Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2023-4128 (GCVE-0-2023-4128)
Vulnerability from cvelistv5 – Published: 2023-08-10 16:50 – Updated: 2023-11-14 11:27
VLAI
EPSS
** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Reason: This record is a duplicate of CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Notes: All CVE users should reference CVE-2023-4206, CVE-2023-4207, CVE-2023-4208 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.
Show details on NVD website{
"containers": {
"cna": {
"providerMetadata": {
"dateUpdated": "2023-11-14T11:27:04.495Z",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"rejectedReasons": [
{
"lang": "en",
"value": "** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Reason: This record is a duplicate of CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Notes: All CVE users should reference CVE-2023-4206, CVE-2023-4207, CVE-2023-4208 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage."
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2023-4128",
"datePublished": "2023-08-10T16:50:25.184Z",
"dateRejected": "2023-11-14T11:27:04.495Z",
"dateReserved": "2023-08-03T06:02:29.894Z",
"dateUpdated": "2023-11-14T11:27:04.495Z",
"state": "REJECTED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.0",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2023-4128\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2023-08-10T17:15:12.033\",\"lastModified\":\"2023-11-14T12:15:20.030\",\"vulnStatus\":\"Rejected\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Rejected reason: ** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Reason: This record is a duplicate of CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Notes: All CVE users should reference CVE-2023-4206, CVE-2023-4207, CVE-2023-4208 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.\"}],\"metrics\":{},\"references\":[]}}"
}
}
RHSA-2024:0262
Vulnerability from csaf_redhat - Published: 2024-01-16 15:57 - Updated: 2026-05-04 21:05Summary
Red Hat Security Advisory: kernel security update
Severity
Important
Notes
Topic: An update for kernel is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security Fix(es):
* kernel: net/sched: sch_qfq component can be exploited if in qfq_change_agg function happens qfq_enqueue overhead (CVE-2023-3611)
* kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function (CVE-2023-3776)
* kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route (CVE-2023-4128, CVE-2023-4206, CVE-2023-4207, CVE-2023-4208)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
An out-of-bounds memory write flaw was found in qfq_change_agg in net/sched/sch_qfq.c in the Traffic Control (QoS) subsystem in the Linux kernel. This flaw allows a local user to crash or potentially escalate their privileges on the system.
7.8 (High)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A use-after-free vulnerability was found in fw_set_parms in net/sched/cls_fw.c in network scheduler sub-component in the Linux Kernel. This issue occurs due to a missing sanity check during cleanup at the time of failure, leading to a misleading reference. This may allow a local attacker to gain local privilege escalation.
7.0 (High)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
This record is a duplicate of CVE-2023-4206, CVE-2023-4207, and CVE-2023-4208. Do not use this CVE record: CVE-2023-4128.
7.8 (High)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
There are 3 CVEs for the use-after-free flaw found in net/sched/cls_fw.c in classifiers (cls_fw, cls_u32, and cls_route) in the Linux Kernel: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. A local user could use any of these flaws to crash the system or potentially escalate their privileges on the system. Similar CVE-2023-4128 was rejected as a duplicate.
7.8 (High)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
There are 3 CVEs for the use-after-free flaw found in net/sched/cls_fw.c in classifiers (cls_fw, cls_u32, and cls_route) in the Linux Kernel: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. A local user could use any of these flaws to crash the system or potentially escalate their privileges on the system. Similar CVE-2023-4128 was rejected as a duplicate.
7.8 (High)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
There are 3 CVEs for the use-after-free flaw found in net/sched/cls_fw.c in classifiers (cls_fw, cls_u32, and cls_route) in the Linux Kernel: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. A local user could use any of these flaws to crash the system or potentially escalate their privileges on the system. Similar CVE-2023-4128 was rejected as a duplicate.
7.8 (High)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
An out-of-bounds memory access flaw was found in the Linux kernel’s traffic control (QoS) subsystem in how a user triggers the qfq_change_class function with an incorrect MTU value of the network device used as lmax. This flaw allows a local user to crash or potentially escalate their privileges on the system.
7.0 (High)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
42 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for kernel is now available for Red Hat Enterprise Linux 7.7 Advanced Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The kernel packages contain the Linux kernel, the core of any Linux operating system.\n\nSecurity Fix(es):\n\n* kernel: net/sched: sch_qfq component can be exploited if in qfq_change_agg function happens qfq_enqueue overhead (CVE-2023-3611)\n\n* kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function (CVE-2023-3776)\n\n* kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route (CVE-2023-4128, CVE-2023-4206, CVE-2023-4207, CVE-2023-4208)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2024:0262",
"url": "https://access.redhat.com/errata/RHSA-2024:0262"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2225097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2225097"
},
{
"category": "external",
"summary": "2225191",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2225191"
},
{
"category": "external",
"summary": "2225511",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2225511"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_0262.json"
}
],
"title": "Red Hat Security Advisory: kernel security update",
"tracking": {
"current_release_date": "2026-05-04T21:05:43+00:00",
"generator": {
"date": "2026-05-04T21:05:43+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.7.9"
}
},
"id": "RHSA-2024:0262",
"initial_release_date": "2024-01-16T15:57:34+00:00",
"revision_history": [
{
"date": "2024-01-16T15:57:34+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2024-01-16T15:57:34+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-05-04T21:05:43+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product": {
"name": "Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_aus:7.7::server"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional AUS (v. 7.7)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional AUS (v. 7.7)",
"product_id": "7Server-optional-7.7.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_aus:7.7::server"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"product": {
"name": "bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"product_id": "bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bpftool@3.10.0-1062.82.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-0:3.10.0-1062.82.1.el7.x86_64",
"product": {
"name": "kernel-0:3.10.0-1062.82.1.el7.x86_64",
"product_id": "kernel-0:3.10.0-1062.82.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@3.10.0-1062.82.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"product": {
"name": "kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"product_id": "kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug@3.10.0-1062.82.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"product": {
"name": "kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"product_id": "kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-devel@3.10.0-1062.82.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"product": {
"name": "kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"product_id": "kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-devel@3.10.0-1062.82.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"product": {
"name": "kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"product_id": "kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools@3.10.0-1062.82.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"product": {
"name": "kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"product_id": "kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools-libs@3.10.0-1062.82.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-0:3.10.0-1062.82.1.el7.x86_64",
"product": {
"name": "perf-0:3.10.0-1062.82.1.el7.x86_64",
"product_id": "perf-0:3.10.0-1062.82.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf@3.10.0-1062.82.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"product": {
"name": "python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"product_id": "python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-perf@3.10.0-1062.82.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"product": {
"name": "bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"product_id": "bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/bpftool-debuginfo@3.10.0-1062.82.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"product": {
"name": "kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"product_id": "kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debug-debuginfo@3.10.0-1062.82.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"product": {
"name": "kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"product_id": "kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo@3.10.0-1062.82.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"product": {
"name": "kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"product_id": "kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-debuginfo-common-x86_64@3.10.0-1062.82.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"product": {
"name": "kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"product_id": "kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools-debuginfo@3.10.0-1062.82.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"product": {
"name": "perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"product_id": "perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/perf-debuginfo@3.10.0-1062.82.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"product": {
"name": "python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"product_id": "python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/python-perf-debuginfo@3.10.0-1062.82.1.el7?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"product": {
"name": "kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"product_id": "kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-tools-libs-devel@3.10.0-1062.82.1.el7?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-0:3.10.0-1062.82.1.el7.src",
"product": {
"name": "kernel-0:3.10.0-1062.82.1.el7.src",
"product_id": "kernel-0:3.10.0-1062.82.1.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel@3.10.0-1062.82.1.el7?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"product": {
"name": "kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"product_id": "kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-abi-whitelists@3.10.0-1062.82.1.el7?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"product": {
"name": "kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"product_id": "kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/kernel-doc@3.10.0-1062.82.1.el7?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:3.10.0-1062.82.1.el7.src as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src"
},
"product_reference": "kernel-0:3.10.0-1062.82.1.el7.src",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "kernel-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch"
},
"product_reference": "kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:3.10.0-1062.82.1.el7.noarch as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch"
},
"product_reference": "kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "perf-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server AUS (v. 7.7)",
"product_id": "7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.7)",
"product_id": "7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.7)",
"product_id": "7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:3.10.0-1062.82.1.el7.src as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.7)",
"product_id": "7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src"
},
"product_reference": "kernel-0:3.10.0-1062.82.1.el7.src",
"relates_to_product_reference": "7Server-optional-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.7)",
"product_id": "7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "kernel-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.7)",
"product_id": "7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch"
},
"product_reference": "kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"relates_to_product_reference": "7Server-optional-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.7)",
"product_id": "7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.7)",
"product_id": "7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.7)",
"product_id": "7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.7)",
"product_id": "7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.7)",
"product_id": "7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.7)",
"product_id": "7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-doc-0:3.10.0-1062.82.1.el7.noarch as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.7)",
"product_id": "7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch"
},
"product_reference": "kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"relates_to_product_reference": "7Server-optional-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.7)",
"product_id": "7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.7)",
"product_id": "7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.7)",
"product_id": "7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.7)",
"product_id": "7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.7)",
"product_id": "7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "perf-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.7)",
"product_id": "7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.7)",
"product_id": "7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-7.7.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server Optional AUS (v. 7.7)",
"product_id": "7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
},
"product_reference": "python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"relates_to_product_reference": "7Server-optional-7.7.AUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-3611",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2023-07-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2225191"
}
],
"notes": [
{
"category": "description",
"text": "An out-of-bounds memory write flaw was found in qfq_change_agg in net/sched/sch_qfq.c in the Traffic Control (QoS) subsystem in the Linux kernel. This flaw allows a local user to crash or potentially escalate their privileges on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: net/sched: sch_qfq component can be exploited if in qfq_change_agg function happens qfq_enqueue overhead",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-3611"
},
{
"category": "external",
"summary": "RHBZ#2225191",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2225191"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-3611",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3611"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-3611",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3611"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e337087c3b5805fe0b8a46ba622a962880b5d64",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3e337087c3b5805fe0b8a46ba622a962880b5d64"
}
],
"release_date": "2023-07-21T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-01-16T15:57:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2024:0262"
},
{
"category": "workaround",
"details": "Mitigation for this issue is to skip loading the affected module sch_qfq onto the system until we have a fix available. This can be done by a blacklist mechanism and will ensure the driver is not loaded at the boot time.\n~~~\n How do I blacklist a kernel module to prevent it from loading automatically? \nhttps://access.redhat.com/solutions/41278 \n~~~",
"product_ids": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: net/sched: sch_qfq component can be exploited if in qfq_change_agg function happens qfq_enqueue overhead"
},
{
"cve": "CVE-2023-3776",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2023-07-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2225097"
}
],
"notes": [
{
"category": "description",
"text": "A use-after-free vulnerability was found in fw_set_parms in net/sched/cls_fw.c in network scheduler sub-component in the Linux Kernel. This issue occurs due to a missing sanity check during cleanup at the time of failure, leading to a misleading reference. This may allow a local attacker to gain local privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-3776"
},
{
"category": "external",
"summary": "RHBZ#2225097",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2225097"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-3776",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-3776"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-3776",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3776"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=0323bce598eea038714f941ce2b22541c46d488f",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit?id=0323bce598eea038714f941ce2b22541c46d488f"
}
],
"release_date": "2023-07-06T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-01-16T15:57:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2024:0262"
},
{
"category": "workaround",
"details": "To mitigate this issue, prevent module cls_fw from being loaded. Please see https://access.redhat.com/solutions/41278 for how to blacklist a kernel module to prevent it from loading automatically.",
"product_ids": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: net/sched: cls_fw component can be exploited as result of failure in tcf_change_indev function"
},
{
"cve": "CVE-2023-4128",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2023-07-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2261965"
}
],
"notes": [
{
"category": "description",
"text": "This record is a duplicate of CVE-2023-4206, CVE-2023-4207, and CVE-2023-4208. Do not use this CVE record: CVE-2023-4128.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "All CVE users should reference CVE-2023-4206, CVE-2023-4207, CVE-2023-4208 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-4128"
},
{
"category": "external",
"summary": "RHBZ#2261965",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261965"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-4128",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4128"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-4128",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4128"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2023-4206",
"url": "https://access.redhat.com/security/cve/CVE-2023-4206"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2023-4207",
"url": "https://access.redhat.com/security/cve/CVE-2023-4207"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2023-4208",
"url": "https://access.redhat.com/security/cve/CVE-2023-4208"
}
],
"release_date": "2023-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-01-16T15:57:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2024:0262"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route"
},
{
"cve": "CVE-2023-4206",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2023-07-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2225511"
}
],
"notes": [
{
"category": "description",
"text": "There are 3 CVEs for the use-after-free flaw found in net/sched/cls_fw.c in classifiers (cls_fw, cls_u32, and cls_route) in the Linux Kernel: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. \r\nA local user could use any of these flaws to crash the system or potentially escalate their privileges on the system.\r\n\r\nSimilar CVE-2023-4128 was rejected as a duplicate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-4206"
},
{
"category": "external",
"summary": "RHBZ#2225511",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2225511"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-4206",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4206"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-4206",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4206"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3044b16e7c6fe5d24b1cdbcf1bd0a9d92d1ebd81",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3044b16e7c6fe5d24b1cdbcf1bd0a9d92d1ebd81"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=76e42ae831991c828cffa8c37736ebfb831ad5ec",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=76e42ae831991c828cffa8c37736ebfb831ad5ec"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b80b829e9e2c1b3f7aae34855e04d8f6ecaf13c8",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b80b829e9e2c1b3f7aae34855e04d8f6ecaf13c8"
},
{
"category": "external",
"summary": "https://lore.kernel.org/netdev/193d6cdf-d6c9-f9be-c36a-b2a7551d5fb6@mojatatu.com/",
"url": "https://lore.kernel.org/netdev/193d6cdf-d6c9-f9be-c36a-b2a7551d5fb6@mojatatu.com/"
}
],
"release_date": "2023-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-01-16T15:57:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2024:0262"
},
{
"category": "workaround",
"details": "To mitigate this issue, prevent the module cls_u32 from being loaded by blacklisting the module to prevent it from loading automatically. \n~~~\nhttps://access.redhat.com/solutions/41278 \n~~~",
"product_ids": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route"
},
{
"cve": "CVE-2023-4207",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2023-07-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2225511"
}
],
"notes": [
{
"category": "description",
"text": "There are 3 CVEs for the use-after-free flaw found in net/sched/cls_fw.c in classifiers (cls_fw, cls_u32, and cls_route) in the Linux Kernel: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. \r\nA local user could use any of these flaws to crash the system or potentially escalate their privileges on the system.\r\n\r\nSimilar CVE-2023-4128 was rejected as a duplicate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-4207"
},
{
"category": "external",
"summary": "RHBZ#2225511",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2225511"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-4207",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4207"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-4207",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4207"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3044b16e7c6fe5d24b1cdbcf1bd0a9d92d1ebd81",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3044b16e7c6fe5d24b1cdbcf1bd0a9d92d1ebd81"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=76e42ae831991c828cffa8c37736ebfb831ad5ec",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=76e42ae831991c828cffa8c37736ebfb831ad5ec"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b80b829e9e2c1b3f7aae34855e04d8f6ecaf13c8",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b80b829e9e2c1b3f7aae34855e04d8f6ecaf13c8"
},
{
"category": "external",
"summary": "https://lore.kernel.org/netdev/193d6cdf-d6c9-f9be-c36a-b2a7551d5fb6@mojatatu.com/",
"url": "https://lore.kernel.org/netdev/193d6cdf-d6c9-f9be-c36a-b2a7551d5fb6@mojatatu.com/"
}
],
"release_date": "2023-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-01-16T15:57:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2024:0262"
},
{
"category": "workaround",
"details": "To mitigate this issue, prevent the module cls_u32 from being loaded by blacklisting the module to prevent it from loading automatically. \n~~~\nhttps://access.redhat.com/solutions/41278 \n~~~",
"product_ids": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route"
},
{
"cve": "CVE-2023-4208",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"discovery_date": "2023-07-24T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2225511"
}
],
"notes": [
{
"category": "description",
"text": "There are 3 CVEs for the use-after-free flaw found in net/sched/cls_fw.c in classifiers (cls_fw, cls_u32, and cls_route) in the Linux Kernel: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. \r\nA local user could use any of these flaws to crash the system or potentially escalate their privileges on the system.\r\n\r\nSimilar CVE-2023-4128 was rejected as a duplicate.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-4208"
},
{
"category": "external",
"summary": "RHBZ#2225511",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2225511"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-4208",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-4208"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-4208",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-4208"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3044b16e7c6fe5d24b1cdbcf1bd0a9d92d1ebd81",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3044b16e7c6fe5d24b1cdbcf1bd0a9d92d1ebd81"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=76e42ae831991c828cffa8c37736ebfb831ad5ec",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=76e42ae831991c828cffa8c37736ebfb831ad5ec"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b80b829e9e2c1b3f7aae34855e04d8f6ecaf13c8",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b80b829e9e2c1b3f7aae34855e04d8f6ecaf13c8"
},
{
"category": "external",
"summary": "https://lore.kernel.org/netdev/193d6cdf-d6c9-f9be-c36a-b2a7551d5fb6@mojatatu.com/",
"url": "https://lore.kernel.org/netdev/193d6cdf-d6c9-f9be-c36a-b2a7551d5fb6@mojatatu.com/"
}
],
"release_date": "2023-07-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-01-16T15:57:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2024:0262"
},
{
"category": "workaround",
"details": "To mitigate this issue, prevent the module cls_u32 from being loaded by blacklisting the module to prevent it from loading automatically. \n~~~\nhttps://access.redhat.com/solutions/41278 \n~~~",
"product_ids": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: net/sched: Use-after-free vulnerabilities in the net/sched classifiers: cls_fw, cls_u32 and cls_route"
},
{
"cve": "CVE-2023-31436",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2023-05-02T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2192671"
}
],
"notes": [
{
"category": "description",
"text": "An out-of-bounds memory access flaw was found in the Linux kernel\u2019s traffic control (QoS) subsystem in how a user triggers the qfq_change_class function with an incorrect MTU value of the network device used as lmax. This flaw allows a local user to crash or potentially escalate their privileges on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: out-of-bounds write in qfq_change_class function",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-31436"
},
{
"category": "external",
"summary": "RHBZ#2192671",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2192671"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-31436",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-31436"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-31436",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-31436"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3037933448f60f9acb705997eae62013ecb81e0d",
"url": "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=3037933448f60f9acb705997eae62013ecb81e0d"
}
],
"release_date": "2023-04-13T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2024-01-16T15:57:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nThe system must be rebooted for this update to take effect.",
"product_ids": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
],
"restart_required": {
"category": "machine"
},
"url": "https://access.redhat.com/errata/RHSA-2024:0262"
},
{
"category": "workaround",
"details": "To mitigate this issue, prevent the module, sch_qfq from being loaded. Please see https://access.redhat.com/solutions/41278 for information on how to blacklist a kernel module to prevent it from loading automatically.",
"product_ids": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:bpftool-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.src",
"7Server-optional-7.7.AUS:kernel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-abi-whitelists-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-debug-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debug-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-debuginfo-common-x86_64-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-doc-0:3.10.0-1062.82.1.el7.noarch",
"7Server-optional-7.7.AUS:kernel-tools-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:kernel-tools-libs-devel-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-0:3.10.0-1062.82.1.el7.x86_64",
"7Server-optional-7.7.AUS:python-perf-debuginfo-0:3.10.0-1062.82.1.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: out-of-bounds write in qfq_change_class function"
}
]
}
SSA-806742
Vulnerability from csaf_siemens - Published: 2024-02-13 00:00 - Updated: 2024-02-13 00:00Summary
SSA-806742: Multiple Vulnerabilities in SCALANCE XCM-/XRM-300 before V2.4
Notes
Summary: SCALANCE XCM-/XRM-300 before V2.4 is affected by multiple vulnerabilities.
Siemens has released an update for SCALANCE X-300 and recommends to update to the latest version.
General Recommendations: As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download:
https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use: Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter "License Terms"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.
CWE-787
- Out-of-bounds Write
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-704
- Incorrect Type Conversion or Cast
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-347
- Improper Verification of Cryptographic Signature
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-787
- Out-of-bounds Write
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-284
- Improper Access Control
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-287
- Improper Authentication
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-311
- Missing Encryption of Sensitive Data
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-327
- Use of a Broken or Risky Cryptographic Algorithm
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-787
- Out-of-bounds Write
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-732
- Incorrect Permission Assignment for Critical Resource
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-444
- Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
6.6 (Medium)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-122
- Heap-based Buffer Overflow
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
9.8 (Critical)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-311
- Missing Encryption of Sensitive Data
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-401
- Missing Release of Memory after Effective Lifetime
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-415
- Double Free
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-787
- Out-of-bounds Write
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-1284
- Improper Validation of Specified Quantity in Input
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
5.7 (Medium)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
9.8 (Critical)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
7.0 (High)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-697
- Incorrect Comparison
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-787
- Out-of-bounds Write
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
9.8 (Critical)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-125
- Out-of-bounds Read
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-20
- Improper Input Validation
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
5.9 (Medium)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
7.8 (High)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-787
- Out-of-bounds Write
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-311
- Missing Encryption of Sensitive Data
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-74
- Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-843
- Access of Resource Using Incompatible Type ('Type Confusion')
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
5.5 (Medium)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
9.8 (Critical)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
9.0 (Critical)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-113
- Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
9.8 (Critical)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-476
- NULL Pointer Dereference
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-190
- Integer Overflow or Wraparound
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-311
- Missing Encryption of Sensitive Data
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
8.5 (High)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-190
- Integer Overflow or Wraparound
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-401
- Missing Release of Memory after Effective Lifetime
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-311
- Missing Encryption of Sensitive Data
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-770
- Allocation of Resources Without Limits or Throttling
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-311
- Missing Encryption of Sensitive Data
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-476
- NULL Pointer Dereference
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-20
- Improper Input Validation
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-311
- Missing Encryption of Sensitive Data
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
9.8 (Critical)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-311
- Missing Encryption of Sensitive Data
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-787
- Out-of-bounds Write
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-407
- Inefficient Algorithmic Complexity
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-354
- Improper Validation of Integrity Check Value
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-203
- Observable Discrepancy
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
9.8 (Critical)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
9.8 (Critical)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-125
- Out-of-bounds Read
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-667
- Improper Locking
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-787
- Out-of-bounds Write
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-203
- Observable Discrepancy
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
7.7 (High)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
7.5 (High)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
7.5 (High)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-400
- Uncontrolled Resource Consumption
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-125
- Out-of-bounds Read
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-863
- Incorrect Authorization
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-787
- Out-of-bounds Write
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-787
- Out-of-bounds Write
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-667
- Improper Locking
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-311
- Missing Encryption of Sensitive Data
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-476
- NULL Pointer Dereference
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-212
- Improper Removal of Sensitive Information Before Storage or Transfer
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
7.8 (High)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-476
- NULL Pointer Dereference
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-252
- Unchecked Return Value
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-125
- Out-of-bounds Read
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-362
- Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
5.9 (Medium)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
7.8 (High)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
7.8 (High)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
7.8 (High)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-863
- Incorrect Authorization
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-311
- Missing Encryption of Sensitive Data
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-787
- Out-of-bounds Write
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
5.5 (Medium)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
5.3 (Medium)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
6.4 (Medium)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-843
- Access of Resource Using Incompatible Type ('Type Confusion')
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
4.8 (Medium)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-20
- Improper Input Validation
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
6.2 (Medium)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
9.8 (Critical)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
6.2 (Medium)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
5.5 (Medium)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-770
- Allocation of Resources Without Limits or Throttling
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-908
- Use of Uninitialized Resource
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
9.8 (Critical)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-79
- Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-668
- Exposure of Resource to Wrong Sphere
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-787
- Out-of-bounds Write
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-444
- Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-22
- Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-287
- Improper Authentication
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-287
- Improper Authentication
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-311
- Missing Encryption of Sensitive Data
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-476
- NULL Pointer Dereference
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-116
- Improper Encoding or Escaping of Output
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-116
- Improper Encoding or Escaping of Output
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
9.8 (Critical)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
9.8 (Critical)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
9.8 (Critical)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-436
- Interpretation Conflict
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-400
- Uncontrolled Resource Consumption
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-787
- Out-of-bounds Write
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-311
- Missing Encryption of Sensitive Data
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-311
- Missing Encryption of Sensitive Data
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-330
- Use of Insufficiently Random Values
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-124
- Buffer Underwrite ('Buffer Underflow')
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-330
- Use of Insufficiently Random Values
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-20
- Improper Input Validation
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-311
- Missing Encryption of Sensitive Data
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-400
- Uncontrolled Resource Consumption
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-20
- Improper Input Validation
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-369
- Divide By Zero
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-362
- Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-20
- Improper Input Validation
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-311
- Missing Encryption of Sensitive Data
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-311
- Missing Encryption of Sensitive Data
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
7.8 (High)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-787
- Out-of-bounds Write
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-522
- Insufficiently Protected Credentials
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-362
- Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-362
- Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-362
- Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-824
- Access of Uninitialized Pointer
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-1333
- Inefficient Regular Expression Complexity
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-78
- Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
7.5 (High)
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-120
- Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
CWE-416
- Use After Free
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
Siemens / SCALANCE XCH328 (6GK5328-4TS01-2EC2)
|
6GK5328-4TS01-2EC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
Siemens / SCALANCE XCM324 (6GK5324-8TS01-2AC2)
|
6GK5324-8TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
Siemens / SCALANCE XCM328 (6GK5328-4TS01-2AC2)
|
6GK5328-4TS01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
Siemens / SCALANCE XCM332 (6GK5332-0GA01-2AC2)
|
6GK5332-0GA01-2AC2
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
Siemens / SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
|
6GK5334-2TS01-2ER3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
|
6GK5334-3TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
Siemens / SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
|
6GK5334-2TS01-3AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
|
6GK5334-3TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
Siemens / SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)
|
6GK5334-2TS01-2AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)
|
6GK5334-3TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
|
SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
Siemens / SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)
|
6GK5334-2TS01-4AR3
|
<V2.4 |
Vendor Fix
fix
|
References
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
"tlp": {
"label": "WHITE"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "SCALANCE XCM-/XRM-300 before V2.4 is affected by multiple vulnerabilities.\n\nSiemens has released an update for SCALANCE X-300 and recommends to update to the latest version.",
"title": "Summary"
},
{
"category": "general",
"text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "productcert@siemens.com",
"name": "Siemens ProductCERT",
"namespace": "https://www.siemens.com"
},
"references": [
{
"category": "self",
"summary": "SSA-806742: Multiple Vulnerabilities in SCALANCE XCM-/XRM-300 before V2.4 - HTML Version",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-806742.html"
},
{
"category": "self",
"summary": "SSA-806742: Multiple Vulnerabilities in SCALANCE XCM-/XRM-300 before V2.4 - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-806742.json"
},
{
"category": "self",
"summary": "SSA-806742: Multiple Vulnerabilities in SCALANCE XCM-/XRM-300 before V2.4 - PDF Version",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-806742.pdf"
},
{
"category": "self",
"summary": "SSA-806742: Multiple Vulnerabilities in SCALANCE XCM-/XRM-300 before V2.4 - TXT Version",
"url": "https://cert-portal.siemens.com/productcert/txt/ssa-806742.txt"
}
],
"title": "SSA-806742: Multiple Vulnerabilities in SCALANCE XCM-/XRM-300 before V2.4",
"tracking": {
"current_release_date": "2024-02-13T00:00:00Z",
"generator": {
"engine": {
"name": "Siemens ProductCERT CSAF Generator",
"version": "1"
}
},
"id": "SSA-806742",
"initial_release_date": "2024-02-13T00:00:00Z",
"revision_history": [
{
"date": "2024-02-13T00:00:00Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
}
],
"status": "interim",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV2.4",
"product": {
"name": "SCALANCE XCH328 (6GK5328-4TS01-2EC2)",
"product_id": "1",
"product_identification_helper": {
"model_numbers": [
"6GK5328-4TS01-2EC2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE XCH328 (6GK5328-4TS01-2EC2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV2.4",
"product": {
"name": "SCALANCE XCM324 (6GK5324-8TS01-2AC2)",
"product_id": "2",
"product_identification_helper": {
"model_numbers": [
"6GK5324-8TS01-2AC2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE XCM324 (6GK5324-8TS01-2AC2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV2.4",
"product": {
"name": "SCALANCE XCM328 (6GK5328-4TS01-2AC2)",
"product_id": "3",
"product_identification_helper": {
"model_numbers": [
"6GK5328-4TS01-2AC2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE XCM328 (6GK5328-4TS01-2AC2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV2.4",
"product": {
"name": "SCALANCE XCM332 (6GK5332-0GA01-2AC2)",
"product_id": "4",
"product_identification_helper": {
"model_numbers": [
"6GK5332-0GA01-2AC2"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE XCM332 (6GK5332-0GA01-2AC2)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV2.4",
"product": {
"name": "SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)",
"product_id": "5",
"product_identification_helper": {
"model_numbers": [
"6GK5334-2TS01-2ER3"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV2.4",
"product": {
"name": "SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)",
"product_id": "6",
"product_identification_helper": {
"model_numbers": [
"6GK5334-2TS01-4AR3"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE XRM334 (2x230 V AC, 8xFO) (6GK5334-2TS01-4AR3)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV2.4",
"product": {
"name": "SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)",
"product_id": "7",
"product_identification_helper": {
"model_numbers": [
"6GK5334-3TS01-4AR3"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE XRM334 (2x230 V AC, 12xFO) (6GK5334-3TS01-4AR3)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV2.4",
"product": {
"name": "SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)",
"product_id": "8",
"product_identification_helper": {
"model_numbers": [
"6GK5334-2TS01-2AR3"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV2.4",
"product": {
"name": "SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)",
"product_id": "9",
"product_identification_helper": {
"model_numbers": [
"6GK5334-3TS01-2AR3"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV2.4",
"product": {
"name": "SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)",
"product_id": "10",
"product_identification_helper": {
"model_numbers": [
"6GK5334-2TS01-3AR3"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)"
},
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV2.4",
"product": {
"name": "SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)",
"product_id": "11",
"product_identification_helper": {
"model_numbers": [
"6GK5334-3TS01-3AR3"
]
}
}
}
],
"category": "product_name",
"name": "SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2006-20001",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A carefully crafted If: request header can cause a memory read, or write of a single zero byte, in a pool (heap) memory location beyond the header value sent. This could cause the process to crash.\n\nThis issue affects Apache HTTP Server 2.4.54 and earlier.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2006-20001"
},
{
"cve": "CVE-2020-10735",
"cwe": {
"id": "CWE-704",
"name": "Incorrect Type Conversion or Cast"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int(\"text\"), a system could take 50ms to parse an int string with 100,000 digits and 5s for 1,000,000 digits (float, decimal, int.from_bytes(), and int() for binary bases 2, 4, 8, 16, and 32 are not affected). The highest threat from this vulnerability is to system availability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2020-10735"
