SUSE update for the Linux Kernel

Published: 2022-12-26 | Updated: 2023-07-03

Risk	Medium
Patch available	YES
Number of vulnerabilities	44
CVE-ID	CVE-2021-4037 CVE-2022-2153 CVE-2022-2602 CVE-2022-28693 CVE-2022-28748 CVE-2022-2964 CVE-2022-2978 CVE-2022-3169 CVE-2022-3176 CVE-2022-3424 CVE-2022-3521 CVE-2022-3524 CVE-2022-3535 CVE-2022-3542 CVE-2022-3545 CVE-2022-3565 CVE-2022-3567 CVE-2022-3577 CVE-2022-3586 CVE-2022-3594 CVE-2022-3621 CVE-2022-3625 CVE-2022-3628 CVE-2022-3629 CVE-2022-3635 CVE-2022-3646 CVE-2022-3649 CVE-2022-3707 CVE-2022-3903 CVE-2022-39189 CVE-2022-40307 CVE-2022-40768 CVE-2022-4095 CVE-2022-4129 CVE-2022-4139 CVE-2022-41850 CVE-2022-41858 CVE-2022-42703 CVE-2022-42895 CVE-2022-42896 CVE-2022-43750 CVE-2022-4378 CVE-2022-43945 CVE-2022-45934
CWE-ID	CWE-284 CWE-476 CWE-416 CWE-1037 CWE-401 CWE-787 CWE-399 CWE-362 CWE-119 CWE-532 CWE-415 CWE-264 CWE-824 CWE-121 CWE-190
Exploitation vector	Network
Public exploit	Public exploit code for vulnerability #3 is available. Public exploit code for vulnerability #38 is available. Public exploit code for vulnerability #42 is available.
Vulnerable software Subscribe	SUSE Enterprise Storage Operating systems & Components / Operating system SUSE Linux Enterprise High Availability Operating systems & Components / Operating system SUSE Linux Enterprise Server for SAP Applications Operating systems & Components / Operating system SUSE Linux Enterprise Server Operating systems & Components / Operating system SUSE Linux Enterprise Module for Live Patching Operating systems & Components / Operating system SUSE Linux Enterprise High Performance Computing Operating systems & Components / Operating system SUSE Manager Server Operating systems & Components / Operating system SUSE Manager Retail Branch Server Operating systems & Components / Operating system SUSE Manager Proxy Operating systems & Components / Operating system SUSE Linux Enterprise Server for SAP Operating systems & Components / Operating system ocfs2-kmp-default-debuginfo Operating systems & Components / Operating system package or component ocfs2-kmp-default Operating systems & Components / Operating system package or component gfs2-kmp-default-debuginfo Operating systems & Components / Operating system package or component gfs2-kmp-default Operating systems & Components / Operating system package or component dlm-kmp-default-debuginfo Operating systems & Components / Operating system package or component dlm-kmp-default Operating systems & Components / Operating system package or component cluster-md-kmp-default-debuginfo Operating systems & Components / Operating system package or component cluster-md-kmp-default Operating systems & Components / Operating system package or component kernel-livepatch-SLE15-SP2_Update_32-debugsource Operating systems & Components / Operating system package or component kernel-livepatch-5_3_18-150200_24_139-default-debuginfo Operating systems & Components / Operating system package or component kernel-livepatch-5_3_18-150200_24_139-default Operating systems & Components / Operating system package or component kernel-default-livepatch-devel Operating systems & Components / Operating system package or component kernel-default-livepatch Operating systems & Components / Operating system package or component kernel-preempt-devel-debuginfo Operating systems & Components / Operating system package or component kernel-preempt-devel Operating systems & Components / Operating system package or component kernel-preempt-debugsource Operating systems & Components / Operating system package or component kernel-preempt-debuginfo Operating systems & Components / Operating system package or component kernel-preempt Operating systems & Components / Operating system package or component kernel-source Operating systems & Components / Operating system package or component kernel-macros Operating systems & Components / Operating system package or component kernel-docs Operating systems & Components / Operating system package or component kernel-devel Operating systems & Components / Operating system package or component reiserfs-kmp-default-debuginfo Operating systems & Components / Operating system package or component reiserfs-kmp-default Operating systems & Components / Operating system package or component kernel-syms Operating systems & Components / Operating system package or component kernel-obs-build-debugsource Operating systems & Components / Operating system package or component kernel-obs-build Operating systems & Components / Operating system package or component kernel-default-devel-debuginfo Operating systems & Components / Operating system package or component kernel-default-devel Operating systems & Components / Operating system package or component kernel-default-debugsource Operating systems & Components / Operating system package or component kernel-default-debuginfo Operating systems & Components / Operating system package or component kernel-default-base Operating systems & Components / Operating system package or component kernel-default Operating systems & Components / Operating system package or component
Vendor	SUSE

