Low
CVSSv3.1: 6.1 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-23040
Exploit availability: No
DescriptionThe vulnerability allows a local user to bypass implemented security restrictions.
The vulnerability exists due to a race condition in the xenbus ring buffer. A malicious backend can exploit the race condition and read or write data or perform a denial of service attack.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Realtime Extension: 15-SP2
SUSE Linux Enterprise Micro: 5.0
SUSE Enterprise Storage: 7.1
SUSE Linux Enterprise High Availability: 15-SP2
SUSE Linux Enterprise Server for SAP Applications: 15-SP2
SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS
SUSE Linux Enterprise Module for Live Patching: 15-SP2
SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS
SUSE Manager Server: 4.1
SUSE Manager Retail Branch Server: 4.1
SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Server for SAP: 15-SP2
ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
ocfs2-kmp-default: before 5.3.18-150200.24.112.1
gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
gfs2-kmp-default: before 5.3.18-150200.24.112.1
dlm-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
dlm-kmp-default: before 5.3.18-150200.24.112.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
cluster-md-kmp-default: before 5.3.18-150200.24.112.1
kernel-livepatch-SLE15-SP2_Update_26-debugsource: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default-debuginfo: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default: before 1-150200.5.5.1
kernel-default-livepatch-devel: before 5.3.18-150200.24.112.1
kernel-default-livepatch: before 5.3.18-150200.24.112.1
kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt-devel: before 5.3.18-150200.24.112.1
kernel-preempt-debugsource: before 5.3.18-150200.24.112.1
kernel-preempt-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt: before 5.3.18-150200.24.112.1
kernel-source: before 5.3.18-150200.24.112.1
kernel-macros: before 5.3.18-150200.24.112.1
kernel-docs: before 5.3.18-150200.24.112.1
kernel-devel: before 5.3.18-150200.24.112.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
reiserfs-kmp-default: before 5.3.18-150200.24.112.1
kernel-syms: before 5.3.18-150200.24.112.1
kernel-obs-build-debugsource: before 5.3.18-150200.24.112.1
kernel-obs-build: before 5.3.18-150200.24.112.1
kernel-default-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-devel: before 5.3.18-150200.24.112.1
kernel-default-debugsource: before 5.3.18-150200.24.112.1
kernel-default-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-base: before 5.3.18-150200.24.112.1.150200.9.52.2
kernel-default: before 5.3.18-150200.24.112.1
External linkshttp://www.suse.com/support/update/announcement/2022/suse-su-20221197-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63310
Risk: Low
CVSSv3.1: 6.1 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-23041
Exploit availability: No
DescriptionThe vulnerability allows a local user to bypass implemented security restrictions.
The vulnerability exists due to a race condition in blkfront, netfront, scsifront, usbfront, dmabuf, xenbus, 9p, kbdfront, and pvcalls ring buffers. A malicious backend can exploit the race condition and read or write data or perform a denial of service attack.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Realtime Extension: 15-SP2
SUSE Linux Enterprise Micro: 5.0
SUSE Enterprise Storage: 7.1
SUSE Linux Enterprise High Availability: 15-SP2
SUSE Linux Enterprise Server for SAP Applications: 15-SP2
SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS
SUSE Linux Enterprise Module for Live Patching: 15-SP2
SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS
SUSE Manager Server: 4.1
SUSE Manager Retail Branch Server: 4.1
SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Server for SAP: 15-SP2
ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
ocfs2-kmp-default: before 5.3.18-150200.24.112.1
gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
gfs2-kmp-default: before 5.3.18-150200.24.112.1
dlm-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
dlm-kmp-default: before 5.3.18-150200.24.112.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
cluster-md-kmp-default: before 5.3.18-150200.24.112.1