},
{
"cve": "CVE-2021-3445",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in libdnf\u0027s signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code execution if they can alter the header information of an RPM package and then trick a user or system into installing it. The highest risk of this vulnerability is to confidentiality, integrity, as well as system availability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2021-3445"
},
{
"cve": "CVE-2021-3638",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "An out-of-bounds memory access flaw was found in the ATI VGA device emulation of QEMU. This flaw occurs in the ati_2d_blt() routine while handling MMIO write operations when the guest provides invalid values for the destination display parameters. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2021-3638"
},
{
"cve": "CVE-2021-4037",
"cwe": {
"id": "CWE-284",
"name": "Improper Access Control"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2021-4037"
},
{
"cve": "CVE-2021-36369",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in Dropbear through 2020.81. Due to a non-RFC-compliant check of the available authentication methods in the client-side SSH code, it is possible for an SSH server to change the login process in its favor. This attack can bypass additional security measures such as FIDO2 tokens or SSH-Askpass. Thus, it allows an attacker to abuse a forwarded agent for logging on to another server unnoticed.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2021-36369"
},
{
"cve": "CVE-2021-43666",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtls_pkcs12_derivation function when an input password\u0027s length is 0.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2021-43666"
},
{
"cve": "CVE-2021-45451",
"cwe": {
"id": "CWE-327",
"name": "Use of a Broken or Risky Cryptographic Algorithm"
},
"notes": [
{
"category": "summary",
"text": "In Mbed TLS before 3.1.0, psa_aead_generate_nonce allows policy bypass or oracle-based decryption when the output buffer is at memory locations accessible to an untrusted application.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2021-45451"
},
{
"cve": "CVE-2022-1015",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-1015"
},
{
"cve": "CVE-2022-1348",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-1348"
},
{
"cve": "CVE-2022-2586",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free flaw was found in nf_tables cross-table in the net/netfilter/nf_tables_api.c function in the Linux kernel. This flaw allows a local, privileged attacker to cause a use-after-free problem at the time of table deletion, possibly leading to local privilege escalation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-2586"
},
{
"cve": "CVE-2022-2880",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Requests forwarded by ReverseProxy include the raw query parameters from the inbound request, including unparsable parameters rejected by net/http. This could permit query parameter smuggling when a Go proxy forwards a parameter with an unparsable value. After fix, ReverseProxy sanitizes the query parameters in the forwarded query when the outbound request\u0027s Form field is set after the ReverseProxy. Director function returns, indicating that the proxy has parsed the query parameters. Proxies which do not parse query parameters continue to forward the original query parameters unchanged.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-2880"
},
{
"cve": "CVE-2022-3294",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can modify Node objects and send proxy requests to them. Kubernetes supports node proxying, which allows clients of kube-apiserver to access endpoints of a Kubelet to establish connections to Pods, retrieve container logs, and more. While Kubernetes already validates the proxying address for Nodes, a bug in kube-apiserver made it possible to bypass this validation. Bypassing this validation could allow authenticated requests destined for Nodes to to the API server\u0027s private network.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-3294"
},
{
"cve": "CVE-2022-3437",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "A heap-based buffer overflow vulnerability was found in Samba within the GSSAPI unwrap_des() and unwrap_des3() routines of Heimdal. The DES and Triple-DES decryption routines in the Heimdal GSSAPI library allow a length-limited write buffer overflow on malloc() allocated memory when presented with a maliciously small packet. This flaw allows a remote user to send specially crafted malicious data to the application, possibly resulting in a denial of service (DoS) attack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-3437"
},
{
"cve": "CVE-2022-3515",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability was found in the Libksba library due to an integer overflow within the CRL parser. The vulnerability can be exploited remotely for code execution on the target system by passing specially crafted data to the application, for example, a malicious S/MIME attachment.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-3515"
},
{
"cve": "CVE-2022-4415",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suid_dumpable kernel setting.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-4415"
},
{
"cve": "CVE-2022-4743",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "A potential memory leak issue was discovered in SDL2 in GLES_CreateTexture() function in SDL_render_gles.c. The vulnerability allows an attacker to cause a denial of service attack. The vulnerability affects SDL2 v2.0.4 and above. SDL-1.x are not affected.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-4743"
},
{
"cve": "CVE-2022-4744",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "summary",
"text": "A double-free flaw was found in the Linux kernel\u2019s TUN/TAP device driver functionality in how a user registers the device when the register_netdevice function fails (NETDEV_REGISTER notifier). This flaw allows a local user to crash or potentially escalate their privileges on the system.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-4744"
},
{
"cve": "CVE-2022-4900",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-4900"
},
{
"cve": "CVE-2022-4904",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-4904"
},
{
"cve": "CVE-2022-23471",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "containerd is an open source container runtime. A bug was found in containerd\u0027s CRI implementation where a user can exhaust memory on the host. In the CRI stream server, a goroutine is launched to handle terminal resize events if a TTY is requested. If the user\u0027s process fails to launch due to, for example, a faulty command, the goroutine will be stuck waiting to send without a receiver, resulting in a memory leak. Kubernetes and crictl can both be configured to use containerd\u0027s CRI implementation and the stream server is used for handling container IO. This bug has been fixed in containerd 1.6.12 and 1.5.16. Users should update to these versions to resolve the issue. Users unable to upgrade should ensure that only trusted images and commands are used and that only trusted users have permissions to execute commands in running containers.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-23471"
},
{
"cve": "CVE-2022-23521",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "Git is distributed revision control system. gitattributes are a mechanism to allow defining attributes for paths. These attributes can be defined by adding a `.gitattributes` file to the repository, which contains a set of file patterns and the attributes that should be set for paths matching this pattern. When parsing gitattributes, multiple integer overflows can occur when there is a huge number of path patterns, a huge number of attributes for a single pattern, or when the declared attribute names are huge. These overflows can be triggered via a crafted `.gitattributes` file that may be part of the commit history. Git silently splits lines longer than 2KB when parsing gitattributes from a file, but not when parsing them from the index. Consequentially, the failure mode depends on whether the file exists in the working tree, the index or both. This integer overflow can result in arbitrary heap reads and writes, which may result in remote code execution. The problem has been patched in the versions published on 2023-01-17, going back to v2.30.7. Users are advised to upgrade. There are no known workarounds for this issue.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-23521"
},
{
"cve": "CVE-2022-24834",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "Redis is an in-memory database that persists on disk. A specially crafted Lua script executing in Redis can trigger a heap overflow in the cjson library, and result with heap corruption and potentially remote code execution. The problem exists in all versions of Redis with Lua scripting support, starting from 2.6, and affects only authenticated and authorized users. The problem is fixed in versions 7.0.12, 6.2.13, and 6.0.20.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-24834"
},
{
"cve": "CVE-2022-26691",
"cwe": {
"id": "CWE-697",
"name": "Incorrect Comparison"
},
"notes": [
{
"category": "summary",
"text": "A logic issue was addressed with improved state management. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. An application may be able to gain elevated privileges.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-26691"
},
{
"cve": "CVE-2022-28737",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "There\u0027s a possible overflow in handle_image() when shim tries to load and execute crafted EFI executables; The handle_image() function takes into account the SizeOfRawData field from each section to be loaded. An attacker can leverage this to perform out-of-bound writes into memory. Arbitrary code execution is not discarded in such scenario.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-28737"
},
{
"cve": "CVE-2022-28738",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "summary",
"text": "A double free was found in the Regexp compiler in Ruby 3.x before 3.0.4 and 3.1.x before 3.1.2. If a victim attempts to create a Regexp from untrusted user input, an attacker may be able to write to unexpected memory locations.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-28738"
},
{
"cve": "CVE-2022-28739",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "There is a buffer over-read in Ruby before 2.6.10, 2.7.x before 2.7.6, 3.x before 3.0.4, and 3.1.x before 3.1.2. It occurs in String-to-Float conversion, including Kernel#Float and String#to_f.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-28739"
},
{
"cve": "CVE-2022-29154",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the directories of connecting peers. The server chooses which files/directories are sent to the client. However, the rsync client performs insufficient validation of file names. A malicious rsync server (or Man-in-The-Middle attacker) can overwrite arbitrary files in the rsync client target directory and subdirectories (for example, overwrite the .ssh/authorized_keys file).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-29154"
},
{
"cve": "CVE-2022-29162",
"cwe": {
"id": "CWE-276",
"name": "Incorrect Default Permissions"
},
"notes": [
{
"category": "summary",
"text": "runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in runc prior to version 1.1.2 where `runc exec --cap` created processes with non-empty inheritable Linux process capabilities, creating an atypical Linux environment and enabling programs with inheritable file capabilities to elevate those capabilities to the permitted set during execve(2). This bug did not affect the container security sandbox as the inheritable set never contained more capabilities than were included in the container\u0027s bounding set. This bug has been fixed in runc 1.1.2. This fix changes `runc exec --cap` behavior such that the additional capabilities granted to the process being executed (as specified via `--cap` arguments) do not include inheritable capabilities. In addition, `runc spec` is changed to not set any inheritable capabilities in the created example OCI spec (`config.json`) file.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-29162"
},
{
"cve": "CVE-2022-29187",
"cwe": {
"id": "CWE-282",
"name": "Improper Ownership Management"
},
"notes": [
{
"category": "summary",
"text": "Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5, is vulnerable to privilege escalation in all platforms. An unsuspecting user could still be affected by the issue reported in CVE-2022-24765, for example when navigating as root into a shared tmp directory that is owned by them, but where an attacker could create a git repository. Versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5 contain a patch for this issue. The simplest way to avoid being affected by the exploit described in the example is to avoid running git as root (or an Administrator in Windows), and if needed to reduce its use to a minimum. While a generic workaround is not possible, a system could be hardened from the exploit described in the example by removing any such repository if it exists already and creating one as root to block any future attacks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-29187"
},
{
"cve": "CVE-2022-29536",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "In GNOME Epiphany before 41.4 and 42.x before 42.2, an HTML document can trigger a client buffer overflow (in ephy_string_shorten in the UI process) via a long page title. The issue occurs because the number of bytes for a UTF-8 ellipsis character is not properly considered.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-29536"
},
{
"cve": "CVE-2022-32148",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by calling httputil.ReverseProxy.ServeHTTP with a Request.Header map containing a nil value for the X-Forwarded-For header, which causes ReverseProxy to set the client IP as the value of the X-Forwarded-For header.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-32148"
},
{
"cve": "CVE-2022-34903",
"cwe": {
"id": "CWE-74",
"name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim\u0027s keyring and other constraints (e.g., use of GPGME) are met, allows signature forgery via injection into the status line.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-34903"
},
{
"cve": "CVE-2022-34918",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (The attacker can obtain root access, but must start with an unprivileged user namespace to obtain CAP_NET_ADMIN access.) This can be fixed in nft_setelem_parse_data in net/netfilter/nf_tables_api.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-34918"
},
{
"cve": "CVE-2022-36021",
"cwe": {
"id": "CWE-407",
"name": "Inefficient Algorithmic Complexity"
},
"notes": [
{
"category": "summary",
"text": "Redis is an in-memory database that persists on disk. Authenticated users can use string matching commands (like `SCAN` or `KEYS`) with a specially crafted pattern to trigger a denial-of-service attack on Redis, causing it to hang and consume 100% CPU time. The problem is fixed in Redis versions 6.0.18, 6.2.11, 7.0.9.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-36021"
},
{
"cve": "CVE-2022-36227",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In libarchive before 3.6.2, the software does not check for an error after calling calloc function that can return with a NULL pointer if the function fails, which leads to a resultant NULL pointer dereference. NOTE: the discoverer cites this CWE-476 remark but third parties dispute the code-execution impact: \"In rare circumstances, when NULL is equivalent to the 0x0 memory address and privileged code can access it, then writing or reading memory is possible, which may lead to code execution.\"",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-36227"
},
{
"cve": "CVE-2022-36760",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request Smuggling\u0027) vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.54 and prior versions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.0,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-36760"
},
{
"cve": "CVE-2022-37436",
"cwe": {
"id": "CWE-113",
"name": "Improper Neutralization of CRLF Sequences in HTTP Headers (\u0027HTTP Request/Response Splitting\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Prior to Apache HTTP Server 2.4.55, a malicious backend can cause the response headers to be truncated early, resulting in some headers being incorporated into the response body. If the later headers have any security purpose, they will not be interpreted by the client.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-37436"
},
{
"cve": "CVE-2022-37454",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "The Keccak XKCP SHA-3 reference implementation before fdc6fef has an integer overflow and resultant buffer overflow that allows attackers to execute arbitrary code or eliminate expected cryptographic properties. This occurs in the sponge function interface.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-37454"
},
{
"cve": "CVE-2022-37797",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In lighttpd 1.4.65, mod_wstunnel does not initialize a handler function pointer if an invalid HTTP request (websocket handshake) is received. It leads to null pointer dereference which crashes the server. It could be used by an external attacker to cause denial of service condition.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-37797"
},
{
"cve": "CVE-2022-38725",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "An integer overflow in the RFC3164 parser in One Identity syslog-ng 3.0 through 3.37 allows remote attackers to cause a Denial of Service via crafted syslog input that is mishandled by the tcp or network function. syslog-ng Premium Edition 7.0.30 and syslog-ng Store Box 6.10.0 are also affected.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-38725"
},
{
"cve": "CVE-2022-39189",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered the x86 KVM subsystem in the Linux kernel before 5.18.17. Unprivileged guest users can compromise the guest kernel because TLB flush operations are mishandled in certain KVM_VCPU_PREEMPTED situations.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-39189"
},
{
"cve": "CVE-2022-39260",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "Git is an open source, scalable, distributed revision control system. `git shell` is a restricted login shell that can be used to implement Git\u0027s push/pull functionality via SSH. In versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4, the function that splits the command arguments into an array improperly uses an `int` to represent the number of entries in the array, allowing a malicious actor to intentionally overflow the return value, leading to arbitrary heap writes. Because the resulting array is then passed to `execv()`, it is possible to leverage this attack to gain remote code execution on a victim machine. Note that a victim must first allow access to `git shell` as a login shell in order to be vulnerable to this attack. This problem is patched in versions 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 and users are advised to upgrade to the latest version. Disabling `git shell` access via remote logins is a viable short-term workaround.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-39260"
},
{
"cve": "CVE-2022-41409",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-41409"
},
{
"cve": "CVE-2022-41556",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "A resource leak in gw_backend.c in lighttpd 1.4.56 through 1.4.66 could lead to a denial of service (connection-slot exhaustion) after a large amount of anomalous TCP behavior by clients. It is related to RDHUP mishandling in certain HTTP/1.1 chunked situations. Use of mod_fastcgi is, for example, affected. This is fixed in 1.4.67.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-41556"
},
{
"cve": "CVE-2022-41715",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consume much larger amounts of memory. After fix, each regexp being parsed is limited to a 256 MB memory footprint. Regular expressions whose representation would use more space than that are rejected. Normal use of regular expressions is unaffected.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-41715"
},
{
"cve": "CVE-2022-41717",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "summary",
"text": "An attacker can cause excessive memory growth in a Go server accepting HTTP/2 requests. HTTP/2 server connections contain a cache of HTTP header keys sent by the client. While the total number of entries in this cache is capped, an attacker sending very large keys can cause the server to allocate approximately 64 MiB per open connection.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-41717"
},
{
"cve": "CVE-2022-41723",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-41723"
},
{
"cve": "CVE-2022-41860",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In freeradius, when an EAP-SIM supplicant sends an unknown SIM option, the server will try to look that option up in the internal dictionaries. This lookup will fail, but the SIM code will not check for that failure. Instead, it will dereference a NULL pointer, and cause the server to crash.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-41860"
},
{
"cve": "CVE-2022-41861",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in freeradius. A malicious RADIUS client or home server can send a malformed abinary attribute which can cause the server to crash.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-41861"
},
{
"cve": "CVE-2022-41862",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport encryption. In certain conditions a server can cause a libpq client to over-read and report an error message containing uninitialized bytes.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-41862"
},
{
"cve": "CVE-2022-41903",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "Git is distributed revision control system. `git log` can display commits in an arbitrary format using its `--format` specifiers. This functionality is also exposed to `git archive` via the `export-subst` gitattribute. When processing the padding operators, there is a integer overflow in `pretty.c::format_and_pad_commit()` where a `size_t` is stored improperly as an `int`, and then added as an offset to a `memcpy()`. This overflow can be triggered directly by a user running a command which invokes the commit formatting machinery (e.g., `git log --format=...`). It may also be triggered indirectly through git archive via the export-subst mechanism, which expands format specifiers inside of files within the repository during a git archive. This integer overflow can result in arbitrary heap writes, which may result in arbitrary code execution. The problem has been patched in the versions published on 2023-01-17, going back to v2.30.7. Users are advised to upgrade. Users who are unable to upgrade should disable `git archive` in untrusted repositories. If you expose git archive via `git daemon`, disable it by running `git config --global daemon.uploadArch false`.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-41903"
},
{
"cve": "CVE-2022-42919",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "Python 3.9.x before 3.9.16 and 3.10.x before 3.10.9 on Linux allows local privilege escalation in a non-default configuration. The Python multiprocessing library, when used with the forkserver start method on Linux, allows pickles to be deserialized from any user in the same machine local network namespace, which in many system configurations means any user on the same machine. Pickles can execute arbitrary code. Thus, this allows for local user privilege escalation to the user that any forkserver process is running as. Setting multiprocessing.util.abstract_sockets_supported to False is a workaround. The forkserver start method for multiprocessing is not the default start method. This issue is Linux specific because only Linux supports abstract namespace sockets. CPython before 3.9 does not make use of Linux abstract namespace sockets by default. Support for users manually specifying an abstract namespace socket was added as a bugfix in 3.7.8 and 3.8.3, but users would need to make specific uncommon API calls in order to do that in CPython before 3.9.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-42919"
},
{
"cve": "CVE-2022-44370",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "NASM v2.16 was discovered to contain a heap buffer overflow in the component quote_for_pmake() asm/nasm.c:856",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-44370"
},
{
"cve": "CVE-2022-45061",
"cwe": {
"id": "CWE-407",
"name": "Inefficient Algorithmic Complexity"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA (RFC 3490) decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of service. Hostnames are often supplied by remote servers that could be controlled by a malicious actor; in such a scenario, they could trigger excessive CPU consumption on the client attempting to make use of an attacker-supplied supposed hostname. For example, the attack payload could be placed in the Location header of an HTTP response with status code 302. A fix is planned in 3.11.1, 3.10.9, 3.9.16, 3.8.16, and 3.7.16.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-45061"
},
{
"cve": "CVE-2022-45142",
"cwe": {
"id": "CWE-354",
"name": "Improper Validation of Integrity Check Value"
},
"notes": [
{
"category": "summary",
"text": "The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding \"!= 0\" comparisons to the result of memcmp. When these patches were backported to the heimdal-7.7.1 and heimdal-7.8.0 branches (and possibly other branches) a logic inversion sneaked in causing the validation of message integrity codes in gssapi/arcfour to be inverted.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-45142"
},
{
"cve": "CVE-2022-45919",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in the Linux kernel through 6.0.10. In drivers/media/dvb-core/dvb_ca_en50221.c, a use-after-free can occur is there is a disconnect after an open, because of the lack of a wait_event.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-45919"
},
{
"cve": "CVE-2022-46392",
"cwe": {
"id": "CWE-203",
"name": "Observable Discrepancy"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. An adversary with access to precise enough information about memory accesses (typically, an untrusted operating system attacking a secure enclave) can recover an RSA private key after observing the victim performing a single private-key operation, if the window size (MBEDTLS_MPI_WINDOW_SIZE) used for the exponentiation is 3 or smaller.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-46392"
},
{
"cve": "CVE-2022-46393",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in Mbed TLS before 2.28.2 and 3.x before 3.3.0. There is a potential heap-based buffer overflow and heap-based buffer over-read in DTLS if MBEDTLS_SSL_DTLS_CONNECTION_ID is enabled and MBEDTLS_SSL_CID_IN_LEN_MAX \u003e 2 * MBEDTLS_SSL_CID_OUT_LEN_MAX.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-46393"
},
{
"cve": "CVE-2022-47629",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "Libksba before 1.6.3 is prone to an integer overflow vulnerability in the CRL signature parser.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-47629"
},
{
"cve": "CVE-2022-48303",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-48303"
},
{
"cve": "CVE-2022-48434",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "libavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances (e.g., hardware re-initialization upon a mid-video SPS change when Direct3D11 is used).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2022-48434"
},
{
"cve": "CVE-2023-0160",
"cwe": {
"id": "CWE-667",
"name": "Improper Locking"
},
"notes": [
{
"category": "summary",
"text": "A deadlock flaw was found in the Linux kernel\u2019s BPF subsystem. This flaw allows a local user to potentially crash the system.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-0160"
},
{
"cve": "CVE-2023-0330",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability in the lsi53c895a device affects the latest version of qemu. A DMA-MMIO reentrancy problem may lead to memory corruption bugs like stack overflow or use-after-free.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-0330"
},
{
"cve": "CVE-2023-0361",
"cwe": {
"id": "CWE-203",
"name": "Observable Discrepancy"
},
"notes": [
{
"category": "summary",
"text": "A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that connection.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-0361"
},
{
"cve": "CVE-2023-0494",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-0494"
},
{
"cve": "CVE-2023-0567",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-0567"
},
{
"cve": "CVE-2023-0568",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"notes": [
{
"category": "summary",
"text": "In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, core path resolution function allocate buffer one byte too small. When resolving paths with lengths close to system MAXPATHLEN setting, this may lead to the byte after the allocated buffer being overwritten with NUL value, which might lead to unauthorized data access or modification.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-0568"
},
{
"cve": "CVE-2023-0590",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free flaw was found in qdisc_graft in net/sched/sch_api.c in the Linux Kernel due to a race problem. This flaw leads to a denial of service issue. If patch ebda44da44f6 (\"net: sched: fix race condition in qdisc_graft()\") not applied yet, then kernel could be affected.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-0590"
},
{
"cve": "CVE-2023-0662",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-0662"
},
{
"cve": "CVE-2023-1206",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "A hash collision flaw was found in the IPv6 connection lookup table in the Linux kernel\u2019s IPv6 functionality when a user makes a new kind of SYN flood attack. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95%.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-1206"
},
{
"cve": "CVE-2023-1380",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux Kernel. This issue could occur when assoc_info-\u003ereq_len data is bigger than the size of the buffer, defined as WL_EXTRA_BUF_MAX, leading to a denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-1380"
},
{
"cve": "CVE-2023-1393",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in X.Org Server Overlay Window. A Use-After-Free may lead to local privilege escalation. If a client explicitly destroys the compositor overlay window (aka COW), the Xserver would leave a dangling pointer to that window in the CompScreen structure, which will trigger a use-after-free later.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-1393"
},
{
"cve": "CVE-2023-1611",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free flaw was found in btrfs_search_slot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This flaw allows an attacker to crash the system and possibly cause a kernel information lea",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-1611"
},
{
"cve": "CVE-2023-1670",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A flaw use after free in the Linux kernel Xircom 16-bit PCMCIA (PC-card) Ethernet driver was found.A local user could use this flaw to crash the system or potentially escalate their privileges on the system.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-1670"
},
{
"cve": "CVE-2023-1838",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free flaw was found in vhost_net_set_backend in drivers/vhost/net.c in virtio network subcomponent in the Linux kernel due to a double fget. This flaw could allow a local attacker to crash the system, and could even lead to a kernel information leak problem.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-1838"
},
{
"cve": "CVE-2023-1855",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free flaw was found in xgene_hwmon_remove in drivers/hwmon/xgene-hwmon.c in the Hardware Monitoring Linux Kernel Driver (xgene-hwmon). This flaw could allow a local attacker to crash the system due to a race problem. This vulnerability could even lead to a kernel information leak problem.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-1855"
},
{
"cve": "CVE-2023-1859",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free flaw was found in xen_9pfs_front_removet in net/9p/trans_xen.c in Xen transport for 9pfs in the Linux Kernel. This flaw could allow a local attacker to crash the system due to a race problem, possibly leading to a kernel information leak.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-1859"
},
{
"cve": "CVE-2023-1989",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free flaw was found in btsdio_remove in drivers\\bluetooth\\btsdio.c in the Linux Kernel. In this flaw, a call to btsdio_remove with an unfinished job, may cause a race problem leading to a UAF on hdev devices.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-1989"
},
{
"cve": "CVE-2023-1990",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free flaw was found in ndlc_remove in drivers/nfc/st-nci/ndlc.c in the Linux Kernel. This flaw could allow an attacker to crash the system due to a race problem.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-1990"
},
{
"cve": "CVE-2023-2002",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel. This flaw allows an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-2002"
},
{
"cve": "CVE-2023-2124",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "An out-of-bounds memory access flaw was found in the Linux kernel\u2019s XFS file system in how a user restores an XFS image after failure (with a dirty log journal). This flaw allows a local user to crash or potentially escalate their privileges on the system.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-2124"
},
{
"cve": "CVE-2023-2194",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "An out-of-bounds write vulnerability was found in the Linux kernel\u0027s SLIMpro I2C device driver. The userspace \"data-\u003eblock[0]\" variable was not capped to a number between 0-255 and was used as the size of a memcpy, possibly writing beyond the end of dma_buffer. This flaw could allow a local privileged user to crash the system or potentially achieve code execution.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-2194"
},
{
"cve": "CVE-2023-2269",
"cwe": {
"id": "CWE-667",
"name": "Improper Locking"
},
"notes": [
{
"category": "summary",
"text": "A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c in the Linux Kernel Device Mapper-Multipathing sub-component.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-2269"
},
{
"cve": "CVE-2023-2861",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. The 9pfs server did not prohibit opening special files on the host side, potentially allowing a malicious client to escape from the exported 9p tree by creating and opening a device file in the shared folder.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-2861"
},
{
"cve": "CVE-2023-2953",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-2953"
},
{
"cve": "CVE-2023-3006",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"notes": [
{
"category": "summary",
"text": "A known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, becomes actual again for the new hw AmpereOne. Spectre-BHB is similar to Spectre v2, except that malicious code uses the shared branch history (stored in the CPU Branch History Buffer, or BHB) to influence mispredicted branches within the victim\u0027s hardware context. Once that occurs, speculation caused by the mispredicted branches can cause cache allocation. This issue leads to obtaining information that should not be accessible.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-3006"
},
{
"cve": "CVE-2023-3090",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation.\n\nThe out-of-bounds write is caused by missing skb-\u003ecb initialization in the ipvlan network driver. The vulnerability is reachable if\u00a0CONFIG_IPVLAN is enabled.\n\n\nWe recommend upgrading past commit 90cbed5247439a966b645b34eb0a2e037836ea8e.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-3090"
},
{
"cve": "CVE-2023-3111",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel. This possible flaw can be triggered by calling btrfs_ioctl_balance() before calling btrfs_ioctl_defrag().",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-3111"
},
{
"cve": "CVE-2023-3141",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free flaw was found in r592_remove in drivers/memstick/host/r592.c in media access in the Linux Kernel. This flaw allows a local attacker to crash the system at device disconnect, possibly leading to a kernel information leak.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-3141"
},
{
"cve": "CVE-2023-3212",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-3212"
},
{
"cve": "CVE-2023-3247",
"cwe": {
"id": "CWE-252",
"name": "Unchecked Return Value"
},
"notes": [
{
"category": "summary",
"text": "In PHP versions 8.0.* before 8.0.29, 8.1.* before 8.1.20, 8.2.* before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked for failure, and was using narrower range of values than it should have. In case of random generator failure, it could lead to a disclosure of 31 bits of uninitialized memory from the client to the server, and it also made easier to a malicious server to guess the client\u0027s nonce.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-3247"
},
{
"cve": "CVE-2023-3268",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This flaw could allow a local attacker to crash the system or leak kernel internal information.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-3268"
},
{
"cve": "CVE-2023-3301",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-3301"
},
{
"cve": "CVE-2023-3316",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "A NULL pointer dereference in TIFFClose() is caused by a failure to open an output file (non-existent path or a path that requires permissions like /dev/null) while specifying zones.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-3316"
},
{
"cve": "CVE-2023-3390",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free vulnerability was found in the Linux kernel\u0027s netfilter subsystem in net/netfilter/nf_tables_api.c.\n\nMishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue.\n\nWe recommend upgrading past commit\u00a01240eb93f0616b21c675416516ff3d74798fdc97.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-3390"
},
{
"cve": "CVE-2023-3611",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "An out-of-bounds write vulnerability in the Linux kernel\u0027s net/sched: sch_qfq component can be exploited to achieve local privilege escalation.\r\n\r\nThe qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-3611"
},
{
"cve": "CVE-2023-3776",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free vulnerability in the Linux kernel\u0027s net/sched: cls_fw component can be exploited to achieve local privilege escalation.\r\n\r\nIf tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-3776"
},
{
"cve": "CVE-2023-3863",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-3863"
},
{
"cve": "CVE-2023-4128",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free vulnerability in net/sched/cls_fw.c in classifiers (cls_fw, cls_u32, and cls_route) in the Linux Kernel allows a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-4128"
},
{
"cve": "CVE-2023-4194",
"cwe": {
"id": "CWE-863",
"name": "Incorrect Authorization"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in the Linux kernel\u0027s TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 (\"tun: tun_chr_open(): correctly initialize socket uid\"), - 66b2c338adce (\"tap: tap_open(): correctly initialize socket uid\"), pass \"inode-\u003ei_uid\" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-4194"
},
{
"cve": "CVE-2023-20593",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "An issue in \u201cZen 2\u201d CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-20593"
},
{
"cve": "CVE-2023-21255",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "In multiple functions of binder.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-21255"
},
{
"cve": "CVE-2023-22490",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Git is a revision control system. Using a specially-crafted repository, Git prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8 can be tricked into using its local clone optimization even when using a non-local transport. Though Git will abort local clones whose source `$GIT_DIR/objects` directory contains symbolic links, the `objects` directory itself may still be a symbolic link. These two may be combined to include arbitrary files based on known paths on the victim\u0027s filesystem within the malicious repository\u0027s working copy, allowing for data exfiltration in a similar manner as CVE-2022-39253.\n\nA fix has been prepared and will appear in v2.39.2 v2.38.4 v2.37.6 v2.36.5 v2.35.7 v2.34.7 v2.33.7 v2.32.6, v2.31.7 and v2.30.8. If upgrading is impractical, two short-term workarounds are available. Avoid cloning repositories from untrusted sources with `--recurse-submodules`. Instead, consider cloning repositories without recursively cloning their submodules, and instead run `git submodule update` at each layer. Before doing so, inspect each new `.gitmodules` file to ensure that it does not contain suspicious module URLs.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-22490"
},
{
"cve": "CVE-2023-22742",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"notes": [
{
"category": "summary",
"text": "libgit2 is a cross-platform, linkable library implementation of Git. When using an SSH remote with the optional libssh2 backend, libgit2 does not perform certificate checking by default. Prior versions of libgit2 require the caller to set the `certificate_check` field of libgit2\u0027s `git_remote_callbacks` structure - if a certificate check callback is not set, libgit2 does not perform any certificate checking. This means that by default - without configuring a certificate check callback, clients will not perform validation on the server SSH keys and may be subject to a man-in-the-middle attack. Users are encouraged to upgrade to v1.4.5 or v1.5.1. Users unable to upgrade should ensure that all relevant certificates are manually checked.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-22742"
},
{
"cve": "CVE-2023-22745",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "summary",
"text": "tpm2-tss is an open source software implementation of the Trusted Computing Group (TCG) Trusted Platform Module (TPM) 2 Software Stack (TSS2). In affected versions `Tss2_RC_SetHandler` and `Tss2_RC_Decode` both index into `layer_handler` with an 8 bit layer number, but the array only has `TPM2_ERROR_TSS2_RC_LAYER_COUNT` entries, so trying to add a handler for higher-numbered layers or decode a response code with such a layer number reads/writes past the end of the buffer. This Buffer overrun, could result in arbitrary code execution. An example attack would be a MiTM bus attack that returns 0xFFFFFFFF for the RC. Given the common use case of TPM modules an attacker must have local access to the target machine with local system privileges which allows access to the TPM system. Usually TPM access requires administrative privilege.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-22745"
},
{
"cve": "CVE-2023-23454",
"cwe": {
"id": "CWE-843",
"name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
},
"notes": [
{
"category": "summary",
"text": "cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read) because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-23454"
},
{
"cve": "CVE-2023-23931",
"cwe": {
"id": "CWE-754",
"name": "Improper Check for Unusual or Exceptional Conditions"
},
"notes": [
{
"category": "summary",
"text": "cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. In affected versions `Cipher.update_into` would accept Python objects which implement the buffer protocol, but provide only immutable buffers. This would allow immutable objects (such as `bytes`) to be mutated, thus violating fundamental rules of Python and resulting in corrupted output. This now correctly raises an exception. This issue has been present since `update_into` was originally introduced in cryptography 1.8.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-23931"
},
{
"cve": "CVE-2023-23934",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Werkzeug is a comprehensive WSGI web application library. Browsers may allow \"nameless\" cookies that look like `=value` instead of `key=value`. A vulnerable browser may allow a compromised application on an adjacent subdomain to exploit this to set a cookie like `=__Host-test=bad` for another subdomain. Werkzeug prior to 2.2.3 will parse the cookie `=__Host-test=bad` as __Host-test=bad`. If a Werkzeug application is running next to a vulnerable or malicious subdomain which sets such a cookie using a vulnerable browser, the Werkzeug application will see the bad cookie value but the valid cookie key. The issue is fixed in Werkzeug 2.2.3.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.6,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-23934"
},
{
"cve": "CVE-2023-23946",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32.6, 2.31.7, and 2.30.8. By feeding a crafted input to `git apply`, a path outside the working tree can be overwritten as the user who is running `git apply`. A fix has been prepared and will appear in v2.39.2, v2.38.4, v2.37.6, v2.36.5, v2.35.7, v2.34.7, v2.33.7, v2.32.6, v2.31.7, and v2.30.8. As a workaround, use `git apply --stat` to inspect a patch before applying; avoid applying one that creates a symbolic link and then creates a file beyond the symbolic link.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-23946"
},
{
"cve": "CVE-2023-24538",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Templates do not properly consider backticks (`) as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to terminate the literal, injecting arbitrary Javascript code into the Go template. As ES6 template literals are rather complex, and themselves can do string interpolation, the decision was made to simply disallow Go template actions from being used inside of them (e.g. \"var a = {{.}}\"), since there is no obviously safe way to allow this behavior. This takes the same approach as github.com/google/safehtml. With fix, Template.Parse returns an Error when it encounters templates like this, with an ErrorCode of value 12. This ErrorCode is currently unexported, but will be exported in the release of Go 1.21. Users who rely on the previous behavior can re-enable it using the GODEBUG flag jstmpllitinterp=1, with the caveat that backticks will now be escaped. This should be used with caution.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-24538"
},
{
"cve": "CVE-2023-25153",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "summary",
"text": "containerd is an open source container runtime. Before versions 1.6.18 and 1.5.18, when importing an OCI image, there was no limit on the number of bytes read for certain files. A maliciously crafted image with a large file where a limit was not applied could cause a denial of service. This bug has been fixed in containerd 1.6.18 and 1.5.18. Users should update to these versions to resolve the issue. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-25153"
},
{
"cve": "CVE-2023-25155",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "Redis is an in-memory database that persists on disk. Authenticated users issuing specially crafted `SRANDMEMBER`, `ZRANDMEMBER`, and `HRANDFIELD` commands can trigger an integer overflow, resulting in a runtime assertion and termination of the Redis server process. This problem affects all Redis versions. Patches were released in Redis version(s) 6.0.18, 6.2.11 and 7.0.9.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-25155"
},
{
"cve": "CVE-2023-25193",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"notes": [
{
"category": "summary",