Security Bulletin

This security bulletin contains information about 44 vulnerabilities.

1) Improper access control

EUVDB-ID: #VU63923

Risk: Low

CVSSv3.1: 3.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2021-4037

CWE-ID: CWE-284 - Improper Access Control

Exploit availability: No

Description

The vulnerability allows a local user to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to improper access restrictions in the fs/inode.c:inode_init_owner() function logic of the Linux kernel. A local user can create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set to bypass implemented security restrictions and gain unauthorized access to the application.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) NULL pointer dereference

EUVDB-ID: #VU64920

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-2153

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in the Linux kernel’s KVM when attempting to set a SynIC IRQ. A local user on the host can issue specific ioctl calls, causing a denial of service.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Use-after-free

EUVDB-ID: #VU68423

Risk: Low

CVSSv3.1: 6.3 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C]

CVE-ID: CVE-2022-2602

CWE-ID: CWE-416 - Use After Free

Exploit availability: Yes

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error caused by an io_uring request, which is being processed on a registered file. The Unix GC runs and frees the io_uring file descriptor and all the registered file descriptors in a specific order that may allow a local user to win a race and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

4) Processor optimization removal or modification of security-critical code

EUVDB-ID: #VU65221

Risk: Low

CVSSv3.1: 4.1 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-28693

CWE-ID: CWE-1037 - Processor optimization removal or modification of security-critical code

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to unprotected alternative channel of return branch target prediction. A local user can gain access to sensitive information.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Memory leak

EUVDB-ID: #VU63419

Risk: Low

CVSSv3.1: 4.6 [CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-28748

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows an attacker to gain access to sensitive information.

The vulnerability exists due memory leak when working with ax88179_178a devices. An attacker with physical access to the system can inject a malicious USB-drive and remotely obtain data from kernel memory.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Out-of-bounds write

EUVDB-ID: #VU67811

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-2964

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices driver in Linux kernel. A local user can trigger an out-of-bounds write and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Use-after-free

EUVDB-ID: #VU67812

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-2978

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the Linux kernel NILFS file system. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Resource management error

EUVDB-ID: #VU68780

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3169

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources in Linux kernel when handling a consecutive request of the NVME_IOCTL_RESET and the NVME_IOCTL_SUBSYS_RESET through the device file of the driver. A local user can force the a PCIe link to disconnect.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Use-after-free

EUVDB-ID: #VU68109

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3176

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in io_uring implementation in the Linux kernel. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Use-after-free

EUVDB-ID: #VU69759

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3424

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the gru_set_context_option(), gru_fault() and gru_handle_user_call_os() functions in Linux kernel. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Race condition

EUVDB-ID: #VU69755

Risk: Low

CVSSv3.1: 5.5 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3521

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition within the kcm_tx_work() function in net/kcm/kcmsock.c in Linux kernel. A local user can exploit the race and gain unauthorized access to sensitive information and escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Memory leak

EUVDB-ID: #VU69756

Risk: Medium

CVSSv3.1: 4.6 [CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3524

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform DoS attack on the target system.

The vulnerability exists due memory leak within the ipv6_renew_options() function when retrieving a new IPv6 address from a malicious DHCP server. A remote attacker can force the system to leak memory and perform denial of service attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Memory leak

EUVDB-ID: #VU69791

Risk: Low

CVSSv3.1: 2.2 [CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3535

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform DoS attack.

