SUSE update for the Linux Kernel

1) Improper locking

EUVDB-ID: #VU92051

Risk: Low

CVSSv4.0: 1.9 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-46925

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the smc_wr_is_tx_pend(), smc_wr_tx_process_cqe(), smc_wr_reg_send() and smc_wr_free_link() functions in net/smc/smc_wr.c, within the smc_ib_modify_qp_rts() function in net/smc/smc_ib.c, within the smc_conn_free(), smcr_link_clear(), smc_conn_kill(), smc_smcd_terminate_all(), smc_smcr_terminate_all(), smcr_link_down() and init_waitqueue_head() functions in net/smc/smc_core.c, within the smc_cdc_tx_handler(), smc_cdc_msg_send(), smcr_cdc_msg_send_validation() and smc_cdc_get_slot_and_msg_send() functions in net/smc/smc_cdc.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Resource management error

EUVDB-ID: #VU89253

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-46926

CWE-ID: CWE-399 - Resource Management Errors

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources within the sdw_intel_acpi_cb() function in sound/hda/intel-sdw-acpi.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Reachable assertion

EUVDB-ID: #VU90917

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-46927

CWE-ID: CWE-617 - Reachable Assertion

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to reachable assertion within the ne_set_user_memory_region_ioctl() function in drivers/virt/nitro_enclaves/ne_misc_dev.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Use-after-free

EUVDB-ID: #VU90257

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-46929

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the sctp_transport_lookup_process() and sctp_transport_get_idx() functions in net/sctp/socket.c, within the sctp_sock_dump() and sctp_sock_filter() functions in net/sctp/sctp_diag.c, within the sctp_endpoint_free() and sctp_endpoint_destroy() functions in net/sctp/endpointola.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Use-after-free

EUVDB-ID: #VU90258

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-46930

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the mtu3_alloc_request() function in drivers/usb/mtu3/mtu3_gadget.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Stack-based buffer overflow

EUVDB-ID: #VU91303

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-46931

CWE-ID: CWE-121 - Stack-based buffer overflow

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to stack overflow within the mlx5e_tx_reporter_dump_sq() and mlx5e_reporter_tx_timeout() functions in drivers/net/ethernet/mellanox/mlx5/core/en/reporter_tx.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Use-after-free

EUVDB-ID: #VU90259

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-46933

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the ffs_data_clear() and ffs_data_reset() functions in drivers/usb/gadget/function/f_fs.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Improper Check for Unusual or Exceptional Conditions

EUVDB-ID: #VU89264

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-46934

CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions

Exploit availability: No

The vulnerability allows a local user to produce warnings from the userspace.

The vulnerability exists due to improper error handling within the compat_i2cdev_ioctl() function in drivers/i2c/i2c-dev.c. A local user can pass specially crafted data to the driver and influence its behavior.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Use-after-free

EUVDB-ID: #VU88892

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-46936

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the inet_init() function in net/ipv4/af_inet.c. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Double Free

EUVDB-ID: #VU89391

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47082

CWE-ID: CWE-415 - Double Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error in drivers/net/tun.c. A local user can trigger a double free error and execute arbitrary code with elevated privileges.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Out-of-bounds read

EUVDB-ID: #VU90346

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47083

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the mtk_xt_get_gpio_n() function in drivers/pinctrl/mediatek/pinctrl-mtk-common-v2.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Release of invalid pointer or reference

EUVDB-ID: #VU93003

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47087

CWE-ID: CWE-763 - Release of invalid pointer or reference

Exploit availability: No

The vulnerability allows a local user to modify data on the system.

The vulnerability exists due to performance of perform __free_pages(page, order) using this pointer as we would free any arbitrary pages. A local user can modify data on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Reachable assertion

EUVDB-ID: #VU90913

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47091

CWE-ID: CWE-617 - Reachable Assertion

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to reachable assertion within the ieee80211_start_ap() function in net/mac80211/cfg.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

14) Memory leak

EUVDB-ID: #VU90478

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47093

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the pmc_core_platform_init() function in drivers/platform/x86/intel_pmc_core_pltdrv.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

15) Use-after-free

EUVDB-ID: #VU88107

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47094

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in arch/x86/kvm/mmu/tdp_iter.c. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

16) NULL pointer dereference

EUVDB-ID: #VU90633

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47095

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the ssif_probe() function in drivers/char/ipmi/ipmi_ssif.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