"text": "hb-ot-layout-gsubgpos.hh in HarfBuzz through 6.0.0 allows attackers to trigger quadratic growth via consecutive marks during the process of looking back for base glyphs when attaching marks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-25193"
},
{
"cve": "CVE-2023-25588",
"cwe": {
"id": "CWE-908",
"name": "Use of Uninitialized Resource"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in Binutils. The field `the_bfd` of `asymbol`struct is uninitialized in the `bfd_mach_o_get_synthetic_symtab` function, which may lead to an application crash and local denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-25588"
},
{
"cve": "CVE-2023-25690",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack.\r\n\r\nConfigurations are affected when mod_proxy is enabled along with some form of RewriteRule or ProxyPassMatch in which a non-specific pattern matches some portion of the user-supplied request-target (URL) data and is then re-inserted into the proxied request-target using variable substitution. \r\n\r\nRequest splitting/smuggling could result in bypass of access controls in the proxy server, proxying unintended URLs to existing origin servers, and cache poisoning. Users are recommended to update to at least version 2.4.56 of Apache HTTP Server.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-25690"
},
{
"cve": "CVE-2023-25727",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In phpMyAdmin before 4.9.11 and 5.x before 5.2.1, an authenticated user can trigger XSS by uploading a crafted .sql file through the drag-and-drop interface.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-25727"
},
{
"cve": "CVE-2023-26081",
"cwe": {
"id": "CWE-668",
"name": "Exposure of Resource to Wrong Sphere"
},
"notes": [
{
"category": "summary",
"text": "In Epiphany (aka GNOME Web) through 43.0, untrusted web content can trick users into exfiltrating passwords, because autofill occurs in sandboxed contexts.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-26081"
},
{
"cve": "CVE-2023-26965",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "loadImage() in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based use after free via a crafted TIFF image.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-26965"
},
{
"cve": "CVE-2023-27522",
"cwe": {
"id": "CWE-444",
"name": "Inconsistent Interpretation of HTTP Requests (\u0027HTTP Request/Response Smuggling\u0027)"
},
"notes": [
{
"category": "summary",
"text": "HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55.\n\nSpecial characters in the origin response header can truncate/split the response forwarded to the client.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-27522"
},
{
"cve": "CVE-2023-27534",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"notes": [
{
"category": "summary",
"text": "A path traversal vulnerability exists in curl \u003c8.0.0 SFTP implementation causes the tilde (~) character to be wrongly replaced when used as a prefix in the first path element, in addition to its intended use as the first element to indicate a path relative to the user\u0027s home directory. Attackers can exploit this flaw to bypass filtering or execute arbitrary code by crafting a path like /~2/foo while accessing a server with a specific user.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-27534"
},
{
"cve": "CVE-2023-27535",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "An authentication bypass vulnerability exists in libcurl \u003c8.0.0 in the FTP connection reuse feature that can result in wrong credentials being used during subsequent transfers. Previously created connections are kept in a connection pool for reuse if they match the current setup. However, certain FTP settings such as CURLOPT_FTP_ACCOUNT, CURLOPT_FTP_ALTERNATIVE_TO_USER, CURLOPT_FTP_SSL_CCC, and CURLOPT_USE_SSL were not included in the configuration match checks, causing them to match too easily. This could lead to libcurl using the wrong credentials when performing a transfer, potentially allowing unauthorized access to sensitive information.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-27535"
},
{
"cve": "CVE-2023-27536",
"cwe": {
"id": "CWE-287",
"name": "Improper Authentication"
},
"notes": [
{
"category": "summary",
"text": "An authentication bypass vulnerability exists libcurl \u003c8.0.0 in the connection reuse feature which can reuse previously established connections with incorrect user permissions due to a failure to check for changes in the CURLOPT_GSSAPI_DELEGATION option. This vulnerability affects krb5/kerberos/negotiate/GSSAPI transfers and could potentially result in unauthorized access to sensitive information. The safest option is to not reuse connections if the CURLOPT_GSSAPI_DELEGATION option has been changed.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-27536"
},
{
"cve": "CVE-2023-28450",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in Dnsmasq before 2.90. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-28450"
},
{
"cve": "CVE-2023-28466",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "do_tls_getsockopt in net/tls/tls_main.c in the Linux kernel through 6.2.6 lacks a lock_sock call, leading to a race condition (with a resultant use-after-free or NULL pointer dereference).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-28466"
},
{
"cve": "CVE-2023-28486",
"cwe": {
"id": "CWE-116",
"name": "Improper Encoding or Escaping of Output"
},
"notes": [
{
"category": "summary",
"text": "Sudo before 1.9.13 does not escape control characters in log messages.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-28486"
},
{
"cve": "CVE-2023-28487",
"cwe": {
"id": "CWE-116",
"name": "Improper Encoding or Escaping of Output"
},
"notes": [
{
"category": "summary",
"text": "Sudo before 1.9.13 does not escape control characters in sudoreplay output.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-28487"
},
{
"cve": "CVE-2023-29402",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "The go command may generate unexpected code at build time when using cgo. This may result in unexpected behavior when running a go program which uses cgo. This may occur when running an untrusted module which contains directories with newline characters in their names. Modules which are retrieved using the go command, i.e. via \"go get\", are not affected (modules retrieved using GOPATH-mode, i.e. GO111MODULE=off, may be affected).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-29402"
},
{
"cve": "CVE-2023-29404",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "The go command may execute arbitrary code at build time when using cgo. This may occur when running \"go get\" on a malicious module, or when running any other command which builds untrusted code. This is can by triggered by linker flags, specified via a \"#cgo LDFLAGS\" directive. The arguments for a number of flags which are non-optional are incorrectly considered optional, allowing disallowed flags to be smuggled through the LDFLAGS sanitization. This affects usage of both the gc and gccgo compilers.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-29404"
},
{
"cve": "CVE-2023-29405",
"cwe": {
"id": "CWE-74",
"name": "Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "The go command may execute arbitrary code at build time when using cgo. This may occur when running \"go get\" on a malicious module, or when running any other command which builds untrusted code. This is can by triggered by linker flags, specified via a \"#cgo LDFLAGS\" directive. Flags containing embedded spaces are mishandled, allowing disallowed flags to be smuggled through the LDFLAGS sanitization by including them in the argument of another flag. This only affects usage of the gccgo compiler.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-29405"
},
{
"cve": "CVE-2023-29406",
"cwe": {
"id": "CWE-436",
"name": "Interpretation Conflict"
},
"notes": [
{
"category": "summary",
"text": "The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Request.URL.Host value.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-29406"
},
{
"cve": "CVE-2023-29409",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "Extremely large RSA keys in certificate chains can cause a client/server to expend significant CPU time verifying signatures. With fix, the size of RSA keys transmitted during handshakes is restricted to \u003c= 8192 bits. Based on a survey of publicly trusted RSA keys, there are currently only three certificates in circulation with keys larger than this, and all three appear to be test certificates that are not actively deployed. It is possible there are larger keys in use in private PKIs, but we target the web PKI, so causing breakage here in the interests of increasing the default safety of users of crypto/tls seems reasonable.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-29409"
},
{
"cve": "CVE-2023-30086",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiffcp function in tiffcp.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-30086"
},
{
"cve": "CVE-2023-30456",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x86_64 lacks consistency checks for CR0 and CR4.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-30456"
},
{
"cve": "CVE-2023-30772",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/power/supply/da9150-charger.c if a physically proximate attacker unplugs a device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-30772"
},
{
"cve": "CVE-2023-31084",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in drivers/media/dvb-core/dvb_frontend.c in the Linux kernel 6.2. There is a blocking operation when a task is in !TASK_RUNNING. In dvb_frontend_get_event, wait_event_interruptible is called; the condition is dvb_frontend_test_event(fepriv,events). In dvb_frontend_test_event, down(\u0026fepriv-\u003esem) is called. However, wait_event_interruptible would put the process to sleep, and down(\u0026fepriv-\u003esem) may block the process.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-31084"
},
{
"cve": "CVE-2023-31124",
"cwe": {
"id": "CWE-330",
"name": "Use of Insufficiently Random Values"
},
"notes": [
{
"category": "summary",
"text": "c-ares is an asynchronous resolver library. When cross-compiling c-ares and using the autotools build system, CARES_RANDOM_FILE will not be set, as seen when cross compiling aarch64 android. This will downgrade to using rand() as a fallback which could allow an attacker to take advantage of the lack of entropy by not using a CSPRNG. This issue was patched in version 1.19.1.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.7,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-31124"
},
{
"cve": "CVE-2023-31130",
"cwe": {
"id": "CWE-124",
"name": "Buffer Underwrite (\u0027Buffer Underflow\u0027)"
},
"notes": [
{
"category": "summary",
"text": "c-ares is an asynchronous resolver library. ares_inet_net_pton() is vulnerable to a buffer underflow for certain ipv6 addresses, in particular \"0::00:00:00/2\" was found to cause an issue. C-ares only uses this function internally for configuration purposes which would require an administrator to configure such an address via ares_set_sortlist(). However, users may externally use ares_inet_net_pton() for other purposes and thus be vulnerable to more severe issues. This issue has been fixed in 1.19.1.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-31130"
},
{
"cve": "CVE-2023-31147",
"cwe": {
"id": "CWE-330",
"name": "Use of Insufficiently Random Values"
},
"notes": [
{
"category": "summary",
"text": "c-ares is an asynchronous resolver library. When /dev/urandom or RtlGenRandom() are unavailable, c-ares uses rand() to generate random numbers used for DNS query ids. This is not a CSPRNG, and it is also not seeded by srand() so will generate predictable output. Input from the random number generator is fed into a non-compilant RC4 implementation and may not be as strong as the original RC4 implementation. No attempt is made to look for modern OS-provided CSPRNGs like arc4random() that is widely available. This issue has been fixed in version 1.19.1.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-31147"
},
{
"cve": "CVE-2023-31436",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "qfq_change_class in net/sched/sch_qfq.c in the Linux kernel before 6.2.13 allows an out-of-bounds write because lmax can exceed QFQ_MIN_LMAX.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-31436"
},
{
"cve": "CVE-2023-31489",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_capability_llgr() function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-31489"
},
{
"cve": "CVE-2023-32067",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns them to the target resolver. The target resolver erroneously interprets the 0 length as a graceful shutdown of the connection. This issue has been patched in version 1.19.1.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-32067"
},
{
"cve": "CVE-2023-32233",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "In the Linux kernel through 6.3.1, a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-32233"
},
{
"cve": "CVE-2023-32573",
"cwe": {
"id": "CWE-369",
"name": "Divide By Zero"
},
"notes": [
{
"category": "summary",
"text": "In Qt before 5.15.14, 6.0.x through 6.2.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.1, QtSvg QSvgFont m_unitsPerEm initialization is mishandled.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-32573"
},
{
"cve": "CVE-2023-33203",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "The Linux kernel before 6.2.9 has a race condition and resultant use-after-free in drivers/net/ethernet/qualcomm/emac/emac.c if a physically proximate attacker unplugs an emac based device.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-33203"
},
{
"cve": "CVE-2023-34256",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "** DISPUTED ** An issue was discovered in the Linux kernel before 6.3.3. There is an out-of-bounds read in crc16 in lib/crc16.c when called from fs/ext4/super.c because ext4_group_desc_csum does not properly check an offset. NOTE: this is disputed by third parties because the kernel is not intended to defend against attackers with the stated \"When modifying the block device while it is mounted by the filesystem\" access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-34256"
},
{
"cve": "CVE-2023-34872",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability in Outline.cc for Poppler prior to 23.06.0 allows a remote attacker to cause a Denial of Service (DoS) (crash) via a crafted PDF file in OutlineItem::open.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-34872"
},
{
"cve": "CVE-2023-34969",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "D-Bus before 1.15.6 sometimes allows unprivileged users to crash dbus-daemon. If a privileged user with control over the dbus-daemon is using the org.freedesktop.DBus.Monitoring interface to monitor message bus traffic, then an unprivileged user with the ability to connect to the same dbus-daemon can cause a dbus-daemon crash under some circumstances via an unreplyable message. When done on the well-known system bus, this is a denial-of-service vulnerability. The fixed versions are 1.12.28, 1.14.8, and 1.15.6.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-34969"
},
{
"cve": "CVE-2023-35001",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-35001"
},
{
"cve": "CVE-2023-35788",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets. This may result in denial of service or privilege escalation.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-35788"
},
{
"cve": "CVE-2023-35789",
"cwe": {
"id": "CWE-522",
"name": "Insufficiently Protected Credentials"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., for amqp-publish or amqp-consume) and are thus visible to local attackers by listing a process and its arguments.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-35789"
},
{
"cve": "CVE-2023-35823",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-35823"
},
{
"cve": "CVE-2023-35824",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/pci/dm1105/dm1105.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-35824"
},
{
"cve": "CVE-2023-35828",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-35828"
},
{
"cve": "CVE-2023-36054",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"notes": [
{
"category": "summary",
"text": "lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can trigger a kadmind crash. This occurs because _xdr_kadm5_principal_ent_rec does not validate the relationship between n_key_data and the key_data array count.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-36054"
},
{
"cve": "CVE-2023-36617",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"notes": [
{
"category": "summary",
"text": "A ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase in execution time for parsing strings to URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete fix for CVE-2023-28755. Version 0.10.3 is also a fixed version.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-36617"
},
{
"cve": "CVE-2023-36664",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "summary",
"text": "Artifex Ghostscript through 10.01.2 mishandles permission validation for pipe devices (with the %pipe% prefix or the | pipe character prefix).",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-36664"
},
{
"cve": "CVE-2023-37920",
"cwe": {
"id": "CWE-345",
"name": "Insufficient Verification of Data Authenticity"
},
"notes": [
{
"category": "summary",
"text": "Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes \"e-Tugra\" root certificates. e-Tugra\u0027s root certificates were subject to an investigation prompted by reporting of security issues in their systems. Certifi 2023.07.22 removes root certificates from \"e-Tugra\" from the root store.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-37920"
},
{
"cve": "CVE-2023-38559",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "summary",
"text": "A buffer overflow flaw was found in base/gdevdevn.c:1973 in devn_pcx_write_rle() in ghostscript. This issue may allow a local attacker to cause a denial of service via outputting a crafted PDF file for a DEVN device with gs.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-38559"
},
{
"cve": "CVE-2023-40283",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"1",
"2",
"3",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
},
{
"category": "vendor_fix",
"details": "Update to V2.4 or later version",
"product_ids": [
"4"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109826613/"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1",
"2",
"3",
"4",
"5",
"11",
"10",
"9",
"8",
"7",
"6"
]
}
],
"title": "CVE-2023-40283"
}
]
}
SSA-831302
Vulnerability from csaf_siemens - Published: 2023-06-13 00:00 - Updated: 2024-04-09 00:00Summary
SSA-831302: Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP before V1.3.0
Notes
Summary: Multiple vulnerabilities have been identified in the BIOS of the SIMATIC S7-1500 TM MFP before V1.3.0.
Siemens has released a new version for SIMATIC S7-1500 TM MFP - BIOS and recommends to update to the latest version.
General Recommendations: As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download:
https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.
Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity
Additional Resources: For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories
Terms of Use: Siemens Security Advisories are subject to the terms and conditions contained in Siemens' underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter "License Terms"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens' Global Website (https://www.siemens.com/terms_of_use, hereinafter "Terms of Use"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.
References
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Disclosure is not limited. (TLPv2: TLP:CLEAR)",
"tlp": {
"label": "WHITE"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Multiple vulnerabilities have been identified in the BIOS of the SIMATIC S7-1500 TM MFP before V1.3.0.\n\nSiemens has released a new version for SIMATIC S7-1500 TM MFP - BIOS and recommends to update to the latest version.",
"title": "Summary"
},
{
"category": "general",
"text": "As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens\u0027 operational guidelines for Industrial Security (Download: \nhttps://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals.\nAdditional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity",
"title": "General Recommendations"
},
{
"category": "general",
"text": "For further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories",
"title": "Additional Resources"
},
{
"category": "legal_disclaimer",
"text": "Siemens Security Advisories are subject to the terms and conditions contained in Siemens\u0027 underlying license terms or other applicable agreements previously agreed to with Siemens (hereinafter \"License Terms\"). To the extent applicable to information, software or documentation made available in or through a Siemens Security Advisory, the Terms of Use of Siemens\u0027 Global Website (https://www.siemens.com/terms_of_use, hereinafter \"Terms of Use\"), in particular Sections 8-10 of the Terms of Use, shall apply additionally. In case of conflicts, the License Terms shall prevail over the Terms of Use.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "productcert@siemens.com",
"name": "Siemens ProductCERT",
"namespace": "https://www.siemens.com"
},
"references": [
{
"category": "self",
"summary": "SSA-831302: Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP before V1.3.0 - HTML Version",
"url": "https://cert-portal.siemens.com/productcert/html/ssa-831302.html"
},
{
"category": "self",
"summary": "SSA-831302: Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP before V1.3.0 - CSAF Version",
"url": "https://cert-portal.siemens.com/productcert/csaf/ssa-831302.json"
},
{
"category": "self",
"summary": "SSA-831302: Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP before V1.3.0 - PDF Version",
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-831302.pdf"
},
{
"category": "self",
"summary": "SSA-831302: Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP before V1.3.0 - TXT Version",
"url": "https://cert-portal.siemens.com/productcert/txt/ssa-831302.txt"
}
],
"title": "SSA-831302: Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP before V1.3.0",
"tracking": {
"current_release_date": "2024-04-09T00:00:00Z",
"generator": {
"engine": {
"name": "Siemens ProductCERT CSAF Generator",
"version": "1"
}
},
"id": "SSA-831302",
"initial_release_date": "2023-06-13T00:00:00Z",
"revision_history": [
{
"date": "2023-06-13T00:00:00Z",
"legacy_version": "1.0",
"number": "1",
"summary": "Publication Date"
},
{
"date": "2023-09-12T00:00:00Z",
"legacy_version": "1.1",
"number": "2",
"summary": "Added CVE-2022-1015, CVE-2023-2898, CVE-2023-31248, CVE-2023-3390, CVE-2023-35001, CVE-2023-3610, CVE-2023-3611, CVE-2023-3776, CVE-2023-4004, CVE-2023-4015, CVE-2023-4128, CVE-2023-4147, CVE-2023-4273"
},
{
"date": "2023-11-14T00:00:00Z",
"legacy_version": "1.2",
"number": "3",
"summary": "Added CVE-2023-4527, CVE-2023-4806, CVE-2023-4911, CVE-2023-5156"
},
{
"date": "2023-12-12T00:00:00Z",
"legacy_version": "1.3",
"number": "4",
"summary": "Added CVE-2021-44879, CVE-2023-45863"
},
{
"date": "2024-04-09T00:00:00Z",
"legacy_version": "1.4",
"number": "5",
"summary": "Added fix for SIMATIC S7-1500 TM MFP - BIOS"
}
],
"status": "interim",
"version": "5"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003cV1.3.0",
"product": {
"name": "SIMATIC S7-1500 TM MFP - BIOS",
"product_id": "1"
}
}
],
"category": "product_name",
"name": "SIMATIC S7-1500 TM MFP - BIOS"
}
],
"category": "vendor",
"name": "Siemens"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2016-10228",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The iconv program in the GNU C Library (aka glibc or libc6) 2.31 and earlier, when invoked with multiple suffixes in the destination encoding (TRANSLATE or IGNORE) along with the -c option, enters an infinite loop when processing invalid multi-byte input sequences, leading to a denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2016-10228"
},
{
"cve": "CVE-2019-25013",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "The iconv feature in the GNU C Library (aka glibc or libc6) through 2.32, when processing invalid multi-byte input sequences in the EUC-KR encoding, may have a buffer over-read.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2019-25013"
},
{
"cve": "CVE-2020-1752",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free vulnerability introduced in glibc upstream version 2.14 was found in the way the tilde expansion was carried out. Directory paths containing an initial tilde followed by a valid username were affected by this issue. A local attacker could exploit this flaw by creating a specially crafted path that, when processed by the glob function, would potentially lead to arbitrary code execution. This was fixed in version 2.32.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2020-1752"
},
{
"cve": "CVE-2020-10029",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "The GNU C Library (aka glibc or libc6) before 2.32 could overflow an on-stack buffer during range reduction if an input to an 80-bit long double function contains a non-canonical bit pattern, a seen when passing a 0x5d414141414141410000 value to sinl on x86 targets. This is related to sysdeps/ieee754/ldbl-96/e_rem_pio2l.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2020-10029"
},
{
"cve": "CVE-2020-27618",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"notes": [
{
"category": "summary",
"text": "The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid multi-byte input sequences in IBM1364, IBM1371, IBM1388, IBM1390, and IBM1399 encodings, fails to advance the input state, which could lead to an infinite loop in applications, resulting in a denial of service, a different vulnerability from CVE-2016-10228.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2020-27618"
},
{
"cve": "CVE-2020-29562",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"notes": [
{
"category": "summary",
"text": "The iconv function in the GNU C Library (aka glibc or libc6) 2.30 to 2.32, when converting UCS4 text containing an irreversible character, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2020-29562"
},
{
"cve": "CVE-2021-3326",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"notes": [
{
"category": "summary",
"text": "The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-3326"
},
{
"cve": "CVE-2021-3998",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in glibc. The realpath() function can mistakenly return an unexpected value, potentially leading to information leakage and disclosure of sensitive data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-3998"
},
{
"cve": "CVE-2021-3999",
"cwe": {
"id": "CWE-193",
"name": "Off-by-one Error"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in glibc. An off-by-one buffer overflow and underflow in getcwd() may lead to memory corruption when the size of the buffer is exactly 1. A local attacker who can control the input buffer and size passed to getcwd() in a setuid program could use this flaw to potentially execute arbitrary code and escalate their privileges on the system.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-3999"
},
{
"cve": "CVE-2021-20269",
"cwe": {
"id": "CWE-276",
"name": "Incorrect Default Permissions"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in the permissions of a log file created by kexec-tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipped by Fedora versions prior to 2.0.21-8 and RHEL versions prior to 2.0.20-47.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-20269"
},
{
"cve": "CVE-2021-27645",
"cwe": {
"id": "CWE-415",
"name": "Double Free"
},
"notes": [
{
"category": "summary",
"text": "The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service or Denial of Service on the local system. This is related to netgroupcache.c.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 2.5,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-27645"
},
{
"cve": "CVE-2021-28831",
"cwe": {
"id": "CWE-755",
"name": "Improper Handling of Exceptional Conditions"
},
"notes": [
{
"category": "summary",
"text": "decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-28831"
},
{
"cve": "CVE-2021-33574",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "The mq_notify function in the GNU C Library (aka glibc) versions 2.32 and 2.33 has a use-after-free. It may use the notification thread attributes object (passed through its struct sigevent parameter) after it has been freed by the caller, leading to a denial of service (application crash) or possibly unspecified other impact.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-33574"
},
{
"cve": "CVE-2021-35942",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information. This occurs because atoi was used but strtoul should have been used to ensure correct calculations.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-35942"
},
{
"cve": "CVE-2021-38604",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In librt in the GNU C Library (aka glibc) through 2.34, sysdeps/unix/sysv/linux/mq_notify.c mishandles certain NOTIFY_REMOVED data, leading to a NULL pointer dereference. NOTE: this vulnerability was introduced as a side effect of the CVE-2021-33574 fix.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-38604"
},
{
"cve": "CVE-2021-42373",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "A NULL pointer dereference in Busybox\u0027s man applet leads to denial of service when a section name is supplied but no page argument is given.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-42373"
},
{
"cve": "CVE-2021-42374",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "An out-of-bounds heap read in Busybox\u0027s unlzma applet leads to information leak and denial of service when crafted LZMA-compressed input is decompressed. This can be triggered by any applet/format that internally supports LZMA compression.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-42374"
},
{
"cve": "CVE-2021-42375",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "An incorrect handling of a special element in Busybox\u0027s ash applet leads to denial of service when processing a crafted shell command, due to the shell mistaking specific characters for reserved characters. This may be used for DoS under rare conditions of filtered command input.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-42375"
},
{
"cve": "CVE-2021-42376",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "A NULL pointer dereference in Busybox\u0027s hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \\x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-42376"
},
{
"cve": "CVE-2021-42377",
"cwe": {
"id": "CWE-763",
"name": "Release of Invalid Pointer or Reference"
},
"notes": [
{
"category": "summary",
"text": "An attacker-controlled pointer free in Busybox\u0027s hush applet leads to denial of service and possible code execution when processing a crafted shell command, due to the shell mishandling the \u0026\u0026\u0026 string. This may be used for remote code execution under rare conditions of filtered command input.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-42377"
},
{
"cve": "CVE-2021-42378",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free in Busybox\u0027s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_i function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-42378"
},
{
"cve": "CVE-2021-42379",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free in Busybox\u0027s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the next_input_file function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-42379"
},
{
"cve": "CVE-2021-42380",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free in awk leads to denial of service and possibly code execution when processing a crafted awk pattern in the clrvar function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-42380"
},
{
"cve": "CVE-2021-42381",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free in awk leads to denial of service and possibly code execution when processing a crafted awk pattern in the hash_init function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-42381"
},
{
"cve": "CVE-2021-42382",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free in awk leads to denial of service and possibly code execution when processing a crafted awk pattern in the getvar_s function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-42382"
},
{
"cve": "CVE-2021-42383",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free in awk leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-42383"
},
{
"cve": "CVE-2021-42384",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free in Busybox\u0027s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the handle_special function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-42384"
},
{
"cve": "CVE-2021-42385",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free in awk leads to denial of service and possibly code execution when processing a crafted awk pattern in the evaluate function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-42385"
},
{
"cve": "CVE-2021-42386",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free in awk leads to denial of service and possibly code execution when processing a crafted awk pattern in the nvalloc function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-42386"
},
{
"cve": "CVE-2021-44879",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2021-44879"
},
{
"cve": "CVE-2022-1015",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in the Linux kernel in linux/net/netfilter/nf_tables_api.c of the netfilter subsystem. This flaw allows a local user to cause an out-of-bounds write issue.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-1015"
},
{
"cve": "CVE-2022-1882",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free flaw was found in the Linux kernel\u2019s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free_pipe_info() that is already called. This flaw allows a local user to crash or potentially escalate their privileges on the system.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-1882"
},
{
"cve": "CVE-2022-2585",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free flaw was found in the Linux kernel\u2019s POSIX CPU timers functionality in the way a user creates and then deletes the timer in the non-leader thread of the program. This flaw allows a local user to crash or potentially escalate their privileges on the system.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-2585"
},
{
"cve": "CVE-2022-2588",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "Zhenpeng Lin discovered that the network packet scheduler implementation in the Linux kernel did not properly remove all references to a route filter before freeing it in some situations. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-2588"
},
{
"cve": "CVE-2022-2905",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "An out-of-bounds memory read flaw was found in the Linux kernel\u0027s BPF subsystem in how a user calls the bpf_tail_call function with a key larger than the max_entries of the map. This flaw allows a local user to gain unauthorized access to data.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-2905"
},
{
"cve": "CVE-2022-3028",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "A race condition was found in the Linux kernel\u0027s IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-3028"
},
{
"cve": "CVE-2022-3435",
"cwe": {
"id": "CWE-119",
"name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
},
"notes": [
{
"category": "summary",
"text": "A vulnerability classified as problematic has been found in Linux Kernel. This affects the function fib_nh_match of the file net/ipv4/fib_semantics.c of the component IPv4 Handler. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-210357 was assigned to this vulnerability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-3435"
},
{
"cve": "CVE-2022-3586",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in the Linux kernel\u2019s networking code. A use-after-free was found in the way the sch_sfb enqueue function used the socket buffer (SKB) cb field after the same SKB had been enqueued (and freed) into a child qdisc. This flaw allows a local, unprivileged user to crash the system, causing a denial of service.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-3586"
},
{
"cve": "CVE-2022-4378",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A stack overflow flaw was found in the Linux kernel\u0027s SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-4378"
},
{
"cve": "CVE-2022-4662",
"cwe": {
"id": "CWE-455",
"name": "Non-exit on Failed Initialization"
},
"notes": [
{
"category": "summary",
"text": "A flaw incorrect access control in the Linux kernel USB core subsystem was found in the way user attaches usb device. A local user could use this flaw to crash the system.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-4662"
},
{
"cve": "CVE-2022-20421",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "In binder_inc_ref_for_node of binder.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-239630375References: Upstream kernel",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-20421"
},
{
"cve": "CVE-2022-20422",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "In emulation_proc_handler of armv8_deprecated.c, there is a possible way to corrupt memory due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-237540956References: Upstream kernel",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-20422"
},
{
"cve": "CVE-2022-21233",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "Improper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-21233"
},
{
"cve": "CVE-2022-23218",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "summary",
"text": "The deprecated compatibility function svcunix_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its path argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-23218"
},
{
"cve": "CVE-2022-23219",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"notes": [
{
"category": "summary",
"text": "The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-23219"
},
{
"cve": "CVE-2022-28391",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record\u0027s value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal\u0027s colors.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-28391"
},
{
"cve": "CVE-2022-30065",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free in Busybox 1.35-x\u0027s awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-30065"
},
{
"cve": "CVE-2022-39188",
"cwe": {
"id": "CWE-362",
"name": "Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of a race condition (unmap_mapping_range versus munmap), a device driver can free a page while it still has stale TLB entries. This only occurs in situations with VM_PFNMAP VMAs.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-39188"
},
{
"cve": "CVE-2022-39190",
"cwe": {
"id": "CWE-400",
"name": "Uncontrolled Resource Consumption"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in net/netfilter/nf_tables_api.c in the Linux kernel before 5.19.6. A denial of service can occur upon binding to an already bound chain.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-39190"
},
{
"cve": "CVE-2022-40307",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-40307"
},
{
"cve": "CVE-2022-41222",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "mm/mremap.c in the Linux kernel before 5.13.3 has a use-after-free via a stale TLB because an rmap lock is not held during a PUD move.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.0,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-41222"
},
{
"cve": "CVE-2022-42703",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2022-42703"
},
{
"cve": "CVE-2023-0179",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "summary",
"text": "A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2023-0179"
},
{
"cve": "CVE-2023-0394",
"cwe": {
"id": "CWE-311",
"name": "Missing Encryption of Sensitive Data"
},
"notes": [
{
"category": "summary",
"text": "A NULL pointer dereference flaw was found in rawv6_push_pending_frames in net/ipv6/raw.c in the network subcomponent in the Linux kernel. This flaw causes the system to crash.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2023-0394"
},
{
"cve": "CVE-2023-1073",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "A memory corruption flaw was found in the Linux kernel\u2019s human interface device (HID) subsystem in how a user inserts a malicious USB device. This flaw allows a local user to crash or potentially escalate their privileges on the system.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2023-1073"
},
{
"cve": "CVE-2023-2898",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"notes": [
{
"category": "summary",
"text": "There is a null-pointer-dereference flaw found in f2fs_write_end_io in fs/f2fs/data.c in the Linux kernel. This flaw allows a local privileged user to cause a denial of service problem.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2023-2898"
},
{
"cve": "CVE-2023-3390",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free vulnerability was found in the Linux kernel\u0027s netfilter subsystem in net/netfilter/nf_tables_api.c.\n\nMishandled error handling with NFT_MSG_NEWRULE makes it possible to use a dangling pointer in the same transaction causing a use-after-free vulnerability. This flaw allows a local attacker with user access to cause a privilege escalation issue.\n\nWe recommend upgrading past commit\u00a01240eb93f0616b21c675416516ff3d74798fdc97.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2023-3390"
},
{
"cve": "CVE-2023-3610",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free vulnerability in the Linux kernel\u0027s netfilter: nf_tables component can be exploited to achieve local privilege escalation.\r\n\r\nFlaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2023-3610"
},
{
"cve": "CVE-2023-3611",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "An out-of-bounds write vulnerability in the Linux kernel\u0027s net/sched: sch_qfq component can be exploited to achieve local privilege escalation.\r\n\r\nThe qfq_change_agg() function in net/sched/sch_qfq.c allows an out-of-bounds write because lmax is updated according to packet sizes without bounds checks.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2023-3611"
},
{
"cve": "CVE-2023-3776",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free vulnerability in the Linux kernel\u0027s net/sched: cls_fw component can be exploited to achieve local privilege escalation.\r\n\r\nIf tcf_change_indev() fails, fw_set_parms() will immediately return an error after incrementing or decrementing the reference counter in tcf_bind_filter(). If an attacker can control the reference counter and set it to zero, they can cause the reference to be freed, leading to a use-after-free vulnerability.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2023-3776"
},
{
"cve": "CVE-2023-4004",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free flaw was found in the Linux kernel\u0027s netfilter in the way a user triggers the nft_pipapo_remove function with the element, without a NFT_SET_EXT_KEY_END. This issue could allow a local user to crash the system or potentially escalate their privileges on the system.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2023-4004"
},
{
"cve": "CVE-2023-4015",
"cwe": {
"id": "CWE-20",
"name": "Improper Input Validation"
},
"notes": [
{
"category": "summary",
"text": "The netfilter subsystem in the Linux kernel did not properly handle bound chain deactivation in certain circumstances. A local attacker could possibly use this to cause a denial of service (system crash) or execute arbitrary code.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2023-4015"
},
{
"cve": "CVE-2023-4128",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free vulnerability in net/sched/cls_fw.c in classifiers (cls_fw, cls_u32, and cls_route) in the Linux Kernel allows a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2023-4128"
},
{
"cve": "CVE-2023-4147",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A use-after-free vulnerability in the Linux kernel\u2019s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID allows a local user to crash or escalate their privileges on the system.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2023-4147"
},
{
"cve": "CVE-2023-4273",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "This vulnerability exists in the implementation of the file name reconstruction function, which is responsible for reading file name entries from a directory index and merging file name parts belonging to one file into a single long file name. Since the file name characters are copied into a stack variable, a local privileged attacker could use this vulnerability to overflow the kernel stack.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.0,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2023-4273"
},
{
"cve": "CVE-2023-4527",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in glibc. When the getaddrinfo function is called with the AF_UNSPEC address family and the system is configured with no-aaaa mode via /etc/resolv.conf, a DNS response via TCP larger than 2048 bytes can potentially disclose stack contents through the function returned address data, and may cause a crash.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2023-4527"
},
{
"cve": "CVE-2023-4806",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in glibc. In an extremely rare situation, the getaddrinfo function may access memory that has been freed, resulting in an application crash. This issue is only exploitable when a NSS module implements only the _nss_*_gethostbyname2_r and _nss_*_getcanonname_r hooks without implementing the _nss_*_gethostbyname3_r hook. The resolved name should return a large number of IPv6 and IPv4, and the call to the getaddrinfo function should have the AF_INET6 address family with AI_CANONNAME, AI_ALL and AI_V4MAPPED as flags.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2023-4806"
},
{
"cve": "CVE-2023-4911",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "summary",
"text": "A buffer overflow was discovered in the GNU C Library\u0027s dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2023-4911"
},
{
"cve": "CVE-2023-5156",
"cwe": {
"id": "CWE-401",
"name": "Missing Release of Memory after Effective Lifetime"
},
"notes": [
{
"category": "summary",
"text": "A flaw was found in the GNU C Library. A recent fix for CVE-2023-4806 introduced the potential for a memory leak, which may result in an application crash.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2023-5156"
},
{
"cve": "CVE-2023-31248",
"cwe": {
"id": "CWE-416",
"name": "Use After Free"
},
"notes": [
{
"category": "summary",
"text": "Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability; `nft_chain_lookup_byid()` failed to check whether a chain was active and CAP_NET_ADMIN is in any user or network namespace",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2023-31248"
},
{
"cve": "CVE-2023-35001",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability; nft_byteorder poorly handled vm register contents when CAP_NET_ADMIN is in any user or network namespace",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2023-35001"
},
{
"cve": "CVE-2023-45863",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"notes": [
{
"category": "summary",
"text": "An issue was discovered in lib/kobject.c in the Linux kernel before 6.2.3. With root access, an attacker can trigger a race condition that results in a fill_kobj_path out-of-bounds write.",
"title": "Summary"
}
],
"product_status": {
"known_affected": [
"1"
]
},
"remediations": [
{
"category": "vendor_fix",
"details": "Update to V1.3.0 or later version",
"product_ids": [
"1"
],
"url": "https://support.industry.siemens.com/cs/ww/en/view/109945851/"
},
{
"category": "workaround",
"details": "Only build and run applications from trusted sources",
"product_ids": [
"1"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
},
"products": [
"1"
]
}
],
"title": "CVE-2023-45863"
}
]
}
SUSE-SU-2023:3599-1
Vulnerability from csaf_suse - Published: 2023-09-21 10:18 - Updated: 2023-09-21 10:18Summary
Security update for the Linux Kernel
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel
Description of the patch:
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
- CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203330).