kernel-livepatch-SLE15-SP2_Update_26-debugsource: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default-debuginfo: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default: before 1-150200.5.5.1
kernel-default-livepatch-devel: before 5.3.18-150200.24.112.1
kernel-default-livepatch: before 5.3.18-150200.24.112.1
kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt-devel: before 5.3.18-150200.24.112.1
kernel-preempt-debugsource: before 5.3.18-150200.24.112.1
kernel-preempt-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt: before 5.3.18-150200.24.112.1
kernel-source: before 5.3.18-150200.24.112.1
kernel-macros: before 5.3.18-150200.24.112.1
kernel-docs: before 5.3.18-150200.24.112.1
kernel-devel: before 5.3.18-150200.24.112.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
reiserfs-kmp-default: before 5.3.18-150200.24.112.1
kernel-syms: before 5.3.18-150200.24.112.1
kernel-obs-build-debugsource: before 5.3.18-150200.24.112.1
kernel-obs-build: before 5.3.18-150200.24.112.1
kernel-default-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-devel: before 5.3.18-150200.24.112.1
kernel-default-debugsource: before 5.3.18-150200.24.112.1
kernel-default-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-base: before 5.3.18-150200.24.112.1.150200.9.52.2
kernel-default: before 5.3.18-150200.24.112.1
External linkshttp://www.suse.com/support/update/announcement/2022/suse-su-20221197-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63311
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-23042
CWE-ID:
CWE-617 - Reachable Assertion
Exploit availability: No
DescriptionThe vulnerability allows a local user to bypass implemented security restrictions.
The vulnerability exists due to reachable assertion in the netfront ring buffer. A malicious backend can exploit the race condition and read or write data or perform a denial of service attack.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Realtime Extension: 15-SP2
SUSE Linux Enterprise Micro: 5.0
SUSE Enterprise Storage: 7.1
SUSE Linux Enterprise High Availability: 15-SP2
SUSE Linux Enterprise Server for SAP Applications: 15-SP2
SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS
SUSE Linux Enterprise Module for Live Patching: 15-SP2
SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS
SUSE Manager Server: 4.1
SUSE Manager Retail Branch Server: 4.1
SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Server for SAP: 15-SP2
ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
ocfs2-kmp-default: before 5.3.18-150200.24.112.1
gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
gfs2-kmp-default: before 5.3.18-150200.24.112.1
dlm-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
dlm-kmp-default: before 5.3.18-150200.24.112.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
cluster-md-kmp-default: before 5.3.18-150200.24.112.1
kernel-livepatch-SLE15-SP2_Update_26-debugsource: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default-debuginfo: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default: before 1-150200.5.5.1
kernel-default-livepatch-devel: before 5.3.18-150200.24.112.1
kernel-default-livepatch: before 5.3.18-150200.24.112.1
kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt-devel: before 5.3.18-150200.24.112.1
kernel-preempt-debugsource: before 5.3.18-150200.24.112.1
kernel-preempt-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt: before 5.3.18-150200.24.112.1
kernel-source: before 5.3.18-150200.24.112.1
kernel-macros: before 5.3.18-150200.24.112.1
kernel-docs: before 5.3.18-150200.24.112.1
kernel-devel: before 5.3.18-150200.24.112.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
reiserfs-kmp-default: before 5.3.18-150200.24.112.1
kernel-syms: before 5.3.18-150200.24.112.1
kernel-obs-build-debugsource: before 5.3.18-150200.24.112.1
kernel-obs-build: before 5.3.18-150200.24.112.1
kernel-default-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-devel: before 5.3.18-150200.24.112.1
kernel-default-debugsource: before 5.3.18-150200.24.112.1
kernel-default-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-base: before 5.3.18-150200.24.112.1.150200.9.52.2
kernel-default: before 5.3.18-150200.24.112.1
External linkshttp://www.suse.com/support/update/announcement/2022/suse-su-20221197-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU62601
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-26490