17) Use of uninitialized resource

EUVDB-ID: #VU91681

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47096

CWE-ID: CWE-908 - Use of Uninitialized Resource

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to use of uninitialized resource within the snd_rawmidi_open() function in sound/core/rawmidi.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

18) Out-of-bounds read

EUVDB-ID: #VU90344

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47097

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the elantech_change_report_id() function in drivers/input/mouse/elantech.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

19) Integer overflow

EUVDB-ID: #VU91181

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47098

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to integer overflow within the lm90_set_temphyst() function in drivers/hwmon/lm90.c. A local user can execute arbitrary code.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

20) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU88856

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47099

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a missing security check within the veth_xdp_rcv() function in drivers/net/veth.c. A local user can gain access to sensitive information.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

21) Use-after-free

EUVDB-ID: #VU90233

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47100

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the cleanup_bmc_device() function in drivers/char/ipmi/ipmi_msghandler.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

22) Use of uninitialized resource

EUVDB-ID: #VU90882

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47101

CWE-ID: CWE-908 - Use of Uninitialized Resource

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to use of uninitialized resource within the asix_check_host_enable() function in drivers/net/usb/asix_common.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

23) Out-of-bounds read

EUVDB-ID: #VU90345

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47102

CWE-ID: CWE-125 - Out-of-bounds read

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to an out-of-bounds read error within the prestera_netdev_port_event() function in drivers/net/ethernet/marvell/prestera/prestera_main.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

24) Memory leak

EUVDB-ID: #VU90019

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47104

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the qib_user_sdma_queue_pkts() function in drivers/infiniband/hw/qib/qib_user_sdma.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

25) Memory leak

EUVDB-ID: #VU91655

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47105

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory leak within the ice_xsk_any_rx_ring_ena() function in drivers/net/ethernet/intel/ice/ice_xsk.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

26) Buffer overflow

EUVDB-ID: #VU91316

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47107

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to memory corruption within the nfsd_proc_rmdir() and nfsd_init_dirlist_pages() functions in fs/nfsd/nfsproc.c, within the nfsd3_proc_link() and nfsd3_init_dirlist_pages() functions in fs/nfsd/nfs3proc.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

27) NULL pointer dereference

EUVDB-ID: #VU90632

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-47108

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the mtk_hdmi_bridge_mode_valid() function in drivers/gpu/drm/mediatek/mtk_hdmi.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

28) Double Free

EUVDB-ID: #VU74053

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-4744

CWE-ID: CWE-415 - Double Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the tun_free_netdev() function in the Linux kernel’s TUN/TAP device driver. A local user can trigger a double free error and execute arbitrary code with elevated privileges.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

29) Use-after-free

EUVDB-ID: #VU90261

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48626

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the moxart_remove() function in drivers/mmc/host/moxart-mmc.c. A local user can escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

30) Resource exhaustion

EUVDB-ID: #VU92194

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48627

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to application does not properly control consumption of internal resources. A local user can trigger resource exhaustion and perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

31) Race condition

EUVDB-ID: #VU93383

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48628

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a race condition within the __inc_stopping_blocker() function in fs/ceph/super.c, within the ceph_handle_snap() and up_write() functions in fs/ceph/snap.c, within the ceph_handle_quota() function in fs/ceph/quota.c, within the handle_lease(), mutex_unlock() and ceph_mdsc_init() functions in fs/ceph/mds_client.c, within the ceph_handle_caps() and iput() functions in fs/ceph/caps.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

32) Information disclosure

EUVDB-ID: #VU93004

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48629

CWE-ID: CWE-200 - Information exposure

Exploit availability: No

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application. A local user can gain unauthorized access to sensitive information on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

33) Infinite loop

EUVDB-ID: #VU91418

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-48630

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop within the qcom_rng_read() function in drivers/crypto/qcom-rng.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

34) Improper locking

EUVDB-ID: #VU90810

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-0160

CWE-ID: CWE-667 - Improper Locking

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper locking within the __sock_map_delete() and sock_hash_delete_elem() functions in net/core/sock_map.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

35) Information disclosure

EUVDB-ID: #VU87457

Risk: Low

CVSSv4.0: 1.1 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-28746

CWE-ID: CWE-200 - Information exposure

Exploit availability: No

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to information exposure through microarchitectural state after transient execution from some register files for some Intel Atom Processors. A local user can gain access to sensitive information.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