- CVE-2022-40133: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203329).
- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).
- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).
- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).
- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).
- CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233).
- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).
- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).
- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).
- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).
- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).
- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).
- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).
- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).
- CVE-2023-4563: Fixed use-after-free in nft_verdict_dump due to a race between set GC and transaction (bsc#1214727).
- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).
- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).
- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).
- CVE-2023-37453: Fixed oversight in SuperSpeed initialization (bsc#1213123).
The following non-security bugs were fixed:
- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).
- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (git-fixes).
- ACPI: processor: perflib: Use the 'no limit' frequency QoS (git-fixes).
- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table (git-fixes).
- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).
- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).
- ALSA: hda/realtek - Remodified 3k pull low procedure (git-fixes).
- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED (git-fixes).
- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx (git-fixes).
- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).
- ALSA: hda/realtek: Switch Dell Oasis models to use SPI (git-fixes).
- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (git-fixes).
- ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces (git-fixes).
- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).
- ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (git-fixes).
- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (git-fixes).
- ARM: dts: imx6sll: fixup of operating points (git-fixes).
- ARM: spear: Do not use timer namespace for timer_shutdown() function (bsc#1213970).
- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (git-fixes).
- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ (git-fixes).
- ASoC: lower 'no backend DAIs enabled for ... Port' log severity (git-fixes).
- ASoC: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).
- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).
- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).
- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).
- Bluetooth: Fix potential use-after-free when clear keys (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (git-fixes).
- Bluetooth: Remove unused declaration amp_read_loc_info() (git-fixes).
- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (git-fixes).
- Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).
- CONFIG_NVME_VERBOSE_ERRORS=y gone with a82baa8083b
- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13 gone with 7e152d55123
- Created new preempt kernel flavor Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT->y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel.
- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).
- Documentation: devices.txt: Remove ttyIOC* (git-fixes).
- Documentation: devices.txt: Remove ttySIOC* (git-fixes).
- Drivers: hv: Do not remap addresses that are above shared_gpa_boundary (bsc#1206453).
- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).
- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).
- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).
- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).
- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).
- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).
- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).
- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)
- HID: add quirk for 03f0:464a HP Elite Presenter Mouse (git-fixes).
- HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).
- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (git-fixes).
- HID: multitouch: Correct devm device reference for hidinput input_dev name (git-fixes).
- HID: wacom: remove the battery when the EKR is off (git-fixes).
- HWPOISON: offline support: fix spelling in Documentation/ABI/ (git-fixes).
- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)
- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
- Input: exc3000 - properly stop timer on shutdown (git-fixes).
- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).
- Kbuild: add -Wno-shift-negative-value where -Wextra is used (bsc#1214756).
- Kbuild: move to -std=gnu11 (bsc#1214756).
- PCI/ASPM: Avoid link retraining race (git-fixes).
- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).
- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (git-fixes).
- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).
- PCI: acpiphp: Reassign resources on bridge if necessary (git-fixes).
- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).
- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).
- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).
- PCI: meson: Remove cast between incompatible function type (git-fixes).
- PCI: microchip: Correct the DED and SEC interrupt bit offsets (git-fixes).
- PCI: microchip: Remove cast between incompatible function type (git-fixes).
- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
- PCI: rockchip: Remove writes to unused registers (git-fixes).
- PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (git-fixes).
- PCI: tegra194: Fix possible array out of bounds access (git-fixes).
- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).
- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)
- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
- RDMA/hns: Fix port active speed (git-fixes)
- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)
- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)
- RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes)
- RDMA/siw: Correct wrong debug message (git-fixes)
- RDMA/umem: Set iova in ODP flow (git-fixes)
- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.
- Revert 'IB/isert: Fix incorrect release of isert connection' (git-fixes)
- Revert 'tracing: Add '(fault)' name injection to kernel probes' (git-fixes).
- Update patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- amba: bus: fix refcount leak (git-fixes).
- arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (git-fixes).
- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).
- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (git-fixes).
- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).
- backlight/bd6107: Compare against struct fb_info.device (git-fixes).
- backlight/gpio_backlight: Compare against struct fb_info.device (git-fixes).
- backlight/lv5207lp: Compare against struct fb_info.device (git-fixes).
- batman-adv: Do not get eth header before batadv_check_management_packet (git-fixes).
- batman-adv: Do not increase MTU when set by user (git-fixes).
- batman-adv: Fix TT global entry leak when client roamed back (git-fixes).
- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).
- batman-adv: Hold rtnl lock during MTU update via netlink (git-fixes).
- batman-adv: Trigger events for auto adjusted MTU (git-fixes).
- bnx2x: fix page fault following EEH recovery (bsc#1214299).
- bpf: Disable preemption in bpf_event_output (git-fixes).
- bpftool: Print newline before '}' for struct with padding only fields (bsc#1211220 jsc#PED-3924).
- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).
- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).
- bus: ti-sysc: Fix cast to enum warning (git-fixes).
- bus: ti-sysc: Flush posted write on enable before reset (git-fixes).
- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (git-fixes).
- ceph: defer stopping mdsc delayed_work (bsc#1214392).
- ceph: do not check for quotas on MDS stray dirs (bsc#1214238).
- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).
- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). gcc7 on SLE 15 does not support this while later gcc does.
- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).
- cifs: allow dumping keys for directories too (bsc#1193629).
- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).
- cifs: if deferred close is disabled then close files immediately (git-fixes).
- cifs: is_network_name_deleted should return a bool (bsc#1193629).
- cifs: update internal module version number for cifs.ko (bsc#1193629).
- clk: Fix slab-out-of-bounds error in devm_clk_release() (git-fixes).
- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes).
- clk: imx8mp: fix sai4 clock (git-fixes).
- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).
- clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz (git-fixes).
- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).
- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).
- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src (git-fixes).
- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).
- clk: sunxi-ng: Modify mismatched function name (git-fixes).
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).
- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).
- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).
- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).
- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).
- cpu/SMT: Allow enabling partial SMT states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpufreq: Fix the race condition while updating the transition_task of policy (git-fixes).
- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (bsc#1214659).
- cpufreq: intel_pstate: Enable HWP IO boost for all servers (bsc#1208949 jsc#PED-6003 jsc#PED-6004).
- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- cpufreq: intel_pstate: Read all MSRs on the target CPU (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- cpufreq: intel_pstate: hybrid: Rework HWP calibration (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- crypto: caam - fix unchecked return value error (git-fixes).
- crypto: stm32 - Properly handle pm_runtime_get failing (git-fixes).
- define more Hyper-V related constants (bsc#1206453).
- dma-buf/sw_sync: Avoid recursive lock during fence signal (git-fixes).
- dma-buf/sync_file: Fix docs syntax (git-fixes).
- dmaengine: idxd: Modify the dependence of attribute pasid_enabled (git-fixes).
- dmaengine: mcf-edma: Fix a potential un-allocated memory access (git-fixes).
- dmaengine: pl330: Return DMA_PAUSED when transaction is paused (git-fixes).
- dmaengine: ste_dma40: Add missing IRQ check in d40_probe (git-fixes).
- docs/process/howto: Replace C89 with C11 (bsc#1214756).
- docs: kernel-parameters: Refer to the correct bitmap function (git-fixes).
- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).
- docs: printk-formats: Fix hex printing of signed values (git-fixes).
- driver core: test_async: fix an error code (git-fixes).
- drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (git-fixes).
- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).
- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz (git-fixes).
- drm/amd/display: Disable phantom OTG after enable for plane disable (git-fixes).
- drm/amd/display: Do not set drr on pipe commit (git-fixes).
- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).
- drm/amd/display: Ensure that planes are in the same order (git-fixes).
- drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register (git-fixes).
- drm/amd/display: Retain phantom plane/stream if validation fails (git-fixes).
- drm/amd/display: Skip DPP DTO update if root clock is gated (git-fixes).
- drm/amd/display: Use update plane and stream routine for DCN32x (git-fixes).
- drm/amd/display: check TG is non-null before checking if enabled (git-fixes).
- drm/amd/display: check attr flag before set cursor degamma on DCN3+ (git-fixes).
- drm/amd/display: disable RCO for DCN314 (git-fixes).
- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).
- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set (git-fixes).
- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).
- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).
- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).
- drm/amd/display: trigger timing sync only if TG is running (git-fixes).
- drm/amd/pm/smu7: move variables to where they are used (git-fixes).
- drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation (git-fixes).
- drm/amd/pm: expose swctf threshold setting for legacy powerplay (git-fixes).
- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).
- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings (git-fixes).
- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings (git-fixes).
- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (git-fixes).
- drm/amd: Disable S/G for APUs when 64GB or more host memory (git-fixes).
- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 (git-fixes).
- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).
- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).
- drm/amdgpu: add S/G display parameter (git-fixes).
- drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes).
- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).
- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini (git-fixes).
- drm/amdgpu: fix memory leak in mes self test (git-fixes).
- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).
- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).
- drm/amdgpu: keep irq count in amdgpu_irq_disable_all (git-fixes).
- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (git-fixes).
- drm/armada: Fix off-by-one error in armada_overlay_get_property() (git-fixes).
- drm/ast: Fix DRAM init on AST2200 (git-fixes).
- drm/atomic-helper: Update reference to drm_crtc_force_disable_all() (git-fixes).
- drm/bridge: anx7625: Drop device lock before drm_helper_hpd_irq_event() (git-fixes).
- drm/bridge: anx7625: Use common macros for DP power sequencing commands (git-fixes).
- drm/bridge: anx7625: Use common macros for HDCP capabilities (git-fixes).
- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).
- drm/bridge: tc358764: Fix debug print parameter order (git-fixes).
- drm/etnaviv: fix dumping of active MMU context (git-fixes).
- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers (git-fixes).
- drm/i915/sdvo: fix panel_type initialization (git-fixes).
- drm/i915: Fix premature release of request's reusable memory (git-fixes).
- drm/mediatek: Fix dereference before null check (git-fixes).
- drm/mediatek: Fix potential memory leak if vmap() fail (git-fixes).
- drm/mediatek: Remove freeing not dynamic allocated memory (git-fixes).
- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).
- drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).
- drm/msm/mdp5: Do not leak some plane state (git-fixes).
- drm/msm: Update dev core dump to not print backwards (git-fixes).
- drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() (git-fixes).
- drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (git-fixes).
- drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (bsc#1214073).
- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).
- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (git-fixes).
- drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (git-fixes).
- drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (git-fixes).
- drm/qxl: fix UAF on handle creation (git-fixes).
- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).
- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() (git-fixes).
- drm/rockchip: Do not spam logs in atomic check (git-fixes).
- drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap() (git-fixes).
- drm/stm: ltdc: fix late dereference check (git-fixes).
- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (git-fixes).
- drm/ttm: check null pointer before accessing when swapping (git-fixes).
- drm/ttm: never consider pinned BOs for eviction&swap (git-fixes).
- drm/vmwgfx: Fix shader stage validation (git-fixes).
- drm: adv7511: Fix low refresh rate register for ADV7533/5 (git-fixes).
- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).
- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask (git-fixes).
- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).
- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).
- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).
- e1000: Fix typos in comments (jsc#PED-5738).
- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
- e1000: switch to napi_build_skb() (jsc#PED-5738).
- e1000: switch to napi_consume_skb() (jsc#PED-5738).
- exfat: fix unexpected EOF while reading dir (bsc#1214000).
- exfat: release s_lock before calling dir_emit() (bsc#1214000).
- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).
- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (git-fixes).
- fbdev: Fix sys_imageblit() for arbitrary image widths (git-fixes).
- fbdev: Improve performance of sys_imageblit() (git-fixes).
- fbdev: Update fbdev source file paths (git-fixes).
- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).
- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
- file: reinstate f_pos locking optimization for regular files (bsc#1213759).
- firmware: arm_scmi: Drop OF node reference in the transport channel setup (git-fixes).
- firmware: cs_dsp: Fix new control name check (git-fixes).
- firmware: meson_sm: fix to avoid potential NULL pointer dereference (git-fixes).
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes).
- fprobe: Release rethook after the ftrace_ops is unregistered (git-fixes).
- fprobe: add unlock to match a succeeded ftrace_test_recursion_trylock (git-fixes).
- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).
- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).
- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).
- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).
- gpio: mvebu: fix irq domain leak (git-fixes).
- gpio: tps68470: Make tps68470_gpio_output() always set the initial value (git-fixes).
- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).
- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (git-fixes).
- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() (git-fixes).
- hwrng: iproc-rng200 - Implement suspend and resume calls (git-fixes).
- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).
- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
- i2c: Delete error messages for failed memory allocations (git-fixes).
- i2c: Improve size determinations (git-fixes).
- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (git-fixes).
- i2c: designware: Correct length byte validation logic (git-fixes).
- i2c: designware: Handle invalid SMBus block data response length value (git-fixes).
- i2c: hisi: Only handle the interrupt of the driver's transfer (git-fixes).
- i2c: nomadik: Remove a useless call in the remove function (git-fixes).
- i2c: nomadik: Remove unnecessary goto label (git-fixes).
- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).
- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).
- iavf: fix potential races for FDIR filters (git-fixes).
- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).
- ice: Fix crash by keep old cfg when update TCs more than queues (git-fixes).
- ice: Fix max_rate check while configuring TX rate limits (git-fixes).
- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
- iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (git-fixes).
- iio: adc: stx104: Implement and utilize register structures (git-fixes).
- iio: adc: stx104: Utilize iomap interface (git-fixes).
- iio: cros_ec: Fix the allocation size for cros_ec_command (git-fixes).
- intel/e1000:fix repeated words in comments (jsc#PED-5738).
- intel: remove unused macros (jsc#PED-5738).
- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423).
- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423).
- iommu/amd: Add PCI segment support for ivrs_ commands (git-fixes).
- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423).
- iommu/amd: Do not identity map v2 capable device when snp is enabled (git-fixes).
- iommu/amd: Fix compile warning in init code (git-fixes).
- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).
- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).
- iommu/amd: Fix pci device refcount leak in ppr_notifier() (git-fixes).
- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).
- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (git-fixes).
- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).
- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).
- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).
- iommu/dma: Fix incorrect error return on iommu deferred attach (git-fixes).
- iommu/dma: Fix iova map result check bug (git-fixes).
- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).
- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (git-fixes).
- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (git-fixes).
- iommu/iova: Fix module config properly (git-fixes).
- iommu/mediatek: Add error path for loop of mm_dts_parse (git-fixes).
- iommu/mediatek: Add platform_device_put for recovering the device refcnt (git-fixes).
- iommu/mediatek: Check return value after calling platform_get_resource() (git-fixes).
- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).
- iommu/mediatek: Use component_match_add (git-fixes).
- iommu/mediatek: Validate number of phandles associated with 'mediatek,larbs' (git-fixes).
- iommu/omap: Fix buffer overflow in debugfs (git-fixes).
- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).
- iommu/s390: Fix duplicate domain attachments (git-fixes).
- iommu/sun50i: Consider all fault sources for reset (git-fixes).
- iommu/sun50i: Fix R/W permission check (git-fixes).
- iommu/sun50i: Fix flush size (git-fixes).
- iommu/sun50i: Fix reset release (git-fixes).
- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).
- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).
- iommu/vt-d: Add RPLS to quirk list to skip TE disabling (git-fixes).
- iommu/vt-d: Check correct capability for sagaw determination (git-fixes).
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (git-fixes).
- iommu/vt-d: Correctly calculate sagaw value of IOMMU (git-fixes).
- iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (git-fixes).
- iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (git-fixes).
- iommu/vt-d: Fix kdump kernels boot failure with scalable mode (git-fixes).
- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (git-fixes).
- iommu/vt-d: Set SRE bit only when hardware has SRS cap (git-fixes).
- ipmi:ssif: Add check for kstrdup (git-fixes).
- ipmi:ssif: Fix a memory leak when scanning for an adapter (git-fixes).
- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).
- kabi/severities: Ignore newly added SRSO mitigation functions
- kabi: Allow extra bugsints (bsc#1213927).
- kernel-binary: Common dependencies cleanup Common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.
- kernel-binary: Drop code for kerntypes support Kerntypes was a SUSE-specific feature dropped before SLE 12.
- kunit: make kunit_test_timeout compatible with comment (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false (git-fixes).
- leds: multicolor: Use rounded division when calculating color components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode() (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- lib/test_meminit: allocate pages up to order MAX_ORDER (git-fixes).
- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).
- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220 jsc#PED-3924).
- libbpf: Fix btf_dump's packed struct determination (bsc#1211220 jsc#PED-3924).
- libbpf: Fix single-line struct definition output in btf_dump (bsc#1211220 jsc#PED-3924).
- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
- md/raid0: Factor out helper for mapping and submitting a bio (bsc#1213916).
- md/raid0: Fix performance regression for large sequential writes (bsc#1213916).
- media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).
- media: cx24120: Add retval check for cx24120_message_send() (git-fixes).
- media: dib7000p: Fix potential division by zero (git-fixes).
- media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (git-fixes).
- media: go7007: Remove redundant if statement (git-fixes).
- media: i2c: ccs: Check rules is non-NULL (git-fixes).
- media: i2c: rdacm21: Fix uninitialized value (git-fixes).
- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).
- media: ov2680: Add ov2680_fill_format() helper function (git-fixes).
- media: ov2680: Do not take the lock for try_fmt calls (git-fixes).
- media: ov2680: Fix ov2680_bayer_order() (git-fixes).
- media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).
- media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (git-fixes).
- media: ov2680: Fix vflip / hflip set functions (git-fixes).
- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).
- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (git-fixes).
- media: rkvdec: increase max supported height for H.264 (git-fixes).
- media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).
- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).
- media: venus: hfi_venus: Only consider sys_idle_indicator on V1 (git-fixes).
- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts (git-fixes).
- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).
- mkspec: Allow unsupported KMPs (bsc#1214386)
- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).
- mmc: block: Fix in_flight[issue_type] value error (git-fixes).
- mmc: moxart: read scr register without changing byte order (git-fixes).
- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).
- module: avoid allocation if module is already present and ready (bsc#1213921).
- module: extract patient module check into helper (bsc#1213921).
- module: move check_modinfo() early to early_mod_check() (bsc#1213921).
- module: move early sanity checks into a helper (bsc#1213921).
- mtd: rawnand: brcmnand: Fix crash during the panic_write (git-fixes).
- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).
- mtd: rawnand: brcmnand: Fix potential false time out warning (git-fixes).
- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (git-fixes).
- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (git-fixes).
- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).
- mtd: rawnand: omap_elm: Fix incorrect type in assignment (git-fixes).
- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (git-fixes).
- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).
- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).
- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).
- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).
- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
- net: mana: Fix MANA VF unload when hardware is unresponsive (git-fixes).
- net: phy: at803x: remove set/get wol callbacks for AR8032 (git-fixes).
- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
- net: phy: fix IRQ-based wake-on-lan over hibernate / power off (git-fixes).
- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)
- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (git-fixes).
- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (git-fixes).
- netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).
- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946 bsc#1214404).
- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946).
- netfs: fix parameter of cleanup() (bsc#1214743).
- nfsd: Remove incorrect check in nfsd4_validate_stateid (git-fixes).
- nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (git-fixes).
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).
- nvme-rdma: fix potential unbalanced freeze & unfreeze (bsc#1208902).
- nvme-tcp: fix potential unbalanced freeze & unfreeze (bsc#1208902).
- objtool/x86: Fix SRSO mess (git-fixes).
- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).
- objtool: Union instruction::{call_dest,jump_table} (git-fixes).
- old-flavors: Drop 2.6 kernels. 2.6 based kernels are EOL, upgrading from them is no longer suported.
- pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (git-fixes).
- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).
- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).
- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).
- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).
- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
- phy: qcom-snps: Use dev_err_probe() to simplify code (git-fixes).
- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).
- pinctrl: amd: Mask wake bits on probe again (git-fixes).
- pinctrl: amd: Revert 'pinctrl: amd: disable and mask interrupts on probe' (git-fixes).
- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).
- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).
- pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).
- platform/x86: dell-sysman: Fix reference leak (git-fixes).
- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).
- powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (bsc#1212091 ltc#199106).
- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (bsc#1212091 ltc#199106).
- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (bsc#1212091 ltc#199106).
- powerpc/iommu: do not set failed sg dma_address to DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).
- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).
- powerpc/kernel/iommu: Add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).
- powerpc/kexec: Fix build failure from uninitialised variable (bsc#1212091 ltc#199106).
- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059 git-fixes).
- powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).
- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Add of_node_put() before break (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Check if the default window in use before removing it (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Find existing DDW with given property name (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Make use of DDW for indirect mapping (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Replace hard-coded page shift (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091 ltc#199106).
- powerpc/pseries: Add __init attribute to eligible functions (bsc#1212091 ltc#199106).
- powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- powerpc/pseries: Initialise CPU hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- powerpc/rtas: block error injection when locked down (bsc#1023051).
- powerpc/rtas: enture rtas_call is called with MMU enabled (bsc#1023051).
- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).
- powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (bsc#1188885 ltc#193722 git-fixes).
- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). Update config files.
- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).
- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
- pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).
- pstore/ram: Check start of empty przs during init (git-fixes).
- pwm: Add a stub for devm_pwmchip_add() (git-fixes).
- pwm: meson: Simplify duplicated per-channel tracking (git-fixes).
- pwm: meson: fix handling of period/duty if greater than UINT_MAX (git-fixes).
- qed: Fix scheduling in a tasklet while getting stats (git-fixes).
- regmap: rbtree: Use alloc_flags for memory allocations (git-fixes).
- ring-buffer: Do not swap cpu_buffer during resize process (git-fixes).
- ring-buffer: Fix deadloop issue on reading trace_pipe (git-fixes).
- ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes).
- rpm/mkspec-dtb: support for nested subdirs.
- rpmsg: glink: Add check for kstrdup (git-fixes).
- rt: Add helper script to refresh RT configs based on the parent (SLE Realtime Extension).
- s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (bsc#1214976).
- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).
- s390/zcrypt: fix reply buffer calculations for CCA replies (bsc#1213949).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git fixes).
- sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes).
- sched/psi: use kernfs polling functions for PSI trigger polling (bsc#1209799).
- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes).
- scsi: 53c700: Check that command slot is not NULL (git-fixes).
- scsi: RDMA/srp: Fix residual handling (git-fixes)
- scsi: bsg: Increase number of devices (bsc#1210048).
- scsi: core: Do not wait for quiesce in scsi_device_block() (bsc#1209284).
- scsi: core: Do not wait for quiesce in scsi_stop_queue() (bsc#1209284).
- scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes).
- scsi: core: Fix possible memory leak if device_add() fails (git-fixes).
- scsi: core: Improve warning message in scsi_device_block() (bsc#1209284).
- scsi: core: Merge scsi_internal_device_block() and device_block() (bsc#1209284).
- scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes).
- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
- scsi: qedf: Fix firmware halt over suspend and resume (git-fixes).
- scsi: qedi: Fix firmware halt over suspend and resume (git-fixes).
- scsi: scsi_debug: Remove dead code (git-fixes).
- scsi: sg: Increase number of devices (bsc#1210048).
- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
- scsi: snic: Fix possible memory leak if device_add() fails (git-fixes).
- scsi: storvsc: Always set no_report_opcodes (git-fixes).
- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (git-fixes).
- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
- scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (git-fixes).
- scsi: zfcp: Defer fc_rport blocking until after ADISC response (git-fixes bsc#1214371).
- selftests/bpf: Test btf dump for struct with padding only fields (bsc#1211220 jsc#PED-3924).
- selftests/futex: Order calls to futex_lock_pi (git-fixes).
- selftests/harness: Actually report SKIP for signal tests (git-fixes).
- selftests/resctrl: Close perf value read fd on errors (git-fixes).
- selftests/resctrl: Do not leak buffer in fill_cache() (git-fixes).
- selftests/resctrl: Unmount resctrl FS if child fails to run benchmark (git-fixes).
- selftests/rseq: check if libc rseq support is registered (git-fixes).
- selftests: forwarding: Add a helper to skip test when using veth pairs (git-fixes).
- selftests: forwarding: Skip test when no interfaces are specified (git-fixes).
- selftests: forwarding: Switch off timeout (git-fixes).
- selftests: forwarding: ethtool: Skip when using veth pairs (git-fixes).
- selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (git-fixes).
- selftests: forwarding: tc_actions: Use ncat instead of nc (git-fixes).
- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).
- selftests: forwarding: tc_flower: Relax success criterion (git-fixes).
- selftests: mirror_gre_changes: Tighten up the TTL test match (git-fixes).
- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
- serial: sc16is7xx: fix bug when first setting GPIO direction (git-fixes).
- serial: sprd: Assign sprd_port after initialized to avoid wrong access (git-fixes).
- serial: sprd: Fix DMA buffer leak issue (git-fixes).
- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).
- sfc: fix crash when reading stats while NIC is resetting (git-fixes).
- smb3: Do not send lease break acknowledgment if all file handles have been closed (git-fixes).
- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request (bsc#1193629).
- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).
- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
- smb: client: fix null auth (git-fixes).
- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).
- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).
- soundwire: fix enumeration completion (git-fixes).
- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).
- supported.conf: fix typos for -!optional markers
- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).
- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).
- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).
- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).
- target_core_rbd: remove snapshot existence validation code (bsc#1212857).
- thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).
- timers: Add shutdown mechanism to the internal functions (bsc#1213970).
- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
- timers: Rename del_timer() to timer_delete() (bsc#1213970).
- timers: Rename del_timer_sync() to timer_delete_sync() (bsc#1213970).
- timers: Replace BUG_ON()s (bsc#1213970).
- timers: Silently ignore timers with a NULL function (bsc#1213970).
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).
- timers: Update kernel-doc for various functions (bsc#1213970).
- timers: Use del_timer_sync() even on UP (bsc#1213970).
- tracing/histograms: Add histograms to hist_vars if they have referenced variables (git-fixes).
- tracing/histograms: Return an error if we fail to add histogram to hist_vars list (git-fixes).
- tracing/probes: Fix not to count error code to total length (git-fixes).
- tracing/probes: Fix to avoid double count of the string length on the array (git-fixes).
- tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).
- tracing/probes: Fix to update dynamic data counter if fetcharg uses it (git-fixes).
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes).
- tracing: Fix memleak due to race between current_tracer and trace (git-fixes).
- tracing: Fix memory leak of iter->temp when reading trace_pipe (git-fixes).
- tracing: Fix null pointer dereference in tracing_err_log_open() (git-fixes).
- tracing: Fix warning in trace_buffered_event_disable() (git-fixes).
- tty: fix hang on tty device with no_room set (git-fixes).
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (git-fixes).
- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).
- tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (git-fixes).
- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).
- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (git-fixes).
- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).
- usb-storage: alauda: Fix uninit-value in alauda_check_media() (git-fixes).
- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (git-fixes).
- usb: chipidea: imx: do not request QoS for imx8ulp (git-fixes).
- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).
- usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (git-fixes).
- usb: dwc3: Fix typos in gadget.c (git-fixes).
- usb: dwc3: Properly handle processing of pending events (git-fixes).
- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).
- usb: gadget: Fix the memory leak in raw_gadget driver (git-fixes).
- usb: gadget: f_mass_storage: Fix unused variable warning (git-fixes).
- usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (git-fixes).
- usb: ohci-at91: Fix the unhandle interrupt when resume (git-fixes).
- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).
- usb: quirks: add quirk for Focusrite Scarlett (git-fixes).
- usb: serial: option: add Quectel EC200A module support (git-fixes).
- usb: serial: option: support Quectel EM060K_128 (git-fixes).
- usb: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).
- usb: serial: simple: sort driver entries (git-fixes).
- usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment (git-fixes).
- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).
- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).
- usb: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).
- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (git-fixes).
- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).
- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).
- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).
- wifi: ath9k: protect WMI command response buffer replacement with a lock (git-fixes).
- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).
- wifi: cfg80211: Fix return value in scan logic (git-fixes).
- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (git-fixes).
- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (git-fixes).
- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).
- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).
- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).
- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH (git-fixes).
- wifi: mwifiex: Fix OOB and integer underflow when rx packets (git-fixes).
- wifi: mwifiex: Fix missed return in oob checks failed path (git-fixes).
- wifi: mwifiex: avoid possible NULL skb pointer dereference (git-fixes).
- wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (git-fixes).
- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).
- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute (git-fixes).
- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
- wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).
- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).
- x86/alternative: Make custom return thunk unconditional (git-fixes).
- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
- x86/cpu: Clean up SRSO return thunk mess (git-fixes).
- x86/cpu: Cleanup the untrain mess (git-fixes).
- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
- x86/cpu: Rename original retbleed methods (git-fixes).
- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).
- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).
- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).
- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).
- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).
- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).
- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).
- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).
- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).
- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes).
- x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes).
- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
- x86/srso: Explain the untraining sequences a bit more (git-fixes).
- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
- x86/srso: Fix return thunks in generated code (git-fixes).
- x86/static_call: Fix __static_call_fixup() (git-fixes).
- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).
- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).
- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).
- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).
- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).
- xfs: fix sb write verify for lazysbcount (bsc#1214661).
Patchnames: SUSE-2023-3599,SUSE-SLE-Module-Live-Patching-15-SP5-2023-3599,SUSE-SLE-Module-RT-15-SP5-2023-3599,openSUSE-SLE-15.5-2023-3599
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.6 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.7 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.1 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.1 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.7 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.6 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
144 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThe SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203330).\n- CVE-2022-40133: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203329).\n- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).\n- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).\n- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).\n- CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233).\n- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).\n- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).\n- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).\n- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).\n- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).\n- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).\n- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).\n- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).\n- CVE-2023-4563: Fixed use-after-free in nft_verdict_dump due to a race between set GC and transaction (bsc#1214727).\n- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).\n- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).\n- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).\n- CVE-2023-37453: Fixed oversight in SuperSpeed initialization (bsc#1213123).\n\nThe following non-security bugs were fixed:\n\n- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).\n- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (git-fixes).\n- ACPI: processor: perflib: Use the \u0027no limit\u0027 frequency QoS (git-fixes).\n- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table (git-fixes).\n- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).\n- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).\n- ALSA: hda/realtek - Remodified 3k pull low procedure (git-fixes).\n- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED (git-fixes).\n- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx (git-fixes).\n- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).\n- ALSA: hda/realtek: Switch Dell Oasis models to use SPI (git-fixes).\n- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (git-fixes).\n- ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces (git-fixes).\n- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).\n- ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (git-fixes).\n- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (git-fixes).\n- ARM: dts: imx6sll: fixup of operating points (git-fixes).\n- ARM: spear: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (git-fixes).\n- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ (git-fixes).\n- ASoC: lower \u0027no backend DAIs enabled for ... Port\u0027 log severity (git-fixes).\n- ASoC: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).\n- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).\n- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).\n- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).\n- Bluetooth: Fix potential use-after-free when clear keys (git-fixes).\n- Bluetooth: L2CAP: Fix use-after-free (git-fixes).\n- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (git-fixes).\n- Bluetooth: Remove unused declaration amp_read_loc_info() (git-fixes).\n- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (git-fixes).\n- Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (git-fixes).\n- Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).\n- CONFIG_NVME_VERBOSE_ERRORS=y gone with a82baa8083b\n- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13 gone with 7e152d55123\n- Created new preempt kernel flavor Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT-\u003ey are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel.\n- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).\n- Documentation: devices.txt: Remove ttyIOC* (git-fixes).\n- Documentation: devices.txt: Remove ttySIOC* (git-fixes).\n- Drivers: hv: Do not remap addresses that are above shared_gpa_boundary (bsc#1206453).\n- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).\n- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).\n- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).\n- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).\n- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).\n- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).\n- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).\n- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)\n- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)\n- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)\n- HID: add quirk for 03f0:464a HP Elite Presenter Mouse (git-fixes).\n- HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).\n- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (git-fixes).\n- HID: multitouch: Correct devm device reference for hidinput input_dev name (git-fixes).\n- HID: wacom: remove the battery when the EKR is off (git-fixes).\n- HWPOISON: offline support: fix spelling in Documentation/ABI/ (git-fixes).\n- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)\n- IB/uverbs: Fix an potential error pointer dereference (git-fixes)\n- Input: exc3000 - properly stop timer on shutdown (git-fixes).\n- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).\n- Kbuild: add -Wno-shift-negative-value where -Wextra is used (bsc#1214756).\n- Kbuild: move to -std=gnu11 (bsc#1214756).\n- PCI/ASPM: Avoid link retraining race (git-fixes).\n- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).\n- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (git-fixes).\n- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).\n- PCI: acpiphp: Reassign resources on bridge if necessary (git-fixes).\n- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).\n- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).\n- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).\n- PCI: meson: Remove cast between incompatible function type (git-fixes).\n- PCI: microchip: Correct the DED and SEC interrupt bit offsets (git-fixes).\n- PCI: microchip: Remove cast between incompatible function type (git-fixes).\n- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).\n- PCI: rockchip: Remove writes to unused registers (git-fixes).\n- PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (git-fixes).\n- PCI: tegra194: Fix possible array out of bounds access (git-fixes).\n- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).\n- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)\n- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)\n- RDMA/efa: Fix wrong resources deallocation order (git-fixes)\n- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)\n- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)\n- RDMA/hns: Fix port active speed (git-fixes)\n- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)\n- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)\n- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)\n- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)\n- RDMA/siw: Balance the reference of cep-\u003ekref in the error path (git-fixes)\n- RDMA/siw: Correct wrong debug message (git-fixes)\n- RDMA/umem: Set iova in ODP flow (git-fixes)\n- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.\n- Revert \u0027IB/isert: Fix incorrect release of isert connection\u0027 (git-fixes)\n- Revert \u0027tracing: Add \u0027(fault)\u0027 name injection to kernel probes\u0027 (git-fixes).\n- Update patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- amba: bus: fix refcount leak (git-fixes).\n- arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (git-fixes).\n- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).\n- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (git-fixes).\n- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).\n- backlight/bd6107: Compare against struct fb_info.device (git-fixes).\n- backlight/gpio_backlight: Compare against struct fb_info.device (git-fixes).\n- backlight/lv5207lp: Compare against struct fb_info.device (git-fixes).\n- batman-adv: Do not get eth header before batadv_check_management_packet (git-fixes).\n- batman-adv: Do not increase MTU when set by user (git-fixes).\n- batman-adv: Fix TT global entry leak when client roamed back (git-fixes).\n- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).\n- batman-adv: Hold rtnl lock during MTU update via netlink (git-fixes).\n- batman-adv: Trigger events for auto adjusted MTU (git-fixes).\n- bnx2x: fix page fault following EEH recovery (bsc#1214299).\n- bpf: Disable preemption in bpf_event_output (git-fixes).\n- bpftool: Print newline before \u0027}\u0027 for struct with padding only fields (bsc#1211220 jsc#PED-3924).\n- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).\n- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).\n- bus: ti-sysc: Fix cast to enum warning (git-fixes).\n- bus: ti-sysc: Flush posted write on enable before reset (git-fixes).\n- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (git-fixes).\n- ceph: defer stopping mdsc delayed_work (bsc#1214392).\n- ceph: do not check for quotas on MDS stray dirs (bsc#1214238).\n- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).\n- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). gcc7 on SLE 15 does not support this while later gcc does.\n- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).\n- cifs: allow dumping keys for directories too (bsc#1193629).\n- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).\n- cifs: if deferred close is disabled then close files immediately (git-fixes).\n- cifs: is_network_name_deleted should return a bool (bsc#1193629).\n- cifs: update internal module version number for cifs.ko (bsc#1193629).\n- clk: Fix slab-out-of-bounds error in devm_clk_release() (git-fixes).\n- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}\u0027 (git-fixes).\n- clk: imx8mp: fix sai4 clock (git-fixes).\n- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).\n- clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz (git-fixes).\n- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).\n- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).\n- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: sunxi-ng: Modify mismatched function name (git-fixes).\n- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).\n- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).\n- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).\n- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).\n- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).\n- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).\n- cpu/SMT: Allow enabling partial SMT states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpufreq: Fix the race condition while updating the transition_task of policy (git-fixes).\n- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (bsc#1214659).\n- cpufreq: intel_pstate: Enable HWP IO boost for all servers (bsc#1208949 jsc#PED-6003 jsc#PED-6004).\n- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: Read all MSRs on the target CPU (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: hybrid: Rework HWP calibration (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- crypto: caam - fix unchecked return value error (git-fixes).\n- crypto: stm32 - Properly handle pm_runtime_get failing (git-fixes).\n- define more Hyper-V related constants (bsc#1206453).\n- dma-buf/sw_sync: Avoid recursive lock during fence signal (git-fixes).\n- dma-buf/sync_file: Fix docs syntax (git-fixes).\n- dmaengine: idxd: Modify the dependence of attribute pasid_enabled (git-fixes).\n- dmaengine: mcf-edma: Fix a potential un-allocated memory access (git-fixes).\n- dmaengine: pl330: Return DMA_PAUSED when transaction is paused (git-fixes).\n- dmaengine: ste_dma40: Add missing IRQ check in d40_probe (git-fixes).\n- docs/process/howto: Replace C89 with C11 (bsc#1214756).\n- docs: kernel-parameters: Refer to the correct bitmap function (git-fixes).\n- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).\n- docs: printk-formats: Fix hex printing of signed values (git-fixes).\n- driver core: test_async: fix an error code (git-fixes).\n- drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (git-fixes).\n- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).\n- drm/amd/display: Apply 60us prefetch for DCFCLK \u0026lt;= 300Mhz (git-fixes).\n- drm/amd/display: Disable phantom OTG after enable for plane disable (git-fixes).\n- drm/amd/display: Do not set drr on pipe commit (git-fixes).\n- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).\n- drm/amd/display: Ensure that planes are in the same order (git-fixes).\n- drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register (git-fixes).\n- drm/amd/display: Retain phantom plane/stream if validation fails (git-fixes).\n- drm/amd/display: Skip DPP DTO update if root clock is gated (git-fixes).\n- drm/amd/display: Use update plane and stream routine for DCN32x (git-fixes).\n- drm/amd/display: check TG is non-null before checking if enabled (git-fixes).\n- drm/amd/display: check attr flag before set cursor degamma on DCN3+ (git-fixes).\n- drm/amd/display: disable RCO for DCN314 (git-fixes).\n- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).\n- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).\n- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set (git-fixes).\n- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).\n- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).\n- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).\n- drm/amd/display: trigger timing sync only if TG is running (git-fixes).\n- drm/amd/pm/smu7: move variables to where they are used (git-fixes).\n- drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation (git-fixes).\n- drm/amd/pm: expose swctf threshold setting for legacy powerplay (git-fixes).\n- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).\n- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings (git-fixes).\n- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings (git-fixes).\n- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (git-fixes).\n- drm/amd: Disable S/G for APUs when 64GB or more host memory (git-fixes).\n- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).\n- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 (git-fixes).\n- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).\n- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).\n- drm/amdgpu: Remove unnecessary domain argument (git-fixes).\n- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).\n- drm/amdgpu: add S/G display parameter (git-fixes).\n- drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes).\n- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).\n- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini (git-fixes).\n- drm/amdgpu: fix memory leak in mes self test (git-fixes).\n- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).\n- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).\n- drm/amdgpu: keep irq count in amdgpu_irq_disable_all (git-fixes).\n- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (git-fixes).\n- drm/armada: Fix off-by-one error in armada_overlay_get_property() (git-fixes).\n- drm/ast: Fix DRAM init on AST2200 (git-fixes).\n- drm/atomic-helper: Update reference to drm_crtc_force_disable_all() (git-fixes).\n- drm/bridge: anx7625: Drop device lock before drm_helper_hpd_irq_event() (git-fixes).\n- drm/bridge: anx7625: Use common macros for DP power sequencing commands (git-fixes).\n- drm/bridge: anx7625: Use common macros for HDCP capabilities (git-fixes).\n- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).\n- drm/bridge: tc358764: Fix debug print parameter order (git-fixes).\n- drm/etnaviv: fix dumping of active MMU context (git-fixes).\n- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers (git-fixes).\n- drm/i915/sdvo: fix panel_type initialization (git-fixes).\n- drm/i915: Fix premature release of request\u0027s reusable memory (git-fixes).\n- drm/mediatek: Fix dereference before null check (git-fixes).\n- drm/mediatek: Fix potential memory leak if vmap() fail (git-fixes).\n- drm/mediatek: Remove freeing not dynamic allocated memory (git-fixes).\n- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).\n- drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).\n- drm/msm/mdp5: Do not leak some plane state (git-fixes).\n- drm/msm: Update dev core dump to not print backwards (git-fixes).\n- drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() (git-fixes).\n- drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (git-fixes).\n- drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (bsc#1214073).\n- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).\n- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (git-fixes).\n- drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (git-fixes).\n- drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (git-fixes).\n- drm/qxl: fix UAF on handle creation (git-fixes).\n- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).\n- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() (git-fixes).\n- drm/rockchip: Do not spam logs in atomic check (git-fixes).\n- drm/shmem-helper: Reset vma-\u003evm_ops before calling dma_buf_mmap() (git-fixes).\n- drm/stm: ltdc: fix late dereference check (git-fixes).\n- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (git-fixes).\n- drm/ttm: check null pointer before accessing when swapping (git-fixes).\n- drm/ttm: never consider pinned BOs for eviction\u0026swap (git-fixes).\n- drm/vmwgfx: Fix shader stage validation (git-fixes).\n- drm: adv7511: Fix low refresh rate register for ADV7533/5 (git-fixes).\n- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).\n- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask (git-fixes).\n- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).\n- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).\n- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).\n- e1000: Fix typos in comments (jsc#PED-5738).\n- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).\n- e1000: switch to napi_build_skb() (jsc#PED-5738).\n- e1000: switch to napi_consume_skb() (jsc#PED-5738).\n- exfat: fix unexpected EOF while reading dir (bsc#1214000).\n- exfat: release s_lock before calling dir_emit() (bsc#1214000).\n- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).\n- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (git-fixes).\n- fbdev: Fix sys_imageblit() for arbitrary image widths (git-fixes).\n- fbdev: Improve performance of sys_imageblit() (git-fixes).\n- fbdev: Update fbdev source file paths (git-fixes).\n- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).\n- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).\n- file: reinstate f_pos locking optimization for regular files (bsc#1213759).\n- firmware: arm_scmi: Drop OF node reference in the transport channel setup (git-fixes).\n- firmware: cs_dsp: Fix new control name check (git-fixes).\n- firmware: meson_sm: fix to avoid potential NULL pointer dereference (git-fixes).\n- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes).\n- fprobe: Release rethook after the ftrace_ops is unregistered (git-fixes).\n- fprobe: add unlock to match a succeeded ftrace_test_recursion_trylock (git-fixes).\n- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).\n- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).\n- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).\n- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).\n- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).\n- gpio: mvebu: fix irq domain leak (git-fixes).\n- gpio: tps68470: Make tps68470_gpio_output() always set the initial value (git-fixes).\n- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).\n- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (git-fixes).\n- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() (git-fixes).\n- hwrng: iproc-rng200 - Implement suspend and resume calls (git-fixes).\n- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).\n- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).\n- i2c: Delete error messages for failed memory allocations (git-fixes).\n- i2c: Improve size determinations (git-fixes).\n- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (git-fixes).\n- i2c: designware: Correct length byte validation logic (git-fixes).\n- i2c: designware: Handle invalid SMBus block data response length value (git-fixes).\n- i2c: hisi: Only handle the interrupt of the driver\u0027s transfer (git-fixes).\n- i2c: nomadik: Remove a useless call in the remove function (git-fixes).\n- i2c: nomadik: Remove unnecessary goto label (git-fixes).\n- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).\n- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).\n- iavf: fix potential races for FDIR filters (git-fixes).\n- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).\n- ice: Fix crash by keep old cfg when update TCs more than queues (git-fixes).\n- ice: Fix max_rate check while configuring TX rate limits (git-fixes).\n- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).\n- iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (git-fixes).\n- iio: adc: stx104: Implement and utilize register structures (git-fixes).\n- iio: adc: stx104: Utilize iomap interface (git-fixes).\n- iio: cros_ec: Fix the allocation size for cros_ec_command (git-fixes).\n- intel/e1000:fix repeated words in comments (jsc#PED-5738).\n- intel: remove unused macros (jsc#PED-5738).\n- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423).\n- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423).\n- iommu/amd: Add PCI segment support for ivrs_ commands (git-fixes).\n- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423).\n- iommu/amd: Do not identity map v2 capable device when snp is enabled (git-fixes).\n- iommu/amd: Fix compile warning in init code (git-fixes).\n- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).\n- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).\n- iommu/amd: Fix pci device refcount leak in ppr_notifier() (git-fixes).\n- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).\n- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (git-fixes).\n- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).\n- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).\n- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).\n- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).\n- iommu/dma: Fix incorrect error return on iommu deferred attach (git-fixes).\n- iommu/dma: Fix iova map result check bug (git-fixes).\n- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).\n- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (git-fixes).\n- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (git-fixes).\n- iommu/iova: Fix module config properly (git-fixes).\n- iommu/mediatek: Add error path for loop of mm_dts_parse (git-fixes).\n- iommu/mediatek: Add platform_device_put for recovering the device refcnt (git-fixes).\n- iommu/mediatek: Check return value after calling platform_get_resource() (git-fixes).\n- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).\n- iommu/mediatek: Use component_match_add (git-fixes).\n- iommu/mediatek: Validate number of phandles associated with \u0027mediatek,larbs\u0027 (git-fixes).\n- iommu/omap: Fix buffer overflow in debugfs (git-fixes).\n- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).\n- iommu/s390: Fix duplicate domain attachments (git-fixes).\n- iommu/sun50i: Consider all fault sources for reset (git-fixes).\n- iommu/sun50i: Fix R/W permission check (git-fixes).\n- iommu/sun50i: Fix flush size (git-fixes).\n- iommu/sun50i: Fix reset release (git-fixes).\n- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).\n- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).\n- iommu/vt-d: Add RPLS to quirk list to skip TE disabling (git-fixes).\n- iommu/vt-d: Check correct capability for sagaw determination (git-fixes).\n- iommu/vt-d: Clean up si_domain in the init_dmars() error path (git-fixes).\n- iommu/vt-d: Correctly calculate sagaw value of IOMMU (git-fixes).\n- iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (git-fixes).\n- iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (git-fixes).\n- iommu/vt-d: Fix kdump kernels boot failure with scalable mode (git-fixes).\n- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (git-fixes).\n- iommu/vt-d: Set SRE bit only when hardware has SRS cap (git-fixes).\n- ipmi:ssif: Add check for kstrdup (git-fixes).\n- ipmi:ssif: Fix a memory leak when scanning for an adapter (git-fixes).\n- ipmi_si: fix a memleak in try_smi_init() (git-fixes).\n- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).\n- kabi/severities: Ignore newly added SRSO mitigation functions\n- kabi: Allow extra bugsints (bsc#1213927).\n- kernel-binary: Common dependencies cleanup Common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.\n- kernel-binary: Drop code for kerntypes support Kerntypes was a SUSE-specific feature dropped before SLE 12.\n- kunit: make kunit_test_timeout compatible with comment (git-fixes).\n- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false (git-fixes).\n- leds: multicolor: Use rounded division when calculating color components (git-fixes).\n- leds: pwm: Fix error code in led_pwm_create_fwnode() (git-fixes).\n- leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (git-fixes).\n- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).\n- lib/test_meminit: allocate pages up to order MAX_ORDER (git-fixes).\n- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).\n- libbpf: Fix BTF-to-C converter\u0027s padding logic (bsc#1211220 jsc#PED-3924).\n- libbpf: Fix btf_dump\u0027s packed struct determination (bsc#1211220 jsc#PED-3924).\n- libbpf: Fix single-line struct definition output in btf_dump (bsc#1211220 jsc#PED-3924).\n- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).\n- md/raid0: Factor out helper for mapping and submitting a bio (bsc#1213916).\n- md/raid0: Fix performance regression for large sequential writes (bsc#1213916).\n- media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).\n- media: cx24120: Add retval check for cx24120_message_send() (git-fixes).\n- media: dib7000p: Fix potential division by zero (git-fixes).\n- media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (git-fixes).\n- media: go7007: Remove redundant if statement (git-fixes).\n- media: i2c: ccs: Check rules is non-NULL (git-fixes).\n- media: i2c: rdacm21: Fix uninitialized value (git-fixes).\n- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).\n- media: ov2680: Add ov2680_fill_format() helper function (git-fixes).\n- media: ov2680: Do not take the lock for try_fmt calls (git-fixes).\n- media: ov2680: Fix ov2680_bayer_order() (git-fixes).\n- media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).\n- media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (git-fixes).\n- media: ov2680: Fix vflip / hflip set functions (git-fixes).\n- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).\n- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (git-fixes).\n- media: rkvdec: increase max supported height for H.264 (git-fixes).\n- media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).\n- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).\n- media: venus: hfi_venus: Only consider sys_idle_indicator on V1 (git-fixes).\n- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts (git-fixes).\n- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).\n- mkspec: Allow unsupported KMPs (bsc#1214386)\n- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).\n- mmc: block: Fix in_flight[issue_type] value error (git-fixes).\n- mmc: moxart: read scr register without changing byte order (git-fixes).\n- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).\n- module: avoid allocation if module is already present and ready (bsc#1213921).\n- module: extract patient module check into helper (bsc#1213921).\n- module: move check_modinfo() early to early_mod_check() (bsc#1213921).\n- module: move early sanity checks into a helper (bsc#1213921).\n- mtd: rawnand: brcmnand: Fix crash during the panic_write (git-fixes).\n- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).\n- mtd: rawnand: brcmnand: Fix potential false time out warning (git-fixes).\n- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (git-fixes).\n- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (git-fixes).\n- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).\n- mtd: rawnand: omap_elm: Fix incorrect type in assignment (git-fixes).\n- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (git-fixes).\n- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).\n- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).\n- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).\n- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).\n- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).\n- net: ieee802154: at86rf230: Stop leaking skb\u0027s (git-fixes).\n- net: mana: Fix MANA VF unload when hardware is unresponsive (git-fixes).\n- net: phy: at803x: remove set/get wol callbacks for AR8032 (git-fixes).\n- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).\n- net: phy: fix IRQ-based wake-on-lan over hibernate / power off (git-fixes).\n- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)\n- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (git-fixes).\n- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (git-fixes).\n- netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).\n- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946 bsc#1214404).\n- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946).\n- netfs: fix parameter of cleanup() (bsc#1214743).\n- nfsd: Remove incorrect check in nfsd4_validate_stateid (git-fixes).\n- nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (git-fixes).\n- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).\n- nvme-rdma: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- nvme-tcp: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- objtool/x86: Fix SRSO mess (git-fixes).\n- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).\n- objtool: Union instruction::{call_dest,jump_table} (git-fixes).\n- old-flavors: Drop 2.6 kernels. 2.6 based kernels are EOL, upgrading from them is no longer suported.\n- pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (git-fixes).\n- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).\n- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).\n- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).\n- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).\n- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).\n- phy: qcom-snps: Use dev_err_probe() to simplify code (git-fixes).\n- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).\n- pinctrl: amd: Mask wake bits on probe again (git-fixes).\n- pinctrl: amd: Revert \u0027pinctrl: amd: disable and mask interrupts on probe\u0027 (git-fixes).\n- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).\n- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).\n- pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).\n- platform/x86: dell-sysman: Fix reference leak (git-fixes).\n- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).\n- powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (bsc#1212091 ltc#199106).\n- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (bsc#1212091 ltc#199106).\n- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (bsc#1212091 ltc#199106).\n- powerpc/iommu: do not set failed sg dma_address to DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).\n- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).\n- powerpc/kernel/iommu: Add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).\n- powerpc/kexec: Fix build failure from uninitialised variable (bsc#1212091 ltc#199106).\n- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059 git-fixes).\n- powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).\n- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add of_node_put() before break (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Check if the default window in use before removing it (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Find existing DDW with given property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Make use of DDW for indirect mapping (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Rename \u0027direct window\u0027 to \u0027dma window\u0027 (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Replace hard-coded page shift (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091 ltc#199106).\n- powerpc/pseries: Add __init attribute to eligible functions (bsc#1212091 ltc#199106).\n- powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/pseries: Initialise CPU hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/rtas: block error injection when locked down (bsc#1023051).\n- powerpc/rtas: enture rtas_call is called with MMU enabled (bsc#1023051).\n- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).\n- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).\n- powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (bsc#1188885 ltc#193722 git-fixes).\n- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). Update config files.\n- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).\n- powerpc: fix typos in comments (bsc#1212091 ltc#199106).\n- pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).\n- pstore/ram: Check start of empty przs during init (git-fixes).\n- pwm: Add a stub for devm_pwmchip_add() (git-fixes).\n- pwm: meson: Simplify duplicated per-channel tracking (git-fixes).\n- pwm: meson: fix handling of period/duty if greater than UINT_MAX (git-fixes).\n- qed: Fix scheduling in a tasklet while getting stats (git-fixes).\n- regmap: rbtree: Use alloc_flags for memory allocations (git-fixes).\n- ring-buffer: Do not swap cpu_buffer during resize process (git-fixes).\n- ring-buffer: Fix deadloop issue on reading trace_pipe (git-fixes).\n- ring-buffer: Fix wrong stat of cpu_buffer-\u003eread (git-fixes).\n- rpm/mkspec-dtb: support for nested subdirs.\n- rpmsg: glink: Add check for kstrdup (git-fixes).\n- rt: Add helper script to refresh RT configs based on the parent (SLE Realtime Extension).\n- s390/ipl: add missing secure/has_secure file to ipl type \u0027unknown\u0027 (bsc#1214976).\n- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).\n- s390/zcrypt: fix reply buffer calculations for CCA replies (bsc#1213949).\n- sched/fair: Fix inaccurate tally of ttwu_move_affine (git fixes).\n- sched/fair: Use recent_used_cpu to test p-\u003ecpus_ptr (git fixes).\n- sched/psi: use kernfs polling functions for PSI trigger polling (bsc#1209799).\n- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes).\n- scsi: 53c700: Check that command slot is not NULL (git-fixes).\n- scsi: RDMA/srp: Fix residual handling (git-fixes)\n- scsi: bsg: Increase number of devices (bsc#1210048).\n- scsi: core: Do not wait for quiesce in scsi_device_block() (bsc#1209284).\n- scsi: core: Do not wait for quiesce in scsi_stop_queue() (bsc#1209284).\n- scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes).\n- scsi: core: Fix possible memory leak if device_add() fails (git-fixes).\n- scsi: core: Improve warning message in scsi_device_block() (bsc#1209284).\n- scsi: core: Merge scsi_internal_device_block() and device_block() (bsc#1209284).\n- scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes).\n- scsi: qedf: Fix NULL dereference in error handling (git-fixes).\n- scsi: qedf: Fix firmware halt over suspend and resume (git-fixes).\n- scsi: qedi: Fix firmware halt over suspend and resume (git-fixes).\n- scsi: scsi_debug: Remove dead code (git-fixes).\n- scsi: sg: Increase number of devices (bsc#1210048).\n- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).\n- scsi: snic: Fix possible memory leak if device_add() fails (git-fixes).\n- scsi: storvsc: Always set no_report_opcodes (git-fixes).\n- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (git-fixes).\n- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).\n- scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (git-fixes).\n- scsi: zfcp: Defer fc_rport blocking until after ADISC response (git-fixes bsc#1214371).\n- selftests/bpf: Test btf dump for struct with padding only fields (bsc#1211220 jsc#PED-3924).\n- selftests/futex: Order calls to futex_lock_pi (git-fixes).\n- selftests/harness: Actually report SKIP for signal tests (git-fixes).\n- selftests/resctrl: Close perf value read fd on errors (git-fixes).\n- selftests/resctrl: Do not leak buffer in fill_cache() (git-fixes).\n- selftests/resctrl: Unmount resctrl FS if child fails to run benchmark (git-fixes).\n- selftests/rseq: check if libc rseq support is registered (git-fixes).\n- selftests: forwarding: Add a helper to skip test when using veth pairs (git-fixes).\n- selftests: forwarding: Skip test when no interfaces are specified (git-fixes).\n- selftests: forwarding: Switch off timeout (git-fixes).\n- selftests: forwarding: ethtool: Skip when using veth pairs (git-fixes).\n- selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (git-fixes).\n- selftests: forwarding: tc_actions: Use ncat instead of nc (git-fixes).\n- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).\n- selftests: forwarding: tc_flower: Relax success criterion (git-fixes).\n- selftests: mirror_gre_changes: Tighten up the TTL test match (git-fixes).\n- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).\n- serial: sc16is7xx: fix bug when first setting GPIO direction (git-fixes).\n- serial: sprd: Assign sprd_port after initialized to avoid wrong access (git-fixes).\n- serial: sprd: Fix DMA buffer leak issue (git-fixes).\n- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).\n- sfc: fix crash when reading stats while NIC is resetting (git-fixes).\n- smb3: Do not send lease break acknowledgment if all file handles have been closed (git-fixes).\n- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request (bsc#1193629).\n- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).\n- smb: client: fix dfs link mount against w2k8 (bsc#1212142).\n- smb: client: fix null auth (git-fixes).\n- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).\n- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).\n- soundwire: fix enumeration completion (git-fixes).\n- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).\n- supported.conf: fix typos for -!optional markers\n- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).\n- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).\n- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).\n- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).\n- target_core_rbd: remove snapshot existence validation code (bsc#1212857).\n- thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).\n- timers: Add shutdown mechanism to the internal functions (bsc#1213970).\n- timers: Provide timer_shutdown[_sync]() (bsc#1213970).\n- timers: Rename del_timer() to timer_delete() (bsc#1213970).\n- timers: Rename del_timer_sync() to timer_delete_sync() (bsc#1213970).\n- timers: Replace BUG_ON()s (bsc#1213970).\n- timers: Silently ignore timers with a NULL function (bsc#1213970).\n- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).\n- timers: Update kernel-doc for various functions (bsc#1213970).\n- timers: Use del_timer_sync() even on UP (bsc#1213970).\n- tracing/histograms: Add histograms to hist_vars if they have referenced variables (git-fixes).\n- tracing/histograms: Return an error if we fail to add histogram to hist_vars list (git-fixes).\n- tracing/probes: Fix not to count error code to total length (git-fixes).\n- tracing/probes: Fix to avoid double count of the string length on the array (git-fixes).\n- tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).\n- tracing/probes: Fix to update dynamic data counter if fetcharg uses it (git-fixes).\n- tracing: Fix cpu buffers unavailable due to \u0027record_disabled\u0027 missed (git-fixes).\n- tracing: Fix memleak due to race between current_tracer and trace (git-fixes).\n- tracing: Fix memory leak of iter-\u003etemp when reading trace_pipe (git-fixes).\n- tracing: Fix null pointer dereference in tracing_err_log_open() (git-fixes).\n- tracing: Fix warning in trace_buffered_event_disable() (git-fixes).\n- tty: fix hang on tty device with no_room set (git-fixes).\n- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (git-fixes).\n- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).\n- tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (git-fixes).\n- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).\n- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (git-fixes).\n- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).\n- usb-storage: alauda: Fix uninit-value in alauda_check_media() (git-fixes).\n- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (git-fixes).\n- usb: chipidea: imx: do not request QoS for imx8ulp (git-fixes).\n- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).\n- usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (git-fixes).\n- usb: dwc3: Fix typos in gadget.c (git-fixes).\n- usb: dwc3: Properly handle processing of pending events (git-fixes).\n- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).\n- usb: gadget: Fix the memory leak in raw_gadget driver (git-fixes).\n- usb: gadget: f_mass_storage: Fix unused variable warning (git-fixes).\n- usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (git-fixes).\n- usb: ohci-at91: Fix the unhandle interrupt when resume (git-fixes).\n- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).\n- usb: quirks: add quirk for Focusrite Scarlett (git-fixes).\n- usb: serial: option: add Quectel EC200A module support (git-fixes).\n- usb: serial: option: support Quectel EM060K_128 (git-fixes).\n- usb: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).\n- usb: serial: simple: sort driver entries (git-fixes).\n- usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment (git-fixes).\n- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).\n- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).\n- usb: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).\n- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (git-fixes).\n- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).\n- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).\n- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).\n- wifi: ath9k: protect WMI command response buffer replacement with a lock (git-fixes).\n- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).\n- wifi: cfg80211: Fix return value in scan logic (git-fixes).\n- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (git-fixes).\n- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (git-fixes).\n- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).\n- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).\n- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).\n- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH (git-fixes).\n- wifi: mwifiex: Fix OOB and integer underflow when rx packets (git-fixes).\n- wifi: mwifiex: Fix missed return in oob checks failed path (git-fixes).\n- wifi: mwifiex: avoid possible NULL skb pointer dereference (git-fixes).\n- wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (git-fixes).\n- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).\n- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute (git-fixes).\n- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).\n- wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).\n- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).\n- x86/alternative: Make custom return thunk unconditional (git-fixes).\n- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).\n- x86/cpu: Clean up SRSO return thunk mess (git-fixes).\n- x86/cpu: Cleanup the untrain mess (git-fixes).\n- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).\n- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).\n- x86/cpu: Rename original retbleed methods (git-fixes).\n- x86/cpu: Rename srso_(.*)_alias to srso_alias_\\1 (git-fixes).\n- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).\n- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).\n- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).\n- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).\n- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).\n- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).\n- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).\n- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).\n- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).\n- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).\n- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes).\n- x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes).\n- x86/speculation: Add cpu_show_gds() prototype (git-fixes).\n- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).\n- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).\n- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).\n- x86/srso: Explain the untraining sequences a bit more (git-fixes).\n- x86/srso: Fix build breakage with the LLVM linker (git-fixes).\n- x86/srso: Fix return thunks in generated code (git-fixes).\n- x86/static_call: Fix __static_call_fixup() (git-fixes).\n- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).\n- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).\n- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).\n- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).\n- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).\n- xfs: fix sb write verify for lazysbcount (bsc#1214661).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2023-3599,SUSE-SLE-Module-Live-Patching-15-SP5-2023-3599,SUSE-SLE-Module-RT-15-SP5-2023-3599,openSUSE-SLE-15.5-2023-3599",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_3599-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2023:3599-1",