The vulnerability exists due memory leak within the mvpp2_dbgfs_port_init() function in drivers/net/ethernet/marvell/mvpp2/mvpp2_debugfs.c, when a device is probed. A local user can force the system to leak memory and perform denial of service attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

14) Memory leak

EUVDB-ID: #VU69757

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3542

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform DoS attack on the target system.

The vulnerability exists due memory leak within the bnx2x_tpa_stop() function in drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c. A local user can force the system to leak memory and perform denial of service attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

15) Buffer overflow

EUVDB-ID: #VU69758

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3545

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the area_cache_get() function in drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c. A local user can trigger memory corruption and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

16) Buffer overflow

EUVDB-ID: #VU69709

Risk: Low

CVSSv3.1: 5.9 [CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3565

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows an attacker to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error within the del_timer() function in drivers/isdn/mISDN/l1oip_core.c in the Bluetooth component. An attacker with physical proximity to device can trigger memory corruption and execute arbitrary code on the target system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

17) Race condition

EUVDB-ID: #VU69811

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3567

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition within the inet6_stream_ops() and inet6_dgram_ops() functions. A local user can exploit the race and escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

18) Out-of-bounds write

EUVDB-ID: #VU70462

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3577

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error in the bigben_probe() function in drivers/hid/hid-bigbenff.c within the Kid-friendly Wired Controller driver in Linux kernel. A local user can trigger an out-of-bounds write and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

19) Use-after-free

EUVDB-ID: #VU69708

Risk: Low

CVSSv3.1: 2.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3586

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error in the way the sch_sfb enqueue function used the socket buffer (SKB) cb field after the same SKB had been enqueued (and freed) into a child qdisc. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

20) Inclusion of Sensitive Information in Log Files

EUVDB-ID: #VU69707

Risk: Low

CVSSv3.1: 2.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3594

CWE-ID: CWE-532 - Information Exposure Through Log Files

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to the intr_callback() function in drivers/net/usb/r8152.c can be forced to include excessive data info the log files. A local user can read the log files and gain access to sensitive data.

Note, the vulnerability can be triggered remotely.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

21) NULL pointer dereference

EUVDB-ID: #VU69300

Risk: Low

CVSSv3.1: 3.8 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3621

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in the nilfs2 filesystem driver within the nilfs_bmap_lookup_at_level() function in fs/nilfs2/inode.c in Linux kernel. A remote attacker can trick the victim into mounting a specially crafted image and perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

22) Use-after-free

EUVDB-ID: #VU69397

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3625

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the devlink_param_set() and devlink_param_get() function in net/core/devlink.c in IPsec component of Linux kernel. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

23) Buffer overflow

EUVDB-ID: #VU69803

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3628

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the brcmf_fweh_event_worker() function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c. A local user can use a specially crafted device to trigger memory corruption and escalate privileges on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

24) Memory leak

EUVDB-ID: #VU69706

Risk: Low

CVSSv3.1: 2.9 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3629

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform DoS attack.

The vulnerability exists due memory leak within the vsock_connect() function in net/vmw_vsock/af_vsock.c in Linux kernel IPSec implementation. A local user can force the system to leak memory and perform denial of service attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

25) Use-after-free

EUVDB-ID: #VU69398

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3635

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error within the drivers/atm/idt77252.c in IPsec component of Linux kernel. A local user can trigger a use-after-free error and crash the kernel.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

26) NULL pointer dereference

EUVDB-ID: #VU69299

Risk: Low

CVSSv3.1: 3.8 [CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3646

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in the nilfs2 filesystem driver within the nilfs_attach_log_writer() function in fs/nilfs2/segment.c in Linux kernel. A remote attacker can trick the victim into mounting a specially crafted image and perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

27) Use-after-free

EUVDB-ID: #VU69298

Risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3649

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error within the nilfs2 filesystem driver in nilfs_new_inode() function in fs/nilfs2/inode.c in Linux kernel. A remote attacker can trick the victim into mounting a specially crafted image, trigger a use-after-free error and execute arbitrary code on the system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