36) Use-after-free

EUVDB-ID: #VU82758

Risk: Low

CVSSv4.0: 4.4 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-35827

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local authenticated user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error within the ravb_remove in drivers/net/ethernet/renesas/ravb_main.c. A local authenticated user can trigger a use-after-free error and escalate privileges on the system.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

37) Use-after-free

EUVDB-ID: #VU87740

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52447

CWE-ID: CWE-416 - Use After Free

Exploit availability: No

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a use-after-free error in bpf. A local user can trigger a use-after-free error and execute arbitrary code with elevated privileges.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

38) NULL pointer dereference

EUVDB-ID: #VU90661

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52450

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to NULL pointer dereference within the discover_upi_topology() function in arch/x86/events/intel/uncore_snbep.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

39) Buffer overflow

EUVDB-ID: #VU93167

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52453

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to memory corruption within the hisi_acc_vf_resume_write() and hisi_acc_vf_save_read() functions in drivers/vfio/pci/hisilicon/hisi_acc_vfio_pci.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*

http://www.suse.com/support/update/announcement/2024/suse-su-20241466-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

40) NULL pointer dereference

EUVDB-ID: #VU89244

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2023-52454

CWE-ID: CWE-476 - NULL Pointer Dereference

Exploit availability: No

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to a NULL pointer dereference error within the nvmet_tcp_build_pdu_iovec() function in drivers/nvme/target/tcp.c. A local user can perform a denial of service (DoS) attack.

Update the affected package the Linux Kernel to the latest version.

SUSE Linux Enterprise Micro: 5.5

SUSE Real Time Module: 15-SP5

SUSE Linux Enterprise Live Patching: 15-SP5

SUSE Linux Enterprise Server for SAP Applications 15: SP5

SUSE Linux Enterprise Server 15: SP5

SUSE Linux Enterprise Real Time 15: SP5

SUSE Linux Enterprise High Performance Computing 15: SP5

openSUSE Leap: 15.5

kernel-rt_debug: before 5.14.21-150500.13.47.1

kernel-rt: before 5.14.21-150500.13.47.1

kernel-rt-extra: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso: before 5.14.21-150500.13.47.1

kernel-rt-optional-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso: before 5.14.21-150500.13.47.1

kernel-rt-livepatch-devel: before 5.14.21-150500.13.47.1

kernel-syms-rt: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt: before 1-150500.11.3.1

reiserfs-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-livepatch-devel: before 5.14.21-150500.13.47.1

gfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-vdso-debuginfo: before 5.14.21-150500.13.47.1

reiserfs-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

ocfs2-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt_debug-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-extra-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel: before 5.14.21-150500.13.47.1

dlm-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-optional: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-debugsource: before 5.14.21-150500.13.47.1

gfs2-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt_debug-devel-debuginfo: before 5.14.21-150500.13.47.1

kselftests-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-devel-debuginfo: before 5.14.21-150500.13.47.1

kernel-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource: before 1-150500.11.3.1

kernel-rt_debug-devel: before 5.14.21-150500.13.47.1

kernel-rt-livepatch: before 5.14.21-150500.13.47.1

cluster-md-kmp-rt: before 5.14.21-150500.13.47.1

kernel-rt-debugsource: before 5.14.21-150500.13.47.1

kernel-rt_debug-vdso-debuginfo: before 5.14.21-150500.13.47.1

dlm-kmp-rt-debuginfo: before 5.14.21-150500.13.47.1

kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo: before 1-150500.11.3.1

kernel-devel-rt: before 5.14.21-150500.13.47.1

kernel-source-rt: before 5.14.21-150500.13.47.1

• cpe:2.3:o:suse:suse_linux_enterprise_micro:5.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_real_time_module:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_live_patching:15-SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap_applications_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_server_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_real_time_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:suse_linux_enterprise_high_performance_computing_15:SP5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:opensuse_leap:15.5:*:*:*:*:*:*:*
• cpe:2.3:o:suse:kernel-rt_debug:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-syms-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-livepatch-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:reiserfs-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:ocfs2-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-extra-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-optional:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:gfs2-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kselftests-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-devel-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-sle15-sp5-rt_update_13-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-devel:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-livepatch:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:cluster-md-kmp-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt-debugsource:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-rt_debug-vdso-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:dlm-kmp-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-devel-rt:*:*:*:*:*:suse_linux:*:*
• cpe:2.3:o:suse:kernel-source-rt:*:*:*:*:*:suse_linux:*:*