"url": "https://www.suse.com/support/update/announcement/2023/suse-su-20233599-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2023:3599-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2023-September/031434.html"
},
{
"category": "self",
"summary": "SUSE Bug 1023051",
"url": "https://bugzilla.suse.com/1023051"
},
{
"category": "self",
"summary": "SUSE Bug 1120059",
"url": "https://bugzilla.suse.com/1120059"
},
{
"category": "self",
"summary": "SUSE Bug 1177719",
"url": "https://bugzilla.suse.com/1177719"
},
{
"category": "self",
"summary": "SUSE Bug 1188885",
"url": "https://bugzilla.suse.com/1188885"
},
{
"category": "self",
"summary": "SUSE Bug 1193629",
"url": "https://bugzilla.suse.com/1193629"
},
{
"category": "self",
"summary": "SUSE Bug 1194869",
"url": "https://bugzilla.suse.com/1194869"
},
{
"category": "self",
"summary": "SUSE Bug 1203329",
"url": "https://bugzilla.suse.com/1203329"
},
{
"category": "self",
"summary": "SUSE Bug 1203330",
"url": "https://bugzilla.suse.com/1203330"
},
{
"category": "self",
"summary": "SUSE Bug 1205462",
"url": "https://bugzilla.suse.com/1205462"
},
{
"category": "self",
"summary": "SUSE Bug 1206453",
"url": "https://bugzilla.suse.com/1206453"
},
{
"category": "self",
"summary": "SUSE Bug 1208902",
"url": "https://bugzilla.suse.com/1208902"
},
{
"category": "self",
"summary": "SUSE Bug 1208949",
"url": "https://bugzilla.suse.com/1208949"
},
{
"category": "self",
"summary": "SUSE Bug 1209284",
"url": "https://bugzilla.suse.com/1209284"
},
{
"category": "self",
"summary": "SUSE Bug 1209799",
"url": "https://bugzilla.suse.com/1209799"
},
{
"category": "self",
"summary": "SUSE Bug 1210048",
"url": "https://bugzilla.suse.com/1210048"
},
{
"category": "self",
"summary": "SUSE Bug 1210448",
"url": "https://bugzilla.suse.com/1210448"
},
{
"category": "self",
"summary": "SUSE Bug 1211220",
"url": "https://bugzilla.suse.com/1211220"
},
{
"category": "self",
"summary": "SUSE Bug 1212091",
"url": "https://bugzilla.suse.com/1212091"
},
{
"category": "self",
"summary": "SUSE Bug 1212142",
"url": "https://bugzilla.suse.com/1212142"
},
{
"category": "self",
"summary": "SUSE Bug 1212423",
"url": "https://bugzilla.suse.com/1212423"
},
{
"category": "self",
"summary": "SUSE Bug 1212526",
"url": "https://bugzilla.suse.com/1212526"
},
{
"category": "self",
"summary": "SUSE Bug 1212857",
"url": "https://bugzilla.suse.com/1212857"
},
{
"category": "self",
"summary": "SUSE Bug 1212873",
"url": "https://bugzilla.suse.com/1212873"
},
{
"category": "self",
"summary": "SUSE Bug 1213026",
"url": "https://bugzilla.suse.com/1213026"
},
{
"category": "self",
"summary": "SUSE Bug 1213123",
"url": "https://bugzilla.suse.com/1213123"
},
{
"category": "self",
"summary": "SUSE Bug 1213546",
"url": "https://bugzilla.suse.com/1213546"
},
{
"category": "self",
"summary": "SUSE Bug 1213580",
"url": "https://bugzilla.suse.com/1213580"
},
{
"category": "self",
"summary": "SUSE Bug 1213601",
"url": "https://bugzilla.suse.com/1213601"
},
{
"category": "self",
"summary": "SUSE Bug 1213666",
"url": "https://bugzilla.suse.com/1213666"
},
{
"category": "self",
"summary": "SUSE Bug 1213733",
"url": "https://bugzilla.suse.com/1213733"
},
{
"category": "self",
"summary": "SUSE Bug 1213757",
"url": "https://bugzilla.suse.com/1213757"
},
{
"category": "self",
"summary": "SUSE Bug 1213759",
"url": "https://bugzilla.suse.com/1213759"
},
{
"category": "self",
"summary": "SUSE Bug 1213916",
"url": "https://bugzilla.suse.com/1213916"
},
{
"category": "self",
"summary": "SUSE Bug 1213921",
"url": "https://bugzilla.suse.com/1213921"
},
{
"category": "self",
"summary": "SUSE Bug 1213927",
"url": "https://bugzilla.suse.com/1213927"
},
{
"category": "self",
"summary": "SUSE Bug 1213946",
"url": "https://bugzilla.suse.com/1213946"
},
{
"category": "self",
"summary": "SUSE Bug 1213949",
"url": "https://bugzilla.suse.com/1213949"
},
{
"category": "self",
"summary": "SUSE Bug 1213968",
"url": "https://bugzilla.suse.com/1213968"
},
{
"category": "self",
"summary": "SUSE Bug 1213970",
"url": "https://bugzilla.suse.com/1213970"
},
{
"category": "self",
"summary": "SUSE Bug 1213971",
"url": "https://bugzilla.suse.com/1213971"
},
{
"category": "self",
"summary": "SUSE Bug 1214000",
"url": "https://bugzilla.suse.com/1214000"
},
{
"category": "self",
"summary": "SUSE Bug 1214019",
"url": "https://bugzilla.suse.com/1214019"
},
{
"category": "self",
"summary": "SUSE Bug 1214073",
"url": "https://bugzilla.suse.com/1214073"
},
{
"category": "self",
"summary": "SUSE Bug 1214120",
"url": "https://bugzilla.suse.com/1214120"
},
{
"category": "self",
"summary": "SUSE Bug 1214149",
"url": "https://bugzilla.suse.com/1214149"
},
{
"category": "self",
"summary": "SUSE Bug 1214180",
"url": "https://bugzilla.suse.com/1214180"
},
{
"category": "self",
"summary": "SUSE Bug 1214233",
"url": "https://bugzilla.suse.com/1214233"
},
{
"category": "self",
"summary": "SUSE Bug 1214238",
"url": "https://bugzilla.suse.com/1214238"
},
{
"category": "self",
"summary": "SUSE Bug 1214285",
"url": "https://bugzilla.suse.com/1214285"
},
{
"category": "self",
"summary": "SUSE Bug 1214297",
"url": "https://bugzilla.suse.com/1214297"
},
{
"category": "self",
"summary": "SUSE Bug 1214299",
"url": "https://bugzilla.suse.com/1214299"
},
{
"category": "self",
"summary": "SUSE Bug 1214305",
"url": "https://bugzilla.suse.com/1214305"
},
{
"category": "self",
"summary": "SUSE Bug 1214350",
"url": "https://bugzilla.suse.com/1214350"
},
{
"category": "self",
"summary": "SUSE Bug 1214368",
"url": "https://bugzilla.suse.com/1214368"
},
{
"category": "self",
"summary": "SUSE Bug 1214370",
"url": "https://bugzilla.suse.com/1214370"
},
{
"category": "self",
"summary": "SUSE Bug 1214371",
"url": "https://bugzilla.suse.com/1214371"
},
{
"category": "self",
"summary": "SUSE Bug 1214372",
"url": "https://bugzilla.suse.com/1214372"
},
{
"category": "self",
"summary": "SUSE Bug 1214380",
"url": "https://bugzilla.suse.com/1214380"
},
{
"category": "self",
"summary": "SUSE Bug 1214386",
"url": "https://bugzilla.suse.com/1214386"
},
{
"category": "self",
"summary": "SUSE Bug 1214392",
"url": "https://bugzilla.suse.com/1214392"
},
{
"category": "self",
"summary": "SUSE Bug 1214393",
"url": "https://bugzilla.suse.com/1214393"
},
{
"category": "self",
"summary": "SUSE Bug 1214397",
"url": "https://bugzilla.suse.com/1214397"
},
{
"category": "self",
"summary": "SUSE Bug 1214404",
"url": "https://bugzilla.suse.com/1214404"
},
{
"category": "self",
"summary": "SUSE Bug 1214428",
"url": "https://bugzilla.suse.com/1214428"
},
{
"category": "self",
"summary": "SUSE Bug 1214451",
"url": "https://bugzilla.suse.com/1214451"
},
{
"category": "self",
"summary": "SUSE Bug 1214659",
"url": "https://bugzilla.suse.com/1214659"
},
{
"category": "self",
"summary": "SUSE Bug 1214661",
"url": "https://bugzilla.suse.com/1214661"
},
{
"category": "self",
"summary": "SUSE Bug 1214727",
"url": "https://bugzilla.suse.com/1214727"
},
{
"category": "self",
"summary": "SUSE Bug 1214729",
"url": "https://bugzilla.suse.com/1214729"
},
{
"category": "self",
"summary": "SUSE Bug 1214742",
"url": "https://bugzilla.suse.com/1214742"
},
{
"category": "self",
"summary": "SUSE Bug 1214743",
"url": "https://bugzilla.suse.com/1214743"
},
{
"category": "self",
"summary": "SUSE Bug 1214756",
"url": "https://bugzilla.suse.com/1214756"
},
{
"category": "self",
"summary": "SUSE Bug 1214976",
"url": "https://bugzilla.suse.com/1214976"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-38457 page",
"url": "https://www.suse.com/security/cve/CVE-2022-38457/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-40133 page",
"url": "https://www.suse.com/security/cve/CVE-2022-40133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2007 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2007/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-20588 page",
"url": "https://www.suse.com/security/cve/CVE-2023-20588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-34319 page",
"url": "https://www.suse.com/security/cve/CVE-2023-34319/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-3610 page",
"url": "https://www.suse.com/security/cve/CVE-2023-3610/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-37453 page",
"url": "https://www.suse.com/security/cve/CVE-2023-37453/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-3772 page",
"url": "https://www.suse.com/security/cve/CVE-2023-3772/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-3863 page",
"url": "https://www.suse.com/security/cve/CVE-2023-3863/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-40283 page",
"url": "https://www.suse.com/security/cve/CVE-2023-40283/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4128 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4128/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4133 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4134 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4147 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4147/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4194 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4194/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4273 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4273/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4387 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4387/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4459 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4459/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4563 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4563/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4569 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4569/"
}
],
"title": "Security update for the Linux Kernel",
"tracking": {
"current_release_date": "2023-09-21T10:18:23Z",
"generator": {
"date": "2023-09-21T10:18:23Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2023:3599-1",
"initial_release_date": "2023-09-21T10:18:23Z",
"revision_history": [
{
"date": "2023-09-21T10:18:23Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64",
"product": {
"name": "kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64",
"product_id": "kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Live Patching 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Live Patching 15 SP5",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-live-patching:15:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP5",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
},
"product_reference": "kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 15 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-38457",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-38457"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free(UAF) vulnerability was found in function \u0027vmw_cmd_res_check\u0027 in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel\u0027s vmwgfx driver with device file \u0027/dev/dri/renderD128 (or Dxxx)\u0027. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-38457",
"url": "https://www.suse.com/security/cve/CVE-2022-38457"
},
{
"category": "external",
"summary": "SUSE Bug 1203330 for CVE-2022-38457",
"url": "https://bugzilla.suse.com/1203330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2022-38457"
},
{
"cve": "CVE-2022-40133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-40133"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free(UAF) vulnerability was found in function \u0027vmw_execbuf_tie_context\u0027 in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel\u0027s vmwgfx driver with device file \u0027/dev/dri/renderD128 (or Dxxx)\u0027. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-40133",
"url": "https://www.suse.com/security/cve/CVE-2022-40133"
},
{
"category": "external",
"summary": "SUSE Bug 1203329 for CVE-2022-40133",
"url": "https://bugzilla.suse.com/1203329"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2022-40133"
},
{
"cve": "CVE-2023-2007",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2007"
}
],
"notes": [
{
"category": "general",
"text": "The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2007",
"url": "https://www.suse.com/security/cve/CVE-2023-2007"
},
{
"category": "external",
"summary": "SUSE Bug 1210448 for CVE-2023-2007",
"url": "https://bugzilla.suse.com/1210448"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-2007"
},
{
"cve": "CVE-2023-20588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-20588"
}
],
"notes": [
{
"category": "general",
"text": "\nA division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. \n\n\n\n\n\n\n\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-20588",
"url": "https://www.suse.com/security/cve/CVE-2023-20588"
},
{
"category": "external",
"summary": "SUSE Bug 1213927 for CVE-2023-20588",
"url": "https://bugzilla.suse.com/1213927"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-20588"
},
{
"cve": "CVE-2023-34319",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-34319"
}
],
"notes": [
{
"category": "general",
"text": "The fix for XSA-423 added logic to Linux\u0027es netback driver to deal with\na frontend splitting a packet in a way such that not all of the headers\nwould come in one piece. Unfortunately the logic introduced there\ndidn\u0027t account for the extreme case of the entire packet being split\ninto as many pieces as permitted by the protocol, yet still being\nsmaller than the area that\u0027s specially dealt with to keep all (possible)\nheaders together. Such an unusual packet would therefore trigger a\nbuffer overrun in the driver.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-34319",
"url": "https://www.suse.com/security/cve/CVE-2023-34319"
},
{
"category": "external",
"summary": "SUSE Bug 1213546 for CVE-2023-34319",
"url": "https://bugzilla.suse.com/1213546"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-34319"
},
{
"cve": "CVE-2023-3610",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-3610"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability in the Linux kernel\u0027s netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nFlaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.\n\nWe recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-3610",
"url": "https://www.suse.com/security/cve/CVE-2023-3610"
},
{
"category": "external",
"summary": "SUSE Bug 1213580 for CVE-2023-3610",
"url": "https://bugzilla.suse.com/1213580"
},
{
"category": "external",
"summary": "SUSE Bug 1213584 for CVE-2023-3610",
"url": "https://bugzilla.suse.com/1213584"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "important"
}
],
"title": "CVE-2023-3610"
},
{
"cve": "CVE-2023-37453",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-37453"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-37453",
"url": "https://www.suse.com/security/cve/CVE-2023-37453"
},
{
"category": "external",
"summary": "SUSE Bug 1213123 for CVE-2023-37453",
"url": "https://bugzilla.suse.com/1213123"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-37453"
},
{
"cve": "CVE-2023-3772",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-3772"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-3772",
"url": "https://www.suse.com/security/cve/CVE-2023-3772"
},
{
"category": "external",
"summary": "SUSE Bug 1213666 for CVE-2023-3772",
"url": "https://bugzilla.suse.com/1213666"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-3772"
},
{
"cve": "CVE-2023-3863",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-3863"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-3863",
"url": "https://www.suse.com/security/cve/CVE-2023-3863"
},
{
"category": "external",
"summary": "SUSE Bug 1213601 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1213601"
},
{
"category": "external",
"summary": "SUSE Bug 1213603 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1213603"
},
{
"category": "external",
"summary": "SUSE Bug 1217444 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1217444"
},
{
"category": "external",
"summary": "SUSE Bug 1217531 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1217531"
},
{
"category": "external",
"summary": "SUSE Bug 1219704 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1219704"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-3863"
},
{
"cve": "CVE-2023-40283",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-40283"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-40283",
"url": "https://www.suse.com/security/cve/CVE-2023-40283"
},
{
"category": "external",
"summary": "SUSE Bug 1214233 for CVE-2023-40283",
"url": "https://bugzilla.suse.com/1214233"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-40283"
},
{
"cve": "CVE-2023-4128",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4128"
}
],
"notes": [
{
"category": "general",
"text": "** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Reason: This record is a duplicate of CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Notes: All CVE users should reference CVE-2023-4206, CVE-2023-4207, CVE-2023-4208 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4128",
"url": "https://www.suse.com/security/cve/CVE-2023-4128"
},
{
"category": "external",
"summary": "SUSE Bug 1214149 for CVE-2023-4128",
"url": "https://bugzilla.suse.com/1214149"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "important"
}
],
"title": "CVE-2023-4128"
},
{
"cve": "CVE-2023-4133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4133"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug occurs when the cxgb4 device is detaching due to a possible rearming of the flower_stats_timer from the work queue. This flaw allows a local user to crash the system, causing a denial of service condition.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4133",
"url": "https://www.suse.com/security/cve/CVE-2023-4133"
},
{
"category": "external",
"summary": "SUSE Bug 1213970 for CVE-2023-4133",
"url": "https://bugzilla.suse.com/1213970"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-4133"
},
{
"cve": "CVE-2023-4134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4134"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel. This issue occurs in the device cleanup routine due to a possible rearming of the watchdog_timer from the workqueue. This could allow a local user to crash the system, causing a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4134",
"url": "https://www.suse.com/security/cve/CVE-2023-4134"
},
{
"category": "external",
"summary": "SUSE Bug 1213971 for CVE-2023-4134",
"url": "https://bugzilla.suse.com/1213971"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-4134"
},
{
"cve": "CVE-2023-4147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4147"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free flaw was found in the Linux kernel\u0027s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4147",
"url": "https://www.suse.com/security/cve/CVE-2023-4147"
},
{
"category": "external",
"summary": "SUSE Bug 1213968 for CVE-2023-4147",
"url": "https://bugzilla.suse.com/1213968"
},
{
"category": "external",
"summary": "SUSE Bug 1215118 for CVE-2023-4147",
"url": "https://bugzilla.suse.com/1215118"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "important"
}
],
"title": "CVE-2023-4147"
},
{
"cve": "CVE-2023-4194",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4194"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 (\"tun: tun_chr_open(): correctly initialize socket uid\"), - 66b2c338adce (\"tap: tap_open(): correctly initialize socket uid\"), pass \"inode-\u003ei_uid\" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4194",
"url": "https://www.suse.com/security/cve/CVE-2023-4194"
},
{
"category": "external",
"summary": "SUSE Bug 1214019 for CVE-2023-4194",
"url": "https://bugzilla.suse.com/1214019"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-4194"
},
{
"cve": "CVE-2023-4273",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4273"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file name reconstruction function, which is responsible for reading file name entries from a directory index and merging file name parts belonging to one file into a single long file name. Since the file name characters are copied into a stack variable, a local privileged attacker could use this flaw to overflow the kernel stack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4273",
"url": "https://www.suse.com/security/cve/CVE-2023-4273"
},
{
"category": "external",
"summary": "SUSE Bug 1214120 for CVE-2023-4273",
"url": "https://bugzilla.suse.com/1214120"
},
{
"category": "external",
"summary": "SUSE Bug 1214123 for CVE-2023-4273",
"url": "https://bugzilla.suse.com/1214123"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "important"
}
],
"title": "CVE-2023-4273"
},
{
"cve": "CVE-2023-4387",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4387"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware\u0027s vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash the system due to a double-free while cleaning up vmxnet3_rq_cleanup_all, which could also lead to a kernel information leak problem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4387",
"url": "https://www.suse.com/security/cve/CVE-2023-4387"
},
{
"category": "external",
"summary": "SUSE Bug 1214350 for CVE-2023-4387",
"url": "https://bugzilla.suse.com/1214350"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-4387"
},
{
"cve": "CVE-2023-4459",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4459"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during cleanup.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4459",
"url": "https://www.suse.com/security/cve/CVE-2023-4459"
},
{
"category": "external",
"summary": "SUSE Bug 1214451 for CVE-2023-4459",
"url": "https://bugzilla.suse.com/1214451"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-4459"
},
{
"cve": "CVE-2023-4563",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4563"
}
],
"notes": [
{
"category": "general",
"text": "This was assigned as a duplicate of CVE-2023-4244.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4563",
"url": "https://www.suse.com/security/cve/CVE-2023-4563"
},
{
"category": "external",
"summary": "SUSE Bug 1214727 for CVE-2023-4563",
"url": "https://bugzilla.suse.com/1214727"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-4563"
},
{
"cve": "CVE-2023-4569",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4569"
}
],
"notes": [
{
"category": "general",
"text": "A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to cause double-deactivations of catchall elements, which can result in a memory leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4569",
"url": "https://www.suse.com/security/cve/CVE-2023-4569"
},
{
"category": "external",
"summary": "SUSE Bug 1214729 for CVE-2023-4569",
"url": "https://bugzilla.suse.com/1214729"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "important"
}
],
"title": "CVE-2023-4569"
}
]
}
SUSE-SU-2023:3599-2
Vulnerability from csaf_suse - Published: 2023-09-21 10:18 - Updated: 2023-09-21 10:18Summary
Security update for the Linux Kernel
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel
Description of the patch:
The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
- CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203330).
- CVE-2022-40133: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203329).
- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).
- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).
- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).
- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).
- CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233).
- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).
- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).
- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).
- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).
- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).
- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).
- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).
- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).
- CVE-2023-4563: Fixed use-after-free in nft_verdict_dump due to a race between set GC and transaction (bsc#1214727).
- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).
- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).
- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).
- CVE-2023-37453: Fixed oversight in SuperSpeed initialization (bsc#1213123).
The following non-security bugs were fixed:
- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).
- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (git-fixes).
- ACPI: processor: perflib: Use the 'no limit' frequency QoS (git-fixes).
- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table (git-fixes).
- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).
- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).
- ALSA: hda/realtek - Remodified 3k pull low procedure (git-fixes).
- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED (git-fixes).
- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx (git-fixes).
- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).
- ALSA: hda/realtek: Switch Dell Oasis models to use SPI (git-fixes).
- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (git-fixes).
- ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces (git-fixes).
- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).
- ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (git-fixes).
- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (git-fixes).
- ARM: dts: imx6sll: fixup of operating points (git-fixes).
- ARM: spear: Do not use timer namespace for timer_shutdown() function (bsc#1213970).
- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (git-fixes).
- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ (git-fixes).
- ASoC: lower 'no backend DAIs enabled for ... Port' log severity (git-fixes).
- ASoC: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).
- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).
- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).
- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).
- Bluetooth: Fix potential use-after-free when clear keys (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (git-fixes).
- Bluetooth: Remove unused declaration amp_read_loc_info() (git-fixes).
- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (git-fixes).
- Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).
- CONFIG_NVME_VERBOSE_ERRORS=y gone with a82baa8083b
- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13 gone with 7e152d55123
- Created new preempt kernel flavor Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT->y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel.
- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).
- Documentation: devices.txt: Remove ttyIOC* (git-fixes).
- Documentation: devices.txt: Remove ttySIOC* (git-fixes).
- Drivers: hv: Do not remap addresses that are above shared_gpa_boundary (bsc#1206453).
- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).
- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).
- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).
- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).
- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).
- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).
- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).
- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)
- HID: add quirk for 03f0:464a HP Elite Presenter Mouse (git-fixes).
- HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).
- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (git-fixes).
- HID: multitouch: Correct devm device reference for hidinput input_dev name (git-fixes).
- HID: wacom: remove the battery when the EKR is off (git-fixes).
- HWPOISON: offline support: fix spelling in Documentation/ABI/ (git-fixes).
- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)
- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
- Input: exc3000 - properly stop timer on shutdown (git-fixes).
- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).
- Kbuild: add -Wno-shift-negative-value where -Wextra is used (bsc#1214756).
- Kbuild: move to -std=gnu11 (bsc#1214756).
- PCI/ASPM: Avoid link retraining race (git-fixes).
- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).
- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (git-fixes).
- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).
- PCI: acpiphp: Reassign resources on bridge if necessary (git-fixes).
- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).
- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).
- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).
- PCI: meson: Remove cast between incompatible function type (git-fixes).
- PCI: microchip: Correct the DED and SEC interrupt bit offsets (git-fixes).
- PCI: microchip: Remove cast between incompatible function type (git-fixes).
- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
- PCI: rockchip: Remove writes to unused registers (git-fixes).
- PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (git-fixes).
- PCI: tegra194: Fix possible array out of bounds access (git-fixes).
- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).
- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)
- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
- RDMA/hns: Fix port active speed (git-fixes)
- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)
- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)
- RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes)
- RDMA/siw: Correct wrong debug message (git-fixes)
- RDMA/umem: Set iova in ODP flow (git-fixes)
- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.
- Revert 'IB/isert: Fix incorrect release of isert connection' (git-fixes)
- Revert 'tracing: Add '(fault)' name injection to kernel probes' (git-fixes).
- Update patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- amba: bus: fix refcount leak (git-fixes).
- arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (git-fixes).
- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).
- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (git-fixes).
- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).
- backlight/bd6107: Compare against struct fb_info.device (git-fixes).
- backlight/gpio_backlight: Compare against struct fb_info.device (git-fixes).
- backlight/lv5207lp: Compare against struct fb_info.device (git-fixes).
- batman-adv: Do not get eth header before batadv_check_management_packet (git-fixes).
- batman-adv: Do not increase MTU when set by user (git-fixes).
- batman-adv: Fix TT global entry leak when client roamed back (git-fixes).
- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).
- batman-adv: Hold rtnl lock during MTU update via netlink (git-fixes).
- batman-adv: Trigger events for auto adjusted MTU (git-fixes).
- bnx2x: fix page fault following EEH recovery (bsc#1214299).
- bpf: Disable preemption in bpf_event_output (git-fixes).
- bpftool: Print newline before '}' for struct with padding only fields (bsc#1211220 jsc#PED-3924).
- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).
- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).
- bus: ti-sysc: Fix cast to enum warning (git-fixes).
- bus: ti-sysc: Flush posted write on enable before reset (git-fixes).
- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (git-fixes).
- ceph: defer stopping mdsc delayed_work (bsc#1214392).
- ceph: do not check for quotas on MDS stray dirs (bsc#1214238).
- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).
- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). gcc7 on SLE 15 does not support this while later gcc does.
- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).
- cifs: allow dumping keys for directories too (bsc#1193629).
- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).
- cifs: if deferred close is disabled then close files immediately (git-fixes).
- cifs: is_network_name_deleted should return a bool (bsc#1193629).
- cifs: update internal module version number for cifs.ko (bsc#1193629).
- clk: Fix slab-out-of-bounds error in devm_clk_release() (git-fixes).
- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes).
- clk: imx8mp: fix sai4 clock (git-fixes).
- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).
- clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz (git-fixes).
- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).
- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).
- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src (git-fixes).
- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).
- clk: sunxi-ng: Modify mismatched function name (git-fixes).
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).
- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).
- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).
- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).
- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).
- cpu/SMT: Allow enabling partial SMT states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpufreq: Fix the race condition while updating the transition_task of policy (git-fixes).
- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (bsc#1214659).
- cpufreq: intel_pstate: Enable HWP IO boost for all servers (bsc#1208949 jsc#PED-6003 jsc#PED-6004).
- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- cpufreq: intel_pstate: Read all MSRs on the target CPU (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- cpufreq: intel_pstate: hybrid: Rework HWP calibration (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- crypto: caam - fix unchecked return value error (git-fixes).
- crypto: stm32 - Properly handle pm_runtime_get failing (git-fixes).
- define more Hyper-V related constants (bsc#1206453).
- dma-buf/sw_sync: Avoid recursive lock during fence signal (git-fixes).
- dma-buf/sync_file: Fix docs syntax (git-fixes).
- dmaengine: idxd: Modify the dependence of attribute pasid_enabled (git-fixes).
- dmaengine: mcf-edma: Fix a potential un-allocated memory access (git-fixes).
- dmaengine: pl330: Return DMA_PAUSED when transaction is paused (git-fixes).
- dmaengine: ste_dma40: Add missing IRQ check in d40_probe (git-fixes).
- docs/process/howto: Replace C89 with C11 (bsc#1214756).
- docs: kernel-parameters: Refer to the correct bitmap function (git-fixes).
- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).
- docs: printk-formats: Fix hex printing of signed values (git-fixes).
- driver core: test_async: fix an error code (git-fixes).
- drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (git-fixes).
- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).
- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz (git-fixes).
- drm/amd/display: Disable phantom OTG after enable for plane disable (git-fixes).
- drm/amd/display: Do not set drr on pipe commit (git-fixes).
- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).
- drm/amd/display: Ensure that planes are in the same order (git-fixes).
- drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register (git-fixes).
- drm/amd/display: Retain phantom plane/stream if validation fails (git-fixes).
- drm/amd/display: Skip DPP DTO update if root clock is gated (git-fixes).
- drm/amd/display: Use update plane and stream routine for DCN32x (git-fixes).
- drm/amd/display: check TG is non-null before checking if enabled (git-fixes).
- drm/amd/display: check attr flag before set cursor degamma on DCN3+ (git-fixes).
- drm/amd/display: disable RCO for DCN314 (git-fixes).
- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).
- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set (git-fixes).
- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).
- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).
- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).
- drm/amd/display: trigger timing sync only if TG is running (git-fixes).
- drm/amd/pm/smu7: move variables to where they are used (git-fixes).
- drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation (git-fixes).
- drm/amd/pm: expose swctf threshold setting for legacy powerplay (git-fixes).
- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).
- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings (git-fixes).
- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings (git-fixes).
- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (git-fixes).
- drm/amd: Disable S/G for APUs when 64GB or more host memory (git-fixes).
- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 (git-fixes).
- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).
- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).
- drm/amdgpu: add S/G display parameter (git-fixes).
- drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes).
- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).
- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini (git-fixes).
- drm/amdgpu: fix memory leak in mes self test (git-fixes).
- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).
- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).
- drm/amdgpu: keep irq count in amdgpu_irq_disable_all (git-fixes).
- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (git-fixes).
- drm/armada: Fix off-by-one error in armada_overlay_get_property() (git-fixes).
- drm/ast: Fix DRAM init on AST2200 (git-fixes).
- drm/atomic-helper: Update reference to drm_crtc_force_disable_all() (git-fixes).
- drm/bridge: anx7625: Drop device lock before drm_helper_hpd_irq_event() (git-fixes).
- drm/bridge: anx7625: Use common macros for DP power sequencing commands (git-fixes).
- drm/bridge: anx7625: Use common macros for HDCP capabilities (git-fixes).
- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).
- drm/bridge: tc358764: Fix debug print parameter order (git-fixes).
- drm/etnaviv: fix dumping of active MMU context (git-fixes).
- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers (git-fixes).
- drm/i915/sdvo: fix panel_type initialization (git-fixes).
- drm/i915: Fix premature release of request's reusable memory (git-fixes).
- drm/mediatek: Fix dereference before null check (git-fixes).
- drm/mediatek: Fix potential memory leak if vmap() fail (git-fixes).
- drm/mediatek: Remove freeing not dynamic allocated memory (git-fixes).
- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).
- drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).
- drm/msm/mdp5: Do not leak some plane state (git-fixes).
- drm/msm: Update dev core dump to not print backwards (git-fixes).
- drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() (git-fixes).
- drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (git-fixes).
- drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (bsc#1214073).
- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).
- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (git-fixes).
- drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (git-fixes).
- drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (git-fixes).
- drm/qxl: fix UAF on handle creation (git-fixes).
- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).
- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() (git-fixes).
- drm/rockchip: Do not spam logs in atomic check (git-fixes).
- drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap() (git-fixes).
- drm/stm: ltdc: fix late dereference check (git-fixes).
- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (git-fixes).
- drm/ttm: check null pointer before accessing when swapping (git-fixes).
- drm/ttm: never consider pinned BOs for eviction&swap (git-fixes).
- drm/vmwgfx: Fix shader stage validation (git-fixes).
- drm: adv7511: Fix low refresh rate register for ADV7533/5 (git-fixes).
- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).
- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask (git-fixes).
- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).
- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).
- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).
- e1000: Fix typos in comments (jsc#PED-5738).
- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
- e1000: switch to napi_build_skb() (jsc#PED-5738).
- e1000: switch to napi_consume_skb() (jsc#PED-5738).
- exfat: fix unexpected EOF while reading dir (bsc#1214000).
- exfat: release s_lock before calling dir_emit() (bsc#1214000).
- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).
- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (git-fixes).
- fbdev: Fix sys_imageblit() for arbitrary image widths (git-fixes).