28) Double Free

EUVDB-ID: #VU70487

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3707

CWE-ID: CWE-415 - Double Free

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary error within the intel_gvt_dma_map_guest_page() function in Intel GVT-g graphics driver. A local user can trigger a double free error and crash the kernel.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

29) Resource management error

EUVDB-ID: #VU70465

Risk: Low

CVSSv3.1: 4 [CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-3903

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

Description

The vulnerability allows an attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to an incorrect read request flaw in the Infrared Transceiver USB driver in Linux kernel. An attacker with physical access to the system can starve system resources and perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

30) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU68110

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-39189

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a guest user to escalate privileges on the system.

The vulnerability exists due to incorrect handling of TLB flush operations in certain KVM_VCPU_PREEMPTED situations in the x86 KVM subsystem in the Linux kernel. An attacker with unprivileged access to the guest OS can escalate privileges on the guest.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

31) Use-after-free

EUVDB-ID: #VU67915

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-40307

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error within the drivers/firmware/efi/capsule-loader.c in Linux kernel. A local user can trigger a use-after-free error and perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

32) Improper access control

EUVDB-ID: #VU67587

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-40768

CWE-ID: CWE-284 - Improper Access Control

Exploit availability: No

Description

The vulnerability allows a local user to gain access to sensitive information.

The vulnerability exists due to improper access restrictions in the drivers/scsi/stex.c in the Linux kernel. A local user can obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

33) Double Free

EUVDB-ID: #VU69805

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-4095

CWE-ID: CWE-415 - Double Free

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the cmd_hdl_filter() function in drivers/staging/rtl8712/rtl8712_cmd.c. A local user can trigger a double free error and execute arbitrary code with escalated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

34) NULL pointer dereference

EUVDB-ID: #VU70486

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-4129

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error in the Linux kernel's Layer 2 Tunneling Protocol (L2TP). A missing lock when clearing sk_user_data can lead to a race condition and NULL pointer dereference. A local user could use this flaw to potentially crash the system causing a denial of service.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

35) Buffer overflow

EUVDB-ID: #VU70460

Risk: Low

CVSSv3.1: 6.4 [CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-4139

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the i915 kernel driver on Linux kernel. A local user can trigger memory corruption and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

36) Race condition

EUVDB-ID: #VU69792

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-41850

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a race condition within the roccat_report_event() function in drivers/hid/hid-roccat.c. A local user can trigger a use-after-free error and perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

37) NULL pointer dereference

EUVDB-ID: #VU70467

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-41858

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the sl_tx_timeout() function in drivers/net/slip in Linux kernel. A local user can perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

38) Use-after-free

EUVDB-ID: #VU69297

Risk: Low

CVSSv3.1: 5 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C]

CVE-ID: CVE-2022-42703

CWE-ID: CWE-416 - Use After Free

Exploit availability: Yes

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a use-after-free error within the mm/rmap.c in the Linux kernel, related to leaf anon_vma double reuse. A local user can trigger a use-after-free error and crash the kernel.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

39) Access of Uninitialized Pointer

EUVDB-ID: #VU69796

Risk: Low

CVSSv3.1: 2.1 [CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-42895

CWE-ID: CWE-824 - Access of Uninitialized Pointer

Exploit availability: No

Description

The vulnerability allows an attacker to gain access to sensitive information.