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error within the st21nfca_connectivity_event_received() function in drivers/nfc/st21nfca/se.c in Linux kernel. A local user can run a specially crafted program to trigger buffer overflow and execute arbitrary code with elevated privileges.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Realtime Extension: 15-SP2
SUSE Linux Enterprise Micro: 5.0
SUSE Enterprise Storage: 7.1
SUSE Linux Enterprise High Availability: 15-SP2
SUSE Linux Enterprise Server for SAP Applications: 15-SP2
SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS
SUSE Linux Enterprise Module for Live Patching: 15-SP2
SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS
SUSE Manager Server: 4.1
SUSE Manager Retail Branch Server: 4.1
SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Server for SAP: 15-SP2
ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
ocfs2-kmp-default: before 5.3.18-150200.24.112.1
gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
gfs2-kmp-default: before 5.3.18-150200.24.112.1
dlm-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
dlm-kmp-default: before 5.3.18-150200.24.112.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
cluster-md-kmp-default: before 5.3.18-150200.24.112.1
kernel-livepatch-SLE15-SP2_Update_26-debugsource: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default-debuginfo: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default: before 1-150200.5.5.1
kernel-default-livepatch-devel: before 5.3.18-150200.24.112.1
kernel-default-livepatch: before 5.3.18-150200.24.112.1
kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt-devel: before 5.3.18-150200.24.112.1
kernel-preempt-debugsource: before 5.3.18-150200.24.112.1
kernel-preempt-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt: before 5.3.18-150200.24.112.1
kernel-source: before 5.3.18-150200.24.112.1
kernel-macros: before 5.3.18-150200.24.112.1
kernel-docs: before 5.3.18-150200.24.112.1
kernel-devel: before 5.3.18-150200.24.112.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
reiserfs-kmp-default: before 5.3.18-150200.24.112.1
kernel-syms: before 5.3.18-150200.24.112.1
kernel-obs-build-debugsource: before 5.3.18-150200.24.112.1
kernel-obs-build: before 5.3.18-150200.24.112.1
kernel-default-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-devel: before 5.3.18-150200.24.112.1
kernel-default-debugsource: before 5.3.18-150200.24.112.1
kernel-default-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-base: before 5.3.18-150200.24.112.1.150200.9.52.2
kernel-default: before 5.3.18-150200.24.112.1
External linkshttp://www.suse.com/support/update/announcement/2022/suse-su-20221197-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63318
Risk: Low
CVSSv3.1: 5.3 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-26966
CWE-ID:
CWE-416 - Use After Free
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists due to a use-after-free error in drivers/net/usb/sr9700.c in the Linux kernel. A remote attacker can pass specially crafted data and obtain sensitive information from heap memory.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Realtime Extension: 15-SP2
SUSE Linux Enterprise Micro: 5.0
SUSE Enterprise Storage: 7.1
SUSE Linux Enterprise High Availability: 15-SP2
SUSE Linux Enterprise Server for SAP Applications: 15-SP2
SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS
SUSE Linux Enterprise Module for Live Patching: 15-SP2
SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS
SUSE Manager Server: 4.1
SUSE Manager Retail Branch Server: 4.1
SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Server for SAP: 15-SP2
ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
ocfs2-kmp-default: before 5.3.18-150200.24.112.1
gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
gfs2-kmp-default: before 5.3.18-150200.24.112.1
dlm-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
dlm-kmp-default: before 5.3.18-150200.24.112.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
cluster-md-kmp-default: before 5.3.18-150200.24.112.1
kernel-livepatch-SLE15-SP2_Update_26-debugsource: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default-debuginfo: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default: before 1-150200.5.5.1
kernel-default-livepatch-devel: before 5.3.18-150200.24.112.1
kernel-default-livepatch: before 5.3.18-150200.24.112.1
kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt-devel: before 5.3.18-150200.24.112.1
kernel-preempt-debugsource: before 5.3.18-150200.24.112.1
kernel-preempt-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt: before 5.3.18-150200.24.112.1
kernel-source: before 5.3.18-150200.24.112.1
kernel-macros: before 5.3.18-150200.24.112.1
kernel-docs: before 5.3.18-150200.24.112.1
kernel-devel: before 5.3.18-150200.24.112.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
reiserfs-kmp-default: before 5.3.18-150200.24.112.1
kernel-syms: before 5.3.18-150200.24.112.1
kernel-obs-build-debugsource: before 5.3.18-150200.24.112.1
kernel-obs-build: before 5.3.18-150200.24.112.1
kernel-default-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-devel: before 5.3.18-150200.24.112.1
kernel-default-debugsource: before 5.3.18-150200.24.112.1
kernel-default-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-base: before 5.3.18-150200.24.112.1.150200.9.52.2
kernel-default: before 5.3.18-150200.24.112.1
External linkshttp://www.suse.com/support/update/announcement/2022/suse-su-20221197-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU61672
Risk: Low
CVSSv3.1: 6.3 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C]
CVE-ID: CVE-2022-27666
CWE-ID:
CWE-122 - Heap-based Buffer Overflow
Exploit availability: Yes
DescriptionThe vulnerability allows a local user to escalate privileges on the system.
The vulnerability exists due to a boundary error within IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c in Linux kernel. A local unprivileged user can pass specially crafted data to the system, trigger a heap-based buffer overflow and execute arbitrary code with elevated privileges.
Update the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Realtime Extension: 15-SP2
SUSE Linux Enterprise Micro: 5.0
SUSE Enterprise Storage: 7.1
SUSE Linux Enterprise High Availability: 15-SP2
SUSE Linux Enterprise Server for SAP Applications: 15-SP2
SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS
SUSE Linux Enterprise Module for Live Patching: 15-SP2
SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS
SUSE Manager Server: 4.1
SUSE Manager Retail Branch Server: 4.1
SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Server for SAP: 15-SP2
ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
ocfs2-kmp-default: before 5.3.18-150200.24.112.1
gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
gfs2-kmp-default: before 5.3.18-150200.24.112.1
dlm-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
dlm-kmp-default: before 5.3.18-150200.24.112.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
cluster-md-kmp-default: before 5.3.18-150200.24.112.1
kernel-livepatch-SLE15-SP2_Update_26-debugsource: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default-debuginfo: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default: before 1-150200.5.5.1
kernel-default-livepatch-devel: before 5.3.18-150200.24.112.1
kernel-default-livepatch: before 5.3.18-150200.24.112.1
kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt-devel: before 5.3.18-150200.24.112.1
kernel-preempt-debugsource: before 5.3.18-150200.24.112.1
kernel-preempt-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt: before 5.3.18-150200.24.112.1
kernel-source: before 5.3.18-150200.24.112.1
kernel-macros: before 5.3.18-150200.24.112.1
kernel-docs: before 5.3.18-150200.24.112.1
kernel-devel: before 5.3.18-150200.24.112.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
reiserfs-kmp-default: before 5.3.18-150200.24.112.1
kernel-syms: before 5.3.18-150200.24.112.1
kernel-obs-build-debugsource: before 5.3.18-150200.24.112.1
kernel-obs-build: before 5.3.18-150200.24.112.1
kernel-default-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-devel: before 5.3.18-150200.24.112.1
kernel-default-debugsource: before 5.3.18-150200.24.112.1
kernel-default-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-base: before 5.3.18-150200.24.112.1.150200.9.52.2
kernel-default: before 5.3.18-150200.24.112.1
External linkshttp://www.suse.com/support/update/announcement/2022/suse-su-20221197-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.
EUVDB-ID: #VU63160
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-28388
CWE-ID:
CWE-415 - Double Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to execute arbitrary code with elevated privileges.