- fbdev: Improve performance of sys_imageblit() (git-fixes).
- fbdev: Update fbdev source file paths (git-fixes).
- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).
- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
- file: reinstate f_pos locking optimization for regular files (bsc#1213759).
- firmware: arm_scmi: Drop OF node reference in the transport channel setup (git-fixes).
- firmware: cs_dsp: Fix new control name check (git-fixes).
- firmware: meson_sm: fix to avoid potential NULL pointer dereference (git-fixes).
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes).
- fprobe: Release rethook after the ftrace_ops is unregistered (git-fixes).
- fprobe: add unlock to match a succeeded ftrace_test_recursion_trylock (git-fixes).
- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).
- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).
- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).
- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).
- gpio: mvebu: fix irq domain leak (git-fixes).
- gpio: tps68470: Make tps68470_gpio_output() always set the initial value (git-fixes).
- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).
- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (git-fixes).
- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() (git-fixes).
- hwrng: iproc-rng200 - Implement suspend and resume calls (git-fixes).
- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).
- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
- i2c: Delete error messages for failed memory allocations (git-fixes).
- i2c: Improve size determinations (git-fixes).
- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (git-fixes).
- i2c: designware: Correct length byte validation logic (git-fixes).
- i2c: designware: Handle invalid SMBus block data response length value (git-fixes).
- i2c: hisi: Only handle the interrupt of the driver's transfer (git-fixes).
- i2c: nomadik: Remove a useless call in the remove function (git-fixes).
- i2c: nomadik: Remove unnecessary goto label (git-fixes).
- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).
- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).
- iavf: fix potential races for FDIR filters (git-fixes).
- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).
- ice: Fix crash by keep old cfg when update TCs more than queues (git-fixes).
- ice: Fix max_rate check while configuring TX rate limits (git-fixes).
- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
- iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (git-fixes).
- iio: adc: stx104: Implement and utilize register structures (git-fixes).
- iio: adc: stx104: Utilize iomap interface (git-fixes).
- iio: cros_ec: Fix the allocation size for cros_ec_command (git-fixes).
- intel/e1000:fix repeated words in comments (jsc#PED-5738).
- intel: remove unused macros (jsc#PED-5738).
- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423).
- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423).
- iommu/amd: Add PCI segment support for ivrs_ commands (git-fixes).
- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423).
- iommu/amd: Do not identity map v2 capable device when snp is enabled (git-fixes).
- iommu/amd: Fix compile warning in init code (git-fixes).
- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).
- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).
- iommu/amd: Fix pci device refcount leak in ppr_notifier() (git-fixes).
- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).
- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (git-fixes).
- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).
- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).
- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).
- iommu/dma: Fix incorrect error return on iommu deferred attach (git-fixes).
- iommu/dma: Fix iova map result check bug (git-fixes).
- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).
- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (git-fixes).
- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (git-fixes).
- iommu/iova: Fix module config properly (git-fixes).
- iommu/mediatek: Add error path for loop of mm_dts_parse (git-fixes).
- iommu/mediatek: Add platform_device_put for recovering the device refcnt (git-fixes).
- iommu/mediatek: Check return value after calling platform_get_resource() (git-fixes).
- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).
- iommu/mediatek: Use component_match_add (git-fixes).
- iommu/mediatek: Validate number of phandles associated with 'mediatek,larbs' (git-fixes).
- iommu/omap: Fix buffer overflow in debugfs (git-fixes).
- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).
- iommu/s390: Fix duplicate domain attachments (git-fixes).
- iommu/sun50i: Consider all fault sources for reset (git-fixes).
- iommu/sun50i: Fix R/W permission check (git-fixes).
- iommu/sun50i: Fix flush size (git-fixes).
- iommu/sun50i: Fix reset release (git-fixes).
- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).
- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).
- iommu/vt-d: Add RPLS to quirk list to skip TE disabling (git-fixes).
- iommu/vt-d: Check correct capability for sagaw determination (git-fixes).
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (git-fixes).
- iommu/vt-d: Correctly calculate sagaw value of IOMMU (git-fixes).
- iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (git-fixes).
- iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (git-fixes).
- iommu/vt-d: Fix kdump kernels boot failure with scalable mode (git-fixes).
- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (git-fixes).
- iommu/vt-d: Set SRE bit only when hardware has SRS cap (git-fixes).
- ipmi:ssif: Add check for kstrdup (git-fixes).
- ipmi:ssif: Fix a memory leak when scanning for an adapter (git-fixes).
- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).
- kabi/severities: Ignore newly added SRSO mitigation functions
- kabi: Allow extra bugsints (bsc#1213927).
- kernel-binary: Common dependencies cleanup Common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.
- kernel-binary: Drop code for kerntypes support Kerntypes was a SUSE-specific feature dropped before SLE 12.
- kunit: make kunit_test_timeout compatible with comment (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false (git-fixes).
- leds: multicolor: Use rounded division when calculating color components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode() (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- lib/test_meminit: allocate pages up to order MAX_ORDER (git-fixes).
- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).
- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220 jsc#PED-3924).
- libbpf: Fix btf_dump's packed struct determination (bsc#1211220 jsc#PED-3924).
- libbpf: Fix single-line struct definition output in btf_dump (bsc#1211220 jsc#PED-3924).
- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
- md/raid0: Factor out helper for mapping and submitting a bio (bsc#1213916).
- md/raid0: Fix performance regression for large sequential writes (bsc#1213916).
- media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).
- media: cx24120: Add retval check for cx24120_message_send() (git-fixes).
- media: dib7000p: Fix potential division by zero (git-fixes).
- media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (git-fixes).
- media: go7007: Remove redundant if statement (git-fixes).
- media: i2c: ccs: Check rules is non-NULL (git-fixes).
- media: i2c: rdacm21: Fix uninitialized value (git-fixes).
- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).
- media: ov2680: Add ov2680_fill_format() helper function (git-fixes).
- media: ov2680: Do not take the lock for try_fmt calls (git-fixes).
- media: ov2680: Fix ov2680_bayer_order() (git-fixes).
- media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).
- media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (git-fixes).
- media: ov2680: Fix vflip / hflip set functions (git-fixes).
- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).
- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (git-fixes).
- media: rkvdec: increase max supported height for H.264 (git-fixes).
- media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).
- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).
- media: venus: hfi_venus: Only consider sys_idle_indicator on V1 (git-fixes).
- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts (git-fixes).
- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).
- mkspec: Allow unsupported KMPs (bsc#1214386)
- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).
- mmc: block: Fix in_flight[issue_type] value error (git-fixes).
- mmc: moxart: read scr register without changing byte order (git-fixes).
- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).
- module: avoid allocation if module is already present and ready (bsc#1213921).
- module: extract patient module check into helper (bsc#1213921).
- module: move check_modinfo() early to early_mod_check() (bsc#1213921).
- module: move early sanity checks into a helper (bsc#1213921).
- mtd: rawnand: brcmnand: Fix crash during the panic_write (git-fixes).
- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).
- mtd: rawnand: brcmnand: Fix potential false time out warning (git-fixes).
- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (git-fixes).
- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (git-fixes).
- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).
- mtd: rawnand: omap_elm: Fix incorrect type in assignment (git-fixes).
- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (git-fixes).
- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).
- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).
- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).
- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).
- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
- net: mana: Fix MANA VF unload when hardware is unresponsive (git-fixes).
- net: phy: at803x: remove set/get wol callbacks for AR8032 (git-fixes).
- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
- net: phy: fix IRQ-based wake-on-lan over hibernate / power off (git-fixes).
- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)
- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (git-fixes).
- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (git-fixes).
- netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).
- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946 bsc#1214404).
- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946).
- netfs: fix parameter of cleanup() (bsc#1214743).
- nfsd: Remove incorrect check in nfsd4_validate_stateid (git-fixes).
- nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (git-fixes).
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).
- nvme-rdma: fix potential unbalanced freeze & unfreeze (bsc#1208902).
- nvme-tcp: fix potential unbalanced freeze & unfreeze (bsc#1208902).
- objtool/x86: Fix SRSO mess (git-fixes).
- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).
- objtool: Union instruction::{call_dest,jump_table} (git-fixes).
- old-flavors: Drop 2.6 kernels. 2.6 based kernels are EOL, upgrading from them is no longer suported.
- pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (git-fixes).
- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).
- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).
- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).
- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).
- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
- phy: qcom-snps: Use dev_err_probe() to simplify code (git-fixes).
- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).
- pinctrl: amd: Mask wake bits on probe again (git-fixes).
- pinctrl: amd: Revert 'pinctrl: amd: disable and mask interrupts on probe' (git-fixes).
- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).
- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).
- pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).
- platform/x86: dell-sysman: Fix reference leak (git-fixes).
- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).
- powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (bsc#1212091 ltc#199106).
- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (bsc#1212091 ltc#199106).
- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (bsc#1212091 ltc#199106).
- powerpc/iommu: do not set failed sg dma_address to DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).
- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).
- powerpc/kernel/iommu: Add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).
- powerpc/kexec: Fix build failure from uninitialised variable (bsc#1212091 ltc#199106).
- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059 git-fixes).
- powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).
- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Add of_node_put() before break (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Check if the default window in use before removing it (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Find existing DDW with given property name (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Make use of DDW for indirect mapping (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Replace hard-coded page shift (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091 ltc#199106).
- powerpc/pseries: Add __init attribute to eligible functions (bsc#1212091 ltc#199106).
- powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- powerpc/pseries: Initialise CPU hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- powerpc/rtas: block error injection when locked down (bsc#1023051).
- powerpc/rtas: enture rtas_call is called with MMU enabled (bsc#1023051).
- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).
- powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (bsc#1188885 ltc#193722 git-fixes).
- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). Update config files.
- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).
- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
- pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).
- pstore/ram: Check start of empty przs during init (git-fixes).
- pwm: Add a stub for devm_pwmchip_add() (git-fixes).
- pwm: meson: Simplify duplicated per-channel tracking (git-fixes).
- pwm: meson: fix handling of period/duty if greater than UINT_MAX (git-fixes).
- qed: Fix scheduling in a tasklet while getting stats (git-fixes).
- regmap: rbtree: Use alloc_flags for memory allocations (git-fixes).
- ring-buffer: Do not swap cpu_buffer during resize process (git-fixes).
- ring-buffer: Fix deadloop issue on reading trace_pipe (git-fixes).
- ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes).
- rpm/mkspec-dtb: support for nested subdirs.
- rpmsg: glink: Add check for kstrdup (git-fixes).
- rt: Add helper script to refresh RT configs based on the parent (SLE Realtime Extension).
- s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (bsc#1214976).
- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).
- s390/zcrypt: fix reply buffer calculations for CCA replies (bsc#1213949).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git fixes).
- sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes).
- sched/psi: use kernfs polling functions for PSI trigger polling (bsc#1209799).
- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes).
- scsi: 53c700: Check that command slot is not NULL (git-fixes).
- scsi: RDMA/srp: Fix residual handling (git-fixes)
- scsi: bsg: Increase number of devices (bsc#1210048).
- scsi: core: Do not wait for quiesce in scsi_device_block() (bsc#1209284).
- scsi: core: Do not wait for quiesce in scsi_stop_queue() (bsc#1209284).
- scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes).
- scsi: core: Fix possible memory leak if device_add() fails (git-fixes).
- scsi: core: Improve warning message in scsi_device_block() (bsc#1209284).
- scsi: core: Merge scsi_internal_device_block() and device_block() (bsc#1209284).
- scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes).
- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
- scsi: qedf: Fix firmware halt over suspend and resume (git-fixes).
- scsi: qedi: Fix firmware halt over suspend and resume (git-fixes).
- scsi: scsi_debug: Remove dead code (git-fixes).
- scsi: sg: Increase number of devices (bsc#1210048).
- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
- scsi: snic: Fix possible memory leak if device_add() fails (git-fixes).
- scsi: storvsc: Always set no_report_opcodes (git-fixes).
- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (git-fixes).
- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
- scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (git-fixes).
- scsi: zfcp: Defer fc_rport blocking until after ADISC response (git-fixes bsc#1214371).
- selftests/bpf: Test btf dump for struct with padding only fields (bsc#1211220 jsc#PED-3924).
- selftests/futex: Order calls to futex_lock_pi (git-fixes).
- selftests/harness: Actually report SKIP for signal tests (git-fixes).
- selftests/resctrl: Close perf value read fd on errors (git-fixes).
- selftests/resctrl: Do not leak buffer in fill_cache() (git-fixes).
- selftests/resctrl: Unmount resctrl FS if child fails to run benchmark (git-fixes).
- selftests/rseq: check if libc rseq support is registered (git-fixes).
- selftests: forwarding: Add a helper to skip test when using veth pairs (git-fixes).
- selftests: forwarding: Skip test when no interfaces are specified (git-fixes).
- selftests: forwarding: Switch off timeout (git-fixes).
- selftests: forwarding: ethtool: Skip when using veth pairs (git-fixes).
- selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (git-fixes).
- selftests: forwarding: tc_actions: Use ncat instead of nc (git-fixes).
- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).
- selftests: forwarding: tc_flower: Relax success criterion (git-fixes).
- selftests: mirror_gre_changes: Tighten up the TTL test match (git-fixes).
- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
- serial: sc16is7xx: fix bug when first setting GPIO direction (git-fixes).
- serial: sprd: Assign sprd_port after initialized to avoid wrong access (git-fixes).
- serial: sprd: Fix DMA buffer leak issue (git-fixes).
- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).
- sfc: fix crash when reading stats while NIC is resetting (git-fixes).
- smb3: Do not send lease break acknowledgment if all file handles have been closed (git-fixes).
- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request (bsc#1193629).
- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).
- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
- smb: client: fix null auth (git-fixes).
- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).
- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).
- soundwire: fix enumeration completion (git-fixes).
- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).
- supported.conf: fix typos for -!optional markers
- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).
- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).
- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).
- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).
- target_core_rbd: remove snapshot existence validation code (bsc#1212857).
- thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).
- timers: Add shutdown mechanism to the internal functions (bsc#1213970).
- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
- timers: Rename del_timer() to timer_delete() (bsc#1213970).
- timers: Rename del_timer_sync() to timer_delete_sync() (bsc#1213970).
- timers: Replace BUG_ON()s (bsc#1213970).
- timers: Silently ignore timers with a NULL function (bsc#1213970).
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).
- timers: Update kernel-doc for various functions (bsc#1213970).
- timers: Use del_timer_sync() even on UP (bsc#1213970).
- tracing/histograms: Add histograms to hist_vars if they have referenced variables (git-fixes).
- tracing/histograms: Return an error if we fail to add histogram to hist_vars list (git-fixes).
- tracing/probes: Fix not to count error code to total length (git-fixes).
- tracing/probes: Fix to avoid double count of the string length on the array (git-fixes).
- tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).
- tracing/probes: Fix to update dynamic data counter if fetcharg uses it (git-fixes).
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes).
- tracing: Fix memleak due to race between current_tracer and trace (git-fixes).
- tracing: Fix memory leak of iter->temp when reading trace_pipe (git-fixes).
- tracing: Fix null pointer dereference in tracing_err_log_open() (git-fixes).
- tracing: Fix warning in trace_buffered_event_disable() (git-fixes).
- tty: fix hang on tty device with no_room set (git-fixes).
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (git-fixes).
- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).
- tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (git-fixes).
- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).
- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (git-fixes).
- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).
- usb-storage: alauda: Fix uninit-value in alauda_check_media() (git-fixes).
- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (git-fixes).
- usb: chipidea: imx: do not request QoS for imx8ulp (git-fixes).
- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).
- usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (git-fixes).
- usb: dwc3: Fix typos in gadget.c (git-fixes).
- usb: dwc3: Properly handle processing of pending events (git-fixes).
- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).
- usb: gadget: Fix the memory leak in raw_gadget driver (git-fixes).
- usb: gadget: f_mass_storage: Fix unused variable warning (git-fixes).
- usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (git-fixes).
- usb: ohci-at91: Fix the unhandle interrupt when resume (git-fixes).
- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).
- usb: quirks: add quirk for Focusrite Scarlett (git-fixes).
- usb: serial: option: add Quectel EC200A module support (git-fixes).
- usb: serial: option: support Quectel EM060K_128 (git-fixes).
- usb: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).
- usb: serial: simple: sort driver entries (git-fixes).
- usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment (git-fixes).
- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).
- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).
- usb: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).
- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (git-fixes).
- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).
- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).
- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).
- wifi: ath9k: protect WMI command response buffer replacement with a lock (git-fixes).
- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).
- wifi: cfg80211: Fix return value in scan logic (git-fixes).
- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (git-fixes).
- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (git-fixes).
- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).
- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).
- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).
- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH (git-fixes).
- wifi: mwifiex: Fix OOB and integer underflow when rx packets (git-fixes).
- wifi: mwifiex: Fix missed return in oob checks failed path (git-fixes).
- wifi: mwifiex: avoid possible NULL skb pointer dereference (git-fixes).
- wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (git-fixes).
- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).
- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute (git-fixes).
- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
- wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).
- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).
- x86/alternative: Make custom return thunk unconditional (git-fixes).
- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
- x86/cpu: Clean up SRSO return thunk mess (git-fixes).
- x86/cpu: Cleanup the untrain mess (git-fixes).
- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
- x86/cpu: Rename original retbleed methods (git-fixes).
- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).
- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).
- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).
- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).
- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).
- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).
- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).
- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).
- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).
- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes).
- x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes).
- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
- x86/srso: Explain the untraining sequences a bit more (git-fixes).
- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
- x86/srso: Fix return thunks in generated code (git-fixes).
- x86/static_call: Fix __static_call_fixup() (git-fixes).
- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).
- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).
- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).
- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).
- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).
- xfs: fix sb write verify for lazysbcount (bsc#1214661).
Patchnames: SUSE-2023-3599,SUSE-SLE-Module-Live-Patching-15-SP5-2023-3599,SUSE-SLE-Module-RT-15-SP5-2023-3599,openSUSE-SLE-15.5-2023-3599
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.6 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.7 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.1 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.1 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.7 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.6 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
144 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThe SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203330).\n- CVE-2022-40133: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203329).\n- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).\n- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).\n- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).\n- CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233).\n- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).\n- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).\n- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).\n- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).\n- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).\n- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).\n- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).\n- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).\n- CVE-2023-4563: Fixed use-after-free in nft_verdict_dump due to a race between set GC and transaction (bsc#1214727).\n- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).\n- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).\n- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).\n- CVE-2023-37453: Fixed oversight in SuperSpeed initialization (bsc#1213123).\n\nThe following non-security bugs were fixed:\n\n- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).\n- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (git-fixes).\n- ACPI: processor: perflib: Use the \u0027no limit\u0027 frequency QoS (git-fixes).\n- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table (git-fixes).\n- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).\n- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).\n- ALSA: hda/realtek - Remodified 3k pull low procedure (git-fixes).\n- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED (git-fixes).\n- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx (git-fixes).\n- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).\n- ALSA: hda/realtek: Switch Dell Oasis models to use SPI (git-fixes).\n- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (git-fixes).\n- ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces (git-fixes).\n- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).\n- ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (git-fixes).\n- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (git-fixes).\n- ARM: dts: imx6sll: fixup of operating points (git-fixes).\n- ARM: spear: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (git-fixes).\n- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ (git-fixes).\n- ASoC: lower \u0027no backend DAIs enabled for ... Port\u0027 log severity (git-fixes).\n- ASoC: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).\n- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).\n- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).\n- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).\n- Bluetooth: Fix potential use-after-free when clear keys (git-fixes).\n- Bluetooth: L2CAP: Fix use-after-free (git-fixes).\n- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (git-fixes).\n- Bluetooth: Remove unused declaration amp_read_loc_info() (git-fixes).\n- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (git-fixes).\n- Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (git-fixes).\n- Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).\n- CONFIG_NVME_VERBOSE_ERRORS=y gone with a82baa8083b\n- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13 gone with 7e152d55123\n- Created new preempt kernel flavor Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT-\u003ey are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel.\n- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).\n- Documentation: devices.txt: Remove ttyIOC* (git-fixes).\n- Documentation: devices.txt: Remove ttySIOC* (git-fixes).\n- Drivers: hv: Do not remap addresses that are above shared_gpa_boundary (bsc#1206453).\n- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).\n- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).\n- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).\n- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).\n- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).\n- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).\n- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).\n- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)\n- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)\n- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)\n- HID: add quirk for 03f0:464a HP Elite Presenter Mouse (git-fixes).\n- HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).\n- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (git-fixes).\n- HID: multitouch: Correct devm device reference for hidinput input_dev name (git-fixes).\n- HID: wacom: remove the battery when the EKR is off (git-fixes).\n- HWPOISON: offline support: fix spelling in Documentation/ABI/ (git-fixes).\n- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)\n- IB/uverbs: Fix an potential error pointer dereference (git-fixes)\n- Input: exc3000 - properly stop timer on shutdown (git-fixes).\n- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).\n- Kbuild: add -Wno-shift-negative-value where -Wextra is used (bsc#1214756).\n- Kbuild: move to -std=gnu11 (bsc#1214756).\n- PCI/ASPM: Avoid link retraining race (git-fixes).\n- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).\n- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (git-fixes).\n- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).\n- PCI: acpiphp: Reassign resources on bridge if necessary (git-fixes).\n- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).\n- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).\n- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).\n- PCI: meson: Remove cast between incompatible function type (git-fixes).\n- PCI: microchip: Correct the DED and SEC interrupt bit offsets (git-fixes).\n- PCI: microchip: Remove cast between incompatible function type (git-fixes).\n- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).\n- PCI: rockchip: Remove writes to unused registers (git-fixes).\n- PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (git-fixes).\n- PCI: tegra194: Fix possible array out of bounds access (git-fixes).\n- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).\n- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)\n- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)\n- RDMA/efa: Fix wrong resources deallocation order (git-fixes)\n- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)\n- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)\n- RDMA/hns: Fix port active speed (git-fixes)\n- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)\n- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)\n- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)\n- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)\n- RDMA/siw: Balance the reference of cep-\u003ekref in the error path (git-fixes)\n- RDMA/siw: Correct wrong debug message (git-fixes)\n- RDMA/umem: Set iova in ODP flow (git-fixes)\n- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.\n- Revert \u0027IB/isert: Fix incorrect release of isert connection\u0027 (git-fixes)\n- Revert \u0027tracing: Add \u0027(fault)\u0027 name injection to kernel probes\u0027 (git-fixes).\n- Update patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- amba: bus: fix refcount leak (git-fixes).\n- arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (git-fixes).\n- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).\n- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (git-fixes).\n- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).\n- backlight/bd6107: Compare against struct fb_info.device (git-fixes).\n- backlight/gpio_backlight: Compare against struct fb_info.device (git-fixes).\n- backlight/lv5207lp: Compare against struct fb_info.device (git-fixes).\n- batman-adv: Do not get eth header before batadv_check_management_packet (git-fixes).\n- batman-adv: Do not increase MTU when set by user (git-fixes).\n- batman-adv: Fix TT global entry leak when client roamed back (git-fixes).\n- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).\n- batman-adv: Hold rtnl lock during MTU update via netlink (git-fixes).\n- batman-adv: Trigger events for auto adjusted MTU (git-fixes).\n- bnx2x: fix page fault following EEH recovery (bsc#1214299).\n- bpf: Disable preemption in bpf_event_output (git-fixes).\n- bpftool: Print newline before \u0027}\u0027 for struct with padding only fields (bsc#1211220 jsc#PED-3924).\n- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).\n- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).\n- bus: ti-sysc: Fix cast to enum warning (git-fixes).\n- bus: ti-sysc: Flush posted write on enable before reset (git-fixes).\n- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (git-fixes).\n- ceph: defer stopping mdsc delayed_work (bsc#1214392).\n- ceph: do not check for quotas on MDS stray dirs (bsc#1214238).\n- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).\n- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). gcc7 on SLE 15 does not support this while later gcc does.\n- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).\n- cifs: allow dumping keys for directories too (bsc#1193629).\n- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).\n- cifs: if deferred close is disabled then close files immediately (git-fixes).\n- cifs: is_network_name_deleted should return a bool (bsc#1193629).\n- cifs: update internal module version number for cifs.ko (bsc#1193629).\n- clk: Fix slab-out-of-bounds error in devm_clk_release() (git-fixes).\n- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}\u0027 (git-fixes).\n- clk: imx8mp: fix sai4 clock (git-fixes).\n- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).\n- clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz (git-fixes).\n- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).\n- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).\n- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: sunxi-ng: Modify mismatched function name (git-fixes).\n- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).\n- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).\n- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).\n- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).\n- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).\n- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).\n- cpu/SMT: Allow enabling partial SMT states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpufreq: Fix the race condition while updating the transition_task of policy (git-fixes).\n- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (bsc#1214659).\n- cpufreq: intel_pstate: Enable HWP IO boost for all servers (bsc#1208949 jsc#PED-6003 jsc#PED-6004).\n- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: Read all MSRs on the target CPU (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: hybrid: Rework HWP calibration (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- crypto: caam - fix unchecked return value error (git-fixes).\n- crypto: stm32 - Properly handle pm_runtime_get failing (git-fixes).\n- define more Hyper-V related constants (bsc#1206453).\n- dma-buf/sw_sync: Avoid recursive lock during fence signal (git-fixes).\n- dma-buf/sync_file: Fix docs syntax (git-fixes).\n- dmaengine: idxd: Modify the dependence of attribute pasid_enabled (git-fixes).\n- dmaengine: mcf-edma: Fix a potential un-allocated memory access (git-fixes).\n- dmaengine: pl330: Return DMA_PAUSED when transaction is paused (git-fixes).\n- dmaengine: ste_dma40: Add missing IRQ check in d40_probe (git-fixes).\n- docs/process/howto: Replace C89 with C11 (bsc#1214756).\n- docs: kernel-parameters: Refer to the correct bitmap function (git-fixes).\n- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).\n- docs: printk-formats: Fix hex printing of signed values (git-fixes).\n- driver core: test_async: fix an error code (git-fixes).\n- drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (git-fixes).\n- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).\n- drm/amd/display: Apply 60us prefetch for DCFCLK \u0026lt;= 300Mhz (git-fixes).\n- drm/amd/display: Disable phantom OTG after enable for plane disable (git-fixes).\n- drm/amd/display: Do not set drr on pipe commit (git-fixes).\n- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).\n- drm/amd/display: Ensure that planes are in the same order (git-fixes).\n- drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register (git-fixes).\n- drm/amd/display: Retain phantom plane/stream if validation fails (git-fixes).\n- drm/amd/display: Skip DPP DTO update if root clock is gated (git-fixes).\n- drm/amd/display: Use update plane and stream routine for DCN32x (git-fixes).\n- drm/amd/display: check TG is non-null before checking if enabled (git-fixes).\n- drm/amd/display: check attr flag before set cursor degamma on DCN3+ (git-fixes).\n- drm/amd/display: disable RCO for DCN314 (git-fixes).\n- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).\n- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).\n- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set (git-fixes).\n- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).\n- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).\n- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).\n- drm/amd/display: trigger timing sync only if TG is running (git-fixes).\n- drm/amd/pm/smu7: move variables to where they are used (git-fixes).\n- drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation (git-fixes).\n- drm/amd/pm: expose swctf threshold setting for legacy powerplay (git-fixes).\n- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).\n- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings (git-fixes).\n- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings (git-fixes).\n- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (git-fixes).\n- drm/amd: Disable S/G for APUs when 64GB or more host memory (git-fixes).\n- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).\n- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 (git-fixes).\n- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).\n- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).\n- drm/amdgpu: Remove unnecessary domain argument (git-fixes).\n- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).\n- drm/amdgpu: add S/G display parameter (git-fixes).\n- drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes).\n- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).\n- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini (git-fixes).\n- drm/amdgpu: fix memory leak in mes self test (git-fixes).\n- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).\n- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).\n- drm/amdgpu: keep irq count in amdgpu_irq_disable_all (git-fixes).\n- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (git-fixes).\n- drm/armada: Fix off-by-one error in armada_overlay_get_property() (git-fixes).\n- drm/ast: Fix DRAM init on AST2200 (git-fixes).\n- drm/atomic-helper: Update reference to drm_crtc_force_disable_all() (git-fixes).\n- drm/bridge: anx7625: Drop device lock before drm_helper_hpd_irq_event() (git-fixes).\n- drm/bridge: anx7625: Use common macros for DP power sequencing commands (git-fixes).\n- drm/bridge: anx7625: Use common macros for HDCP capabilities (git-fixes).\n- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).\n- drm/bridge: tc358764: Fix debug print parameter order (git-fixes).\n- drm/etnaviv: fix dumping of active MMU context (git-fixes).\n- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers (git-fixes).\n- drm/i915/sdvo: fix panel_type initialization (git-fixes).\n- drm/i915: Fix premature release of request\u0027s reusable memory (git-fixes).\n- drm/mediatek: Fix dereference before null check (git-fixes).\n- drm/mediatek: Fix potential memory leak if vmap() fail (git-fixes).\n- drm/mediatek: Remove freeing not dynamic allocated memory (git-fixes).\n- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).\n- drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).\n- drm/msm/mdp5: Do not leak some plane state (git-fixes).\n- drm/msm: Update dev core dump to not print backwards (git-fixes).\n- drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() (git-fixes).\n- drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (git-fixes).\n- drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (bsc#1214073).\n- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).\n- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (git-fixes).\n- drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (git-fixes).\n- drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (git-fixes).\n- drm/qxl: fix UAF on handle creation (git-fixes).\n- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).\n- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() (git-fixes).\n- drm/rockchip: Do not spam logs in atomic check (git-fixes).\n- drm/shmem-helper: Reset vma-\u003evm_ops before calling dma_buf_mmap() (git-fixes).\n- drm/stm: ltdc: fix late dereference check (git-fixes).\n- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (git-fixes).\n- drm/ttm: check null pointer before accessing when swapping (git-fixes).\n- drm/ttm: never consider pinned BOs for eviction\u0026swap (git-fixes).\n- drm/vmwgfx: Fix shader stage validation (git-fixes).\n- drm: adv7511: Fix low refresh rate register for ADV7533/5 (git-fixes).\n- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).\n- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask (git-fixes).\n- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).\n- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).\n- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).