The vulnerability exists due to unauthorized access of uninitialized pointer within the l2cap_parse_conf_req() function in net/bluetooth/l2cap_core.c. An attacker with physical proximity to the affected device can gain access to sensitive information.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

40) Use-after-free

EUVDB-ID: #VU69795

Risk: Low

CVSSv3.1: 5.9 [CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-42896

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

Description

The vulnerability allows an attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error within the l2cap_connect() and l2cap_le_connect_req() function in net/bluetooth/l2cap_core.c. An attacker with physical proximity to the affected device can trigger a use-after-free error and execute arbitrary code on the system.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

41) Out-of-bounds write

EUVDB-ID: #VU69296

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-43750

CWE-ID: CWE-787 - Out-of-bounds write

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel. A local user can trigger an out-of-bounds write and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

42) Stack-based buffer overflow

EUVDB-ID: #VU70442

Risk: Low

CVSSv3.1: 7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C]

CVE-ID: CVE-2022-4378

CWE-ID: CWE-121 - Stack-based buffer overflow

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the __do_proc_dointvec() function. A local user can trigger a stack-based buffer overflow and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

43) Buffer overflow

EUVDB-ID: #VU69766

Risk: Medium

CVSSv3.1: 6.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-43945

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote attacker to perform a denial of service attacl.

The vulnerability exists due to a boundary error within the Linux kernel NFSD implementation. A remote attacker can send the RPC message over TCP with garbage data added at the end of the message, trigger memory corruption and perform a denial of service (DoS) attack.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

44) Integer overflow

EUVDB-ID: #VU70464

Risk: Low

CVSSv3.1: 6.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-45934

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to integer overflow within the l2cap_config_req() function in net/bluetooth/l2cap_core.c in Linux kernel. A local user can pass specially crafted L2CAP_CONF_REQ packets to the device, trigger an integer overflow and execute arbitrary code with elevated privileges.

Mitigation

Update the affected package the Linux Kernel to the latest version.

Vulnerable software versions

SUSE Enterprise Storage: 7.1

SUSE Linux Enterprise High Availability: 15-SP2

SUSE Linux Enterprise Server for SAP Applications: 15-SP2

SUSE Linux Enterprise Server: 15-SP2 - 15-SP2-LTSS

SUSE Linux Enterprise Module for Live Patching: 15-SP2

SUSE Linux Enterprise High Performance Computing: 15-SP2 - 15-SP2-LTSS

SUSE Manager Server: 4.1

SUSE Manager Retail Branch Server: 4.1

SUSE Manager Proxy: 4.1

SUSE Linux Enterprise Server for SAP: 15-SP2

ocfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

ocfs2-kmp-default: before 5.3.18-150200.24.139.1

gfs2-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

gfs2-kmp-default: before 5.3.18-150200.24.139.1

dlm-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

dlm-kmp-default: before 5.3.18-150200.24.139.1

cluster-md-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

cluster-md-kmp-default: before 5.3.18-150200.24.139.1

kernel-livepatch-SLE15-SP2_Update_32-debugsource: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default-debuginfo: before 1-150200.5.5.1

kernel-livepatch-5_3_18-150200_24_139-default: before 1-150200.5.5.1

kernel-default-livepatch-devel: before 5.3.18-150200.24.139.1

kernel-default-livepatch: before 5.3.18-150200.24.139.1

kernel-preempt-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt-devel: before 5.3.18-150200.24.139.1

kernel-preempt-debugsource: before 5.3.18-150200.24.139.1

kernel-preempt-debuginfo: before 5.3.18-150200.24.139.1

kernel-preempt: before 5.3.18-150200.24.139.1

kernel-source: before 5.3.18-150200.24.139.1

kernel-macros: before 5.3.18-150200.24.139.1

kernel-docs: before 5.3.18-150200.24.139.1

kernel-devel: before 5.3.18-150200.24.139.1

reiserfs-kmp-default-debuginfo: before 5.3.18-150200.24.139.1

reiserfs-kmp-default: before 5.3.18-150200.24.139.1

kernel-syms: before 5.3.18-150200.24.139.1

kernel-obs-build-debugsource: before 5.3.18-150200.24.139.1

kernel-obs-build: before 5.3.18-150200.24.139.1

kernel-default-devel-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-devel: before 5.3.18-150200.24.139.1

kernel-default-debugsource: before 5.3.18-150200.24.139.1

kernel-default-debuginfo: before 5.3.18-150200.24.139.1

kernel-default-base: before 5.3.18-150200.24.139.1.150200.9.65.2

kernel-default: before 5.3.18-150200.24.139.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20224589-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.