The vulnerability exists due to boundary error in the usb_8dev_start_xmit in drivers/net/can/usb/usb_8dev.c. A local user can pass specially crafted data to the application, trigger double free error and execute arbitrary code with elevated privileges.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Realtime Extension: 15-SP2
SUSE Linux Enterprise Micro: 5.0
SUSE Enterprise Storage: 7.1
SUSE Linux Enterprise High Availability: 15-SP2
SUSE Linux Enterprise Server for SAP Applications: 15-SP2
SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS
SUSE Linux Enterprise Module for Live Patching: 15-SP2
SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS
SUSE Manager Server: 4.1
SUSE Manager Retail Branch Server: 4.1
SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Server for SAP: 15-SP2
ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
ocfs2-kmp-default: before 5.3.18-150200.24.112.1
gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
gfs2-kmp-default: before 5.3.18-150200.24.112.1
dlm-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
dlm-kmp-default: before 5.3.18-150200.24.112.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
cluster-md-kmp-default: before 5.3.18-150200.24.112.1
kernel-livepatch-SLE15-SP2_Update_26-debugsource: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default-debuginfo: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default: before 1-150200.5.5.1
kernel-default-livepatch-devel: before 5.3.18-150200.24.112.1
kernel-default-livepatch: before 5.3.18-150200.24.112.1
kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt-devel: before 5.3.18-150200.24.112.1
kernel-preempt-debugsource: before 5.3.18-150200.24.112.1
kernel-preempt-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt: before 5.3.18-150200.24.112.1
kernel-source: before 5.3.18-150200.24.112.1
kernel-macros: before 5.3.18-150200.24.112.1
kernel-docs: before 5.3.18-150200.24.112.1
kernel-devel: before 5.3.18-150200.24.112.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
reiserfs-kmp-default: before 5.3.18-150200.24.112.1
kernel-syms: before 5.3.18-150200.24.112.1
kernel-obs-build-debugsource: before 5.3.18-150200.24.112.1
kernel-obs-build: before 5.3.18-150200.24.112.1
kernel-default-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-devel: before 5.3.18-150200.24.112.1
kernel-default-debugsource: before 5.3.18-150200.24.112.1
kernel-default-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-base: before 5.3.18-150200.24.112.1.150200.9.52.2
kernel-default: before 5.3.18-150200.24.112.1
External linkshttp://www.suse.com/support/update/announcement/2022/suse-su-20221197-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63162
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-28389
CWE-ID:
CWE-415 - Double Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to execute arbitrary code with elevated privileges.
The vulnerability exists due to boundary error in mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c. A local user can pass specially crafted data to the application, trigger double free error and execute arbitrary code with elevated privileges.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Realtime Extension: 15-SP2
SUSE Linux Enterprise Micro: 5.0
SUSE Enterprise Storage: 7.1
SUSE Linux Enterprise High Availability: 15-SP2
SUSE Linux Enterprise Server for SAP Applications: 15-SP2
SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS
SUSE Linux Enterprise Module for Live Patching: 15-SP2
SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS
SUSE Manager Server: 4.1
SUSE Manager Retail Branch Server: 4.1
SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Server for SAP: 15-SP2
ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
ocfs2-kmp-default: before 5.3.18-150200.24.112.1
gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
gfs2-kmp-default: before 5.3.18-150200.24.112.1
dlm-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
dlm-kmp-default: before 5.3.18-150200.24.112.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
cluster-md-kmp-default: before 5.3.18-150200.24.112.1
kernel-livepatch-SLE15-SP2_Update_26-debugsource: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default-debuginfo: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default: before 1-150200.5.5.1
kernel-default-livepatch-devel: before 5.3.18-150200.24.112.1
kernel-default-livepatch: before 5.3.18-150200.24.112.1
kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt-devel: before 5.3.18-150200.24.112.1
kernel-preempt-debugsource: before 5.3.18-150200.24.112.1
kernel-preempt-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt: before 5.3.18-150200.24.112.1
kernel-source: before 5.3.18-150200.24.112.1
kernel-macros: before 5.3.18-150200.24.112.1
kernel-docs: before 5.3.18-150200.24.112.1
kernel-devel: before 5.3.18-150200.24.112.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
reiserfs-kmp-default: before 5.3.18-150200.24.112.1
kernel-syms: before 5.3.18-150200.24.112.1
kernel-obs-build-debugsource: before 5.3.18-150200.24.112.1
kernel-obs-build: before 5.3.18-150200.24.112.1
kernel-default-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-devel: before 5.3.18-150200.24.112.1
kernel-default-debugsource: before 5.3.18-150200.24.112.1
kernel-default-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-base: before 5.3.18-150200.24.112.1.150200.9.52.2
kernel-default: before 5.3.18-150200.24.112.1
External linkshttp://www.suse.com/support/update/announcement/2022/suse-su-20221197-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
EUVDB-ID: #VU63164
Risk: Low
CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-28390
CWE-ID:
CWE-415 - Double Free
Exploit availability: No
DescriptionThe vulnerability allows a local user to execute arbitrary code with elevated privileges.
The vulnerability exists due to boundary error in ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c. A local user can pass specially crafted data to the application, trigger double free error and execute arbitrary code with elevated privileges.
MitigationUpdate the affected package the Linux Kernel to the latest version.
Vulnerable software versionsSUSE Linux Enterprise Realtime Extension: 15-SP2
SUSE Linux Enterprise Micro: 5.0
SUSE Enterprise Storage: 7.1
SUSE Linux Enterprise High Availability: 15-SP2
SUSE Linux Enterprise Server for SAP Applications: 15-SP2
SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS
SUSE Linux Enterprise Module for Live Patching: 15-SP2
SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS
SUSE Manager Server: 4.1
SUSE Manager Retail Branch Server: 4.1
SUSE Manager Proxy: 4.1
SUSE Linux Enterprise Server for SAP: 15-SP2
ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
ocfs2-kmp-default: before 5.3.18-150200.24.112.1
gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
gfs2-kmp-default: before 5.3.18-150200.24.112.1
dlm-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
dlm-kmp-default: before 5.3.18-150200.24.112.1
cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
cluster-md-kmp-default: before 5.3.18-150200.24.112.1
kernel-livepatch-SLE15-SP2_Update_26-debugsource: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default-debuginfo: before 1-150200.5.5.1
kernel-livepatch-5_3_18-150200_24_112-default: before 1-150200.5.5.1
kernel-default-livepatch-devel: before 5.3.18-150200.24.112.1
kernel-default-livepatch: before 5.3.18-150200.24.112.1
kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt-devel: before 5.3.18-150200.24.112.1
kernel-preempt-debugsource: before 5.3.18-150200.24.112.1
kernel-preempt-debuginfo: before 5.3.18-150200.24.112.1
kernel-preempt: before 5.3.18-150200.24.112.1
kernel-source: before 5.3.18-150200.24.112.1
kernel-macros: before 5.3.18-150200.24.112.1
kernel-docs: before 5.3.18-150200.24.112.1
kernel-devel: before 5.3.18-150200.24.112.1
reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.112.1
reiserfs-kmp-default: before 5.3.18-150200.24.112.1
kernel-syms: before 5.3.18-150200.24.112.1
kernel-obs-build-debugsource: before 5.3.18-150200.24.112.1
kernel-obs-build: before 5.3.18-150200.24.112.1
kernel-default-devel-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-devel: before 5.3.18-150200.24.112.1
kernel-default-debugsource: before 5.3.18-150200.24.112.1
kernel-default-debuginfo: before 5.3.18-150200.24.112.1
kernel-default-base: before 5.3.18-150200.24.112.1.150200.9.52.2
kernel-default: before 5.3.18-150200.24.112.1
External linkshttp://www.suse.com/support/update/announcement/2022/suse-su-20221197-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.