\n- e1000: Fix typos in comments (jsc#PED-5738).\n- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).\n- e1000: switch to napi_build_skb() (jsc#PED-5738).\n- e1000: switch to napi_consume_skb() (jsc#PED-5738).\n- exfat: fix unexpected EOF while reading dir (bsc#1214000).\n- exfat: release s_lock before calling dir_emit() (bsc#1214000).\n- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).\n- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (git-fixes).\n- fbdev: Fix sys_imageblit() for arbitrary image widths (git-fixes).\n- fbdev: Improve performance of sys_imageblit() (git-fixes).\n- fbdev: Update fbdev source file paths (git-fixes).\n- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).\n- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).\n- file: reinstate f_pos locking optimization for regular files (bsc#1213759).\n- firmware: arm_scmi: Drop OF node reference in the transport channel setup (git-fixes).\n- firmware: cs_dsp: Fix new control name check (git-fixes).\n- firmware: meson_sm: fix to avoid potential NULL pointer dereference (git-fixes).\n- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes).\n- fprobe: Release rethook after the ftrace_ops is unregistered (git-fixes).\n- fprobe: add unlock to match a succeeded ftrace_test_recursion_trylock (git-fixes).\n- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).\n- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).\n- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).\n- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).\n- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).\n- gpio: mvebu: fix irq domain leak (git-fixes).\n- gpio: tps68470: Make tps68470_gpio_output() always set the initial value (git-fixes).\n- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).\n- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (git-fixes).\n- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() (git-fixes).\n- hwrng: iproc-rng200 - Implement suspend and resume calls (git-fixes).\n- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).\n- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).\n- i2c: Delete error messages for failed memory allocations (git-fixes).\n- i2c: Improve size determinations (git-fixes).\n- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (git-fixes).\n- i2c: designware: Correct length byte validation logic (git-fixes).\n- i2c: designware: Handle invalid SMBus block data response length value (git-fixes).\n- i2c: hisi: Only handle the interrupt of the driver\u0027s transfer (git-fixes).\n- i2c: nomadik: Remove a useless call in the remove function (git-fixes).\n- i2c: nomadik: Remove unnecessary goto label (git-fixes).\n- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).\n- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).\n- iavf: fix potential races for FDIR filters (git-fixes).\n- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).\n- ice: Fix crash by keep old cfg when update TCs more than queues (git-fixes).\n- ice: Fix max_rate check while configuring TX rate limits (git-fixes).\n- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).\n- iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (git-fixes).\n- iio: adc: stx104: Implement and utilize register structures (git-fixes).\n- iio: adc: stx104: Utilize iomap interface (git-fixes).\n- iio: cros_ec: Fix the allocation size for cros_ec_command (git-fixes).\n- intel/e1000:fix repeated words in comments (jsc#PED-5738).\n- intel: remove unused macros (jsc#PED-5738).\n- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423).\n- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423).\n- iommu/amd: Add PCI segment support for ivrs_ commands (git-fixes).\n- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423).\n- iommu/amd: Do not identity map v2 capable device when snp is enabled (git-fixes).\n- iommu/amd: Fix compile warning in init code (git-fixes).\n- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).\n- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).\n- iommu/amd: Fix pci device refcount leak in ppr_notifier() (git-fixes).\n- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).\n- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (git-fixes).\n- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).\n- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).\n- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).\n- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).\n- iommu/dma: Fix incorrect error return on iommu deferred attach (git-fixes).\n- iommu/dma: Fix iova map result check bug (git-fixes).\n- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).\n- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (git-fixes).\n- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (git-fixes).\n- iommu/iova: Fix module config properly (git-fixes).\n- iommu/mediatek: Add error path for loop of mm_dts_parse (git-fixes).\n- iommu/mediatek: Add platform_device_put for recovering the device refcnt (git-fixes).\n- iommu/mediatek: Check return value after calling platform_get_resource() (git-fixes).\n- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).\n- iommu/mediatek: Use component_match_add (git-fixes).\n- iommu/mediatek: Validate number of phandles associated with \u0027mediatek,larbs\u0027 (git-fixes).\n- iommu/omap: Fix buffer overflow in debugfs (git-fixes).\n- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).\n- iommu/s390: Fix duplicate domain attachments (git-fixes).\n- iommu/sun50i: Consider all fault sources for reset (git-fixes).\n- iommu/sun50i: Fix R/W permission check (git-fixes).\n- iommu/sun50i: Fix flush size (git-fixes).\n- iommu/sun50i: Fix reset release (git-fixes).\n- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).\n- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).\n- iommu/vt-d: Add RPLS to quirk list to skip TE disabling (git-fixes).\n- iommu/vt-d: Check correct capability for sagaw determination (git-fixes).\n- iommu/vt-d: Clean up si_domain in the init_dmars() error path (git-fixes).\n- iommu/vt-d: Correctly calculate sagaw value of IOMMU (git-fixes).\n- iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (git-fixes).\n- iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (git-fixes).\n- iommu/vt-d: Fix kdump kernels boot failure with scalable mode (git-fixes).\n- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (git-fixes).\n- iommu/vt-d: Set SRE bit only when hardware has SRS cap (git-fixes).\n- ipmi:ssif: Add check for kstrdup (git-fixes).\n- ipmi:ssif: Fix a memory leak when scanning for an adapter (git-fixes).\n- ipmi_si: fix a memleak in try_smi_init() (git-fixes).\n- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).\n- kabi/severities: Ignore newly added SRSO mitigation functions\n- kabi: Allow extra bugsints (bsc#1213927).\n- kernel-binary: Common dependencies cleanup Common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.\n- kernel-binary: Drop code for kerntypes support Kerntypes was a SUSE-specific feature dropped before SLE 12.\n- kunit: make kunit_test_timeout compatible with comment (git-fixes).\n- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false (git-fixes).\n- leds: multicolor: Use rounded division when calculating color components (git-fixes).\n- leds: pwm: Fix error code in led_pwm_create_fwnode() (git-fixes).\n- leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (git-fixes).\n- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).\n- lib/test_meminit: allocate pages up to order MAX_ORDER (git-fixes).\n- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).\n- libbpf: Fix BTF-to-C converter\u0027s padding logic (bsc#1211220 jsc#PED-3924).\n- libbpf: Fix btf_dump\u0027s packed struct determination (bsc#1211220 jsc#PED-3924).\n- libbpf: Fix single-line struct definition output in btf_dump (bsc#1211220 jsc#PED-3924).\n- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).\n- md/raid0: Factor out helper for mapping and submitting a bio (bsc#1213916).\n- md/raid0: Fix performance regression for large sequential writes (bsc#1213916).\n- media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).\n- media: cx24120: Add retval check for cx24120_message_send() (git-fixes).\n- media: dib7000p: Fix potential division by zero (git-fixes).\n- media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (git-fixes).\n- media: go7007: Remove redundant if statement (git-fixes).\n- media: i2c: ccs: Check rules is non-NULL (git-fixes).\n- media: i2c: rdacm21: Fix uninitialized value (git-fixes).\n- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).\n- media: ov2680: Add ov2680_fill_format() helper function (git-fixes).\n- media: ov2680: Do not take the lock for try_fmt calls (git-fixes).\n- media: ov2680: Fix ov2680_bayer_order() (git-fixes).\n- media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).\n- media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (git-fixes).\n- media: ov2680: Fix vflip / hflip set functions (git-fixes).\n- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).\n- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (git-fixes).\n- media: rkvdec: increase max supported height for H.264 (git-fixes).\n- media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).\n- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).\n- media: venus: hfi_venus: Only consider sys_idle_indicator on V1 (git-fixes).\n- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts (git-fixes).\n- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).\n- mkspec: Allow unsupported KMPs (bsc#1214386)\n- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).\n- mmc: block: Fix in_flight[issue_type] value error (git-fixes).\n- mmc: moxart: read scr register without changing byte order (git-fixes).\n- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).\n- module: avoid allocation if module is already present and ready (bsc#1213921).\n- module: extract patient module check into helper (bsc#1213921).\n- module: move check_modinfo() early to early_mod_check() (bsc#1213921).\n- module: move early sanity checks into a helper (bsc#1213921).\n- mtd: rawnand: brcmnand: Fix crash during the panic_write (git-fixes).\n- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).\n- mtd: rawnand: brcmnand: Fix potential false time out warning (git-fixes).\n- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (git-fixes).\n- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (git-fixes).\n- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).\n- mtd: rawnand: omap_elm: Fix incorrect type in assignment (git-fixes).\n- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (git-fixes).\n- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).\n- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).\n- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).\n- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).\n- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).\n- net: ieee802154: at86rf230: Stop leaking skb\u0027s (git-fixes).\n- net: mana: Fix MANA VF unload when hardware is unresponsive (git-fixes).\n- net: phy: at803x: remove set/get wol callbacks for AR8032 (git-fixes).\n- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).\n- net: phy: fix IRQ-based wake-on-lan over hibernate / power off (git-fixes).\n- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)\n- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (git-fixes).\n- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (git-fixes).\n- netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).\n- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946 bsc#1214404).\n- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946).\n- netfs: fix parameter of cleanup() (bsc#1214743).\n- nfsd: Remove incorrect check in nfsd4_validate_stateid (git-fixes).\n- nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (git-fixes).\n- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).\n- nvme-rdma: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- nvme-tcp: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- objtool/x86: Fix SRSO mess (git-fixes).\n- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).\n- objtool: Union instruction::{call_dest,jump_table} (git-fixes).\n- old-flavors: Drop 2.6 kernels. 2.6 based kernels are EOL, upgrading from them is no longer suported.\n- pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (git-fixes).\n- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).\n- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).\n- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).\n- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).\n- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).\n- phy: qcom-snps: Use dev_err_probe() to simplify code (git-fixes).\n- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).\n- pinctrl: amd: Mask wake bits on probe again (git-fixes).\n- pinctrl: amd: Revert \u0027pinctrl: amd: disable and mask interrupts on probe\u0027 (git-fixes).\n- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).\n- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).\n- pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).\n- platform/x86: dell-sysman: Fix reference leak (git-fixes).\n- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).\n- powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (bsc#1212091 ltc#199106).\n- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (bsc#1212091 ltc#199106).\n- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (bsc#1212091 ltc#199106).\n- powerpc/iommu: do not set failed sg dma_address to DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).\n- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).\n- powerpc/kernel/iommu: Add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).\n- powerpc/kexec: Fix build failure from uninitialised variable (bsc#1212091 ltc#199106).\n- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059 git-fixes).\n- powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).\n- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add of_node_put() before break (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Check if the default window in use before removing it (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Find existing DDW with given property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Make use of DDW for indirect mapping (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Rename \u0027direct window\u0027 to \u0027dma window\u0027 (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Replace hard-coded page shift (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091 ltc#199106).\n- powerpc/pseries: Add __init attribute to eligible functions (bsc#1212091 ltc#199106).\n- powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/pseries: Initialise CPU hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/rtas: block error injection when locked down (bsc#1023051).\n- powerpc/rtas: enture rtas_call is called with MMU enabled (bsc#1023051).\n- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).\n- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).\n- powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (bsc#1188885 ltc#193722 git-fixes).\n- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). Update config files.\n- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).\n- powerpc: fix typos in comments (bsc#1212091 ltc#199106).\n- pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).\n- pstore/ram: Check start of empty przs during init (git-fixes).\n- pwm: Add a stub for devm_pwmchip_add() (git-fixes).\n- pwm: meson: Simplify duplicated per-channel tracking (git-fixes).\n- pwm: meson: fix handling of period/duty if greater than UINT_MAX (git-fixes).\n- qed: Fix scheduling in a tasklet while getting stats (git-fixes).\n- regmap: rbtree: Use alloc_flags for memory allocations (git-fixes).\n- ring-buffer: Do not swap cpu_buffer during resize process (git-fixes).\n- ring-buffer: Fix deadloop issue on reading trace_pipe (git-fixes).\n- ring-buffer: Fix wrong stat of cpu_buffer-\u003eread (git-fixes).\n- rpm/mkspec-dtb: support for nested subdirs.\n- rpmsg: glink: Add check for kstrdup (git-fixes).\n- rt: Add helper script to refresh RT configs based on the parent (SLE Realtime Extension).\n- s390/ipl: add missing secure/has_secure file to ipl type \u0027unknown\u0027 (bsc#1214976).\n- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).\n- s390/zcrypt: fix reply buffer calculations for CCA replies (bsc#1213949).\n- sched/fair: Fix inaccurate tally of ttwu_move_affine (git fixes).\n- sched/fair: Use recent_used_cpu to test p-\u003ecpus_ptr (git fixes).\n- sched/psi: use kernfs polling functions for PSI trigger polling (bsc#1209799).\n- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes).\n- scsi: 53c700: Check that command slot is not NULL (git-fixes).\n- scsi: RDMA/srp: Fix residual handling (git-fixes)\n- scsi: bsg: Increase number of devices (bsc#1210048).\n- scsi: core: Do not wait for quiesce in scsi_device_block() (bsc#1209284).\n- scsi: core: Do not wait for quiesce in scsi_stop_queue() (bsc#1209284).\n- scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes).\n- scsi: core: Fix possible memory leak if device_add() fails (git-fixes).\n- scsi: core: Improve warning message in scsi_device_block() (bsc#1209284).\n- scsi: core: Merge scsi_internal_device_block() and device_block() (bsc#1209284).\n- scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes).\n- scsi: qedf: Fix NULL dereference in error handling (git-fixes).\n- scsi: qedf: Fix firmware halt over suspend and resume (git-fixes).\n- scsi: qedi: Fix firmware halt over suspend and resume (git-fixes).\n- scsi: scsi_debug: Remove dead code (git-fixes).\n- scsi: sg: Increase number of devices (bsc#1210048).\n- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).\n- scsi: snic: Fix possible memory leak if device_add() fails (git-fixes).\n- scsi: storvsc: Always set no_report_opcodes (git-fixes).\n- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (git-fixes).\n- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).\n- scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (git-fixes).\n- scsi: zfcp: Defer fc_rport blocking until after ADISC response (git-fixes bsc#1214371).\n- selftests/bpf: Test btf dump for struct with padding only fields (bsc#1211220 jsc#PED-3924).\n- selftests/futex: Order calls to futex_lock_pi (git-fixes).\n- selftests/harness: Actually report SKIP for signal tests (git-fixes).\n- selftests/resctrl: Close perf value read fd on errors (git-fixes).\n- selftests/resctrl: Do not leak buffer in fill_cache() (git-fixes).\n- selftests/resctrl: Unmount resctrl FS if child fails to run benchmark (git-fixes).\n- selftests/rseq: check if libc rseq support is registered (git-fixes).\n- selftests: forwarding: Add a helper to skip test when using veth pairs (git-fixes).\n- selftests: forwarding: Skip test when no interfaces are specified (git-fixes).\n- selftests: forwarding: Switch off timeout (git-fixes).\n- selftests: forwarding: ethtool: Skip when using veth pairs (git-fixes).\n- selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (git-fixes).\n- selftests: forwarding: tc_actions: Use ncat instead of nc (git-fixes).\n- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).\n- selftests: forwarding: tc_flower: Relax success criterion (git-fixes).\n- selftests: mirror_gre_changes: Tighten up the TTL test match (git-fixes).\n- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).\n- serial: sc16is7xx: fix bug when first setting GPIO direction (git-fixes).\n- serial: sprd: Assign sprd_port after initialized to avoid wrong access (git-fixes).\n- serial: sprd: Fix DMA buffer leak issue (git-fixes).\n- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).\n- sfc: fix crash when reading stats while NIC is resetting (git-fixes).\n- smb3: Do not send lease break acknowledgment if all file handles have been closed (git-fixes).\n- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request (bsc#1193629).\n- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).\n- smb: client: fix dfs link mount against w2k8 (bsc#1212142).\n- smb: client: fix null auth (git-fixes).\n- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).\n- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).\n- soundwire: fix enumeration completion (git-fixes).\n- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).\n- supported.conf: fix typos for -!optional markers\n- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).\n- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).\n- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).\n- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).\n- target_core_rbd: remove snapshot existence validation code (bsc#1212857).\n- thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).\n- timers: Add shutdown mechanism to the internal functions (bsc#1213970).\n- timers: Provide timer_shutdown[_sync]() (bsc#1213970).\n- timers: Rename del_timer() to timer_delete() (bsc#1213970).\n- timers: Rename del_timer_sync() to timer_delete_sync() (bsc#1213970).\n- timers: Replace BUG_ON()s (bsc#1213970).\n- timers: Silently ignore timers with a NULL function (bsc#1213970).\n- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).\n- timers: Update kernel-doc for various functions (bsc#1213970).\n- timers: Use del_timer_sync() even on UP (bsc#1213970).\n- tracing/histograms: Add histograms to hist_vars if they have referenced variables (git-fixes).\n- tracing/histograms: Return an error if we fail to add histogram to hist_vars list (git-fixes).\n- tracing/probes: Fix not to count error code to total length (git-fixes).\n- tracing/probes: Fix to avoid double count of the string length on the array (git-fixes).\n- tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).\n- tracing/probes: Fix to update dynamic data counter if fetcharg uses it (git-fixes).\n- tracing: Fix cpu buffers unavailable due to \u0027record_disabled\u0027 missed (git-fixes).\n- tracing: Fix memleak due to race between current_tracer and trace (git-fixes).\n- tracing: Fix memory leak of iter-\u003etemp when reading trace_pipe (git-fixes).\n- tracing: Fix null pointer dereference in tracing_err_log_open() (git-fixes).\n- tracing: Fix warning in trace_buffered_event_disable() (git-fixes).\n- tty: fix hang on tty device with no_room set (git-fixes).\n- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (git-fixes).\n- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).\n- tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (git-fixes).\n- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).\n- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (git-fixes).\n- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).\n- usb-storage: alauda: Fix uninit-value in alauda_check_media() (git-fixes).\n- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (git-fixes).\n- usb: chipidea: imx: do not request QoS for imx8ulp (git-fixes).\n- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).\n- usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (git-fixes).\n- usb: dwc3: Fix typos in gadget.c (git-fixes).\n- usb: dwc3: Properly handle processing of pending events (git-fixes).\n- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).\n- usb: gadget: Fix the memory leak in raw_gadget driver (git-fixes).\n- usb: gadget: f_mass_storage: Fix unused variable warning (git-fixes).\n- usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (git-fixes).\n- usb: ohci-at91: Fix the unhandle interrupt when resume (git-fixes).\n- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).\n- usb: quirks: add quirk for Focusrite Scarlett (git-fixes).\n- usb: serial: option: add Quectel EC200A module support (git-fixes).\n- usb: serial: option: support Quectel EM060K_128 (git-fixes).\n- usb: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).\n- usb: serial: simple: sort driver entries (git-fixes).\n- usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment (git-fixes).\n- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).\n- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).\n- usb: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).\n- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (git-fixes).\n- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).\n- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).\n- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).\n- wifi: ath9k: protect WMI command response buffer replacement with a lock (git-fixes).\n- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).\n- wifi: cfg80211: Fix return value in scan logic (git-fixes).\n- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (git-fixes).\n- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (git-fixes).\n- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).\n- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).\n- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).\n- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH (git-fixes).\n- wifi: mwifiex: Fix OOB and integer underflow when rx packets (git-fixes).\n- wifi: mwifiex: Fix missed return in oob checks failed path (git-fixes).\n- wifi: mwifiex: avoid possible NULL skb pointer dereference (git-fixes).\n- wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (git-fixes).\n- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).\n- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute (git-fixes).\n- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).\n- wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).\n- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).\n- x86/alternative: Make custom return thunk unconditional (git-fixes).\n- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).\n- x86/cpu: Clean up SRSO return thunk mess (git-fixes).\n- x86/cpu: Cleanup the untrain mess (git-fixes).\n- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).\n- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).\n- x86/cpu: Rename original retbleed methods (git-fixes).\n- x86/cpu: Rename srso_(.*)_alias to srso_alias_\\1 (git-fixes).\n- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).\n- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).\n- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).\n- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).\n- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).\n- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).\n- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).\n- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).\n- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).\n- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).\n- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes).\n- x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes).\n- x86/speculation: Add cpu_show_gds() prototype (git-fixes).\n- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).\n- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).\n- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).\n- x86/srso: Explain the untraining sequences a bit more (git-fixes).\n- x86/srso: Fix build breakage with the LLVM linker (git-fixes).\n- x86/srso: Fix return thunks in generated code (git-fixes).\n- x86/static_call: Fix __static_call_fixup() (git-fixes).\n- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).\n- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).\n- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).\n- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).\n- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).\n- xfs: fix sb write verify for lazysbcount (bsc#1214661).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2023-3599,SUSE-SLE-Module-Live-Patching-15-SP5-2023-3599,SUSE-SLE-Module-RT-15-SP5-2023-3599,openSUSE-SLE-15.5-2023-3599",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_3599-2.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2023:3599-2",
"url": "https://www.suse.com/support/update/announcement/2023/suse-su-20233599-2/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2023:3599-2",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-September/016283.html"
},
{
"category": "self",
"summary": "SUSE Bug 1023051",
"url": "https://bugzilla.suse.com/1023051"
},
{
"category": "self",
"summary": "SUSE Bug 1120059",
"url": "https://bugzilla.suse.com/1120059"
},
{
"category": "self",
"summary": "SUSE Bug 1177719",
"url": "https://bugzilla.suse.com/1177719"
},
{
"category": "self",
"summary": "SUSE Bug 1188885",
"url": "https://bugzilla.suse.com/1188885"
},
{
"category": "self",
"summary": "SUSE Bug 1193629",
"url": "https://bugzilla.suse.com/1193629"
},
{
"category": "self",
"summary": "SUSE Bug 1194869",
"url": "https://bugzilla.suse.com/1194869"
},
{
"category": "self",
"summary": "SUSE Bug 1203329",
"url": "https://bugzilla.suse.com/1203329"
},
{
"category": "self",
"summary": "SUSE Bug 1203330",
"url": "https://bugzilla.suse.com/1203330"
},
{
"category": "self",
"summary": "SUSE Bug 1205462",
"url": "https://bugzilla.suse.com/1205462"
},
{
"category": "self",
"summary": "SUSE Bug 1206453",
"url": "https://bugzilla.suse.com/1206453"
},
{
"category": "self",
"summary": "SUSE Bug 1208902",
"url": "https://bugzilla.suse.com/1208902"
},
{
"category": "self",
"summary": "SUSE Bug 1208949",
"url": "https://bugzilla.suse.com/1208949"
},
{
"category": "self",
"summary": "SUSE Bug 1209284",
"url": "https://bugzilla.suse.com/1209284"
},
{
"category": "self",
"summary": "SUSE Bug 1209799",
"url": "https://bugzilla.suse.com/1209799"
},
{
"category": "self",
"summary": "SUSE Bug 1210048",
"url": "https://bugzilla.suse.com/1210048"
},
{
"category": "self",
"summary": "SUSE Bug 1210448",
"url": "https://bugzilla.suse.com/1210448"
},
{
"category": "self",
"summary": "SUSE Bug 1211220",
"url": "https://bugzilla.suse.com/1211220"
},
{
"category": "self",
"summary": "SUSE Bug 1212091",
"url": "https://bugzilla.suse.com/1212091"
},
{
"category": "self",
"summary": "SUSE Bug 1212142",
"url": "https://bugzilla.suse.com/1212142"
},
{
"category": "self",
"summary": "SUSE Bug 1212423",
"url": "https://bugzilla.suse.com/1212423"
},
{
"category": "self",
"summary": "SUSE Bug 1212526",
"url": "https://bugzilla.suse.com/1212526"
},
{
"category": "self",
"summary": "SUSE Bug 1212857",
"url": "https://bugzilla.suse.com/1212857"
},
{
"category": "self",
"summary": "SUSE Bug 1212873",
"url": "https://bugzilla.suse.com/1212873"
},
{
"category": "self",
"summary": "SUSE Bug 1213026",
"url": "https://bugzilla.suse.com/1213026"
},
{
"category": "self",
"summary": "SUSE Bug 1213123",
"url": "https://bugzilla.suse.com/1213123"
},
{
"category": "self",
"summary": "SUSE Bug 1213546",
"url": "https://bugzilla.suse.com/1213546"
},
{
"category": "self",
"summary": "SUSE Bug 1213580",
"url": "https://bugzilla.suse.com/1213580"
},
{
"category": "self",
"summary": "SUSE Bug 1213601",
"url": "https://bugzilla.suse.com/1213601"
},
{
"category": "self",
"summary": "SUSE Bug 1213666",
"url": "https://bugzilla.suse.com/1213666"
},
{
"category": "self",
"summary": "SUSE Bug 1213733",
"url": "https://bugzilla.suse.com/1213733"
},
{
"category": "self",
"summary": "SUSE Bug 1213757",
"url": "https://bugzilla.suse.com/1213757"
},
{
"category": "self",
"summary": "SUSE Bug 1213759",
"url": "https://bugzilla.suse.com/1213759"
},
{
"category": "self",
"summary": "SUSE Bug 1213916",
"url": "https://bugzilla.suse.com/1213916"
},
{
"category": "self",
"summary": "SUSE Bug 1213921",
"url": "https://bugzilla.suse.com/1213921"
},
{
"category": "self",
"summary": "SUSE Bug 1213927",
"url": "https://bugzilla.suse.com/1213927"
},
{
"category": "self",
"summary": "SUSE Bug 1213946",
"url": "https://bugzilla.suse.com/1213946"
},
{
"category": "self",
"summary": "SUSE Bug 1213949",
"url": "https://bugzilla.suse.com/1213949"
},
{
"category": "self",
"summary": "SUSE Bug 1213968",
"url": "https://bugzilla.suse.com/1213968"
},
{
"category": "self",
"summary": "SUSE Bug 1213970",
"url": "https://bugzilla.suse.com/1213970"
},
{
"category": "self",
"summary": "SUSE Bug 1213971",
"url": "https://bugzilla.suse.com/1213971"
},
{
"category": "self",
"summary": "SUSE Bug 1214000",
"url": "https://bugzilla.suse.com/1214000"
},
{
"category": "self",
"summary": "SUSE Bug 1214019",
"url": "https://bugzilla.suse.com/1214019"
},
{
"category": "self",
"summary": "SUSE Bug 1214073",
"url": "https://bugzilla.suse.com/1214073"
},
{
"category": "self",
"summary": "SUSE Bug 1214120",
"url": "https://bugzilla.suse.com/1214120"
},
{
"category": "self",
"summary": "SUSE Bug 1214149",
"url": "https://bugzilla.suse.com/1214149"
},
{
"category": "self",
"summary": "SUSE Bug 1214180",
"url": "https://bugzilla.suse.com/1214180"
},
{
"category": "self",
"summary": "SUSE Bug 1214233",
"url": "https://bugzilla.suse.com/1214233"
},
{
"category": "self",
"summary": "SUSE Bug 1214238",
"url": "https://bugzilla.suse.com/1214238"
},
{
"category": "self",
"summary": "SUSE Bug 1214285",
"url": "https://bugzilla.suse.com/1214285"
},
{
"category": "self",
"summary": "SUSE Bug 1214297",
"url": "https://bugzilla.suse.com/1214297"
},
{
"category": "self",
"summary": "SUSE Bug 1214299",
"url": "https://bugzilla.suse.com/1214299"
},
{
"category": "self",
"summary": "SUSE Bug 1214305",
"url": "https://bugzilla.suse.com/1214305"
},
{
"category": "self",
"summary": "SUSE Bug 1214350",
"url": "https://bugzilla.suse.com/1214350"
},
{
"category": "self",
"summary": "SUSE Bug 1214368",
"url": "https://bugzilla.suse.com/1214368"
},
{
"category": "self",
"summary": "SUSE Bug 1214370",
"url": "https://bugzilla.suse.com/1214370"
},
{
"category": "self",
"summary": "SUSE Bug 1214371",
"url": "https://bugzilla.suse.com/1214371"
},
{
"category": "self",
"summary": "SUSE Bug 1214372",
"url": "https://bugzilla.suse.com/1214372"
},
{
"category": "self",
"summary": "SUSE Bug 1214380",
"url": "https://bugzilla.suse.com/1214380"
},
{
"category": "self",
"summary": "SUSE Bug 1214386",
"url": "https://bugzilla.suse.com/1214386"
},
{
"category": "self",
"summary": "SUSE Bug 1214392",
"url": "https://bugzilla.suse.com/1214392"
},
{
"category": "self",
"summary": "SUSE Bug 1214393",
"url": "https://bugzilla.suse.com/1214393"
},
{
"category": "self",
"summary": "SUSE Bug 1214397",
"url": "https://bugzilla.suse.com/1214397"
},
{
"category": "self",
"summary": "SUSE Bug 1214404",
"url": "https://bugzilla.suse.com/1214404"
},
{
"category": "self",
"summary": "SUSE Bug 1214428",
"url": "https://bugzilla.suse.com/1214428"
},
{
"category": "self",
"summary": "SUSE Bug 1214451",
"url": "https://bugzilla.suse.com/1214451"
},
{
"category": "self",
"summary": "SUSE Bug 1214659",
"url": "https://bugzilla.suse.com/1214659"
},
{
"category": "self",
"summary": "SUSE Bug 1214661",
"url": "https://bugzilla.suse.com/1214661"
},
{
"category": "self",
"summary": "SUSE Bug 1214727",
"url": "https://bugzilla.suse.com/1214727"
},
{
"category": "self",
"summary": "SUSE Bug 1214729",
"url": "https://bugzilla.suse.com/1214729"
},
{
"category": "self",
"summary": "SUSE Bug 1214742",
"url": "https://bugzilla.suse.com/1214742"
},
{
"category": "self",
"summary": "SUSE Bug 1214743",
"url": "https://bugzilla.suse.com/1214743"
},
{
"category": "self",
"summary": "SUSE Bug 1214756",
"url": "https://bugzilla.suse.com/1214756"
},
{
"category": "self",
"summary": "SUSE Bug 1214976",
"url": "https://bugzilla.suse.com/1214976"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-38457 page",
"url": "https://www.suse.com/security/cve/CVE-2022-38457/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-40133 page",
"url": "https://www.suse.com/security/cve/CVE-2022-40133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2007 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2007/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-20588 page",
"url": "https://www.suse.com/security/cve/CVE-2023-20588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-34319 page",
"url": "https://www.suse.com/security/cve/CVE-2023-34319/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-3610 page",
"url": "https://www.suse.com/security/cve/CVE-2023-3610/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-37453 page",
"url": "https://www.suse.com/security/cve/CVE-2023-37453/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-3772 page",
"url": "https://www.suse.com/security/cve/CVE-2023-3772/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-3863 page",
"url": "https://www.suse.com/security/cve/CVE-2023-3863/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-40283 page",
"url": "https://www.suse.com/security/cve/CVE-2023-40283/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4128 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4128/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4133 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4134 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4147 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4147/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4194 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4194/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4273 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4273/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4387 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4387/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4459 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4459/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4563 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4563/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4569 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4569/"
}
],
"title": "Security update for the Linux Kernel",
"tracking": {
"current_release_date": "2023-09-21T10:18:23Z",
"generator": {
"date": "2023-09-21T10:18:23Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2023:3599-2",
"initial_release_date": "2023-09-21T10:18:23Z",
"revision_history": [
{
"date": "2023-09-21T10:18:23Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64",
"product": {
"name": "kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64",
"product_id": "kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Live Patching 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Live Patching 15 SP5",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-live-patching:15:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP5",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
},
"product_reference": "kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 15 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-38457",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-38457"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free(UAF) vulnerability was found in function \u0027vmw_cmd_res_check\u0027 in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel\u0027s vmwgfx driver with device file \u0027/dev/dri/renderD128 (or Dxxx)\u0027. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-38457",
"url": "https://www.suse.com/security/cve/CVE-2022-38457"
},
{
"category": "external",
"summary": "SUSE Bug 1203330 for CVE-2022-38457",
"url": "https://bugzilla.suse.com/1203330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2022-38457"
},
{
"cve": "CVE-2022-40133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-40133"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free(UAF) vulnerability was found in function \u0027vmw_execbuf_tie_context\u0027 in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel\u0027s vmwgfx driver with device file \u0027/dev/dri/renderD128 (or Dxxx)\u0027. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-40133",
"url": "https://www.suse.com/security/cve/CVE-2022-40133"
},
{
"category": "external",
"summary": "SUSE Bug 1203329 for CVE-2022-40133",
"url": "https://bugzilla.suse.com/1203329"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2022-40133"
},
{
"cve": "CVE-2023-2007",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2007"
}
],
"notes": [
{
"category": "general",
"text": "The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2007",
"url": "https://www.suse.com/security/cve/CVE-2023-2007"
},
{
"category": "external",
"summary": "SUSE Bug 1210448 for CVE-2023-2007",
"url": "https://bugzilla.suse.com/1210448"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-2007"
},
{
"cve": "CVE-2023-20588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-20588"
}
],
"notes": [
{
"category": "general",
"text": "\nA division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. \n\n\n\n\n\n\n\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-20588",
"url": "https://www.suse.com/security/cve/CVE-2023-20588"
},
{
"category": "external",
"summary": "SUSE Bug 1213927 for CVE-2023-20588",
"url": "https://bugzilla.suse.com/1213927"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-20588"
},
{
"cve": "CVE-2023-34319",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-34319"
}
],
"notes": [
{
"category": "general",
"text": "The fix for XSA-423 added logic to Linux\u0027es netback driver to deal with\na frontend splitting a packet in a way such that not all of the headers\nwould come in one piece. Unfortunately the logic introduced there\ndidn\u0027t account for the extreme case of the entire packet being split\ninto as many pieces as permitted by the protocol, yet still being\nsmaller than the area that\u0027s specially dealt with to keep all (possible)\nheaders together. Such an unusual packet would therefore trigger a\nbuffer overrun in the driver.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-34319",
"url": "https://www.suse.com/security/cve/CVE-2023-34319"
},
{
"category": "external",
"summary": "SUSE Bug 1213546 for CVE-2023-34319",
"url": "https://bugzilla.suse.com/1213546"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-34319"
},
{
"cve": "CVE-2023-3610",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-3610"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability in the Linux kernel\u0027s netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nFlaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.\n\nWe recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-3610",
"url": "https://www.suse.com/security/cve/CVE-2023-3610"
},
{
"category": "external",
"summary": "SUSE Bug 1213580 for CVE-2023-3610",
"url": "https://bugzilla.suse.com/1213580"
},
{
"category": "external",
"summary": "SUSE Bug 1213584 for CVE-2023-3610",
"url": "https://bugzilla.suse.com/1213584"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "important"
}
],
"title": "CVE-2023-3610"
},
{
"cve": "CVE-2023-37453",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-37453"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-37453",
"url": "https://www.suse.com/security/cve/CVE-2023-37453"
},
{
"category": "external",
"summary": "SUSE Bug 1213123 for CVE-2023-37453",
"url": "https://bugzilla.suse.com/1213123"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-37453"
},
{
"cve": "CVE-2023-3772",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-3772"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-3772",
"url": "https://www.suse.com/security/cve/CVE-2023-3772"
},
{
"category": "external",
"summary": "SUSE Bug 1213666 for CVE-2023-3772",
"url": "https://bugzilla.suse.com/1213666"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-3772"
},
{
"cve": "CVE-2023-3863",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-3863"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-3863",
"url": "https://www.suse.com/security/cve/CVE-2023-3863"
},
{
"category": "external",
"summary": "SUSE Bug 1213601 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1213601"
},
{
"category": "external",
"summary": "SUSE Bug 1213603 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1213603"
},
{
"category": "external",
"summary": "SUSE Bug 1217444 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1217444"
},
{
"category": "external",
"summary": "SUSE Bug 1217531 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1217531"
},
{
"category": "external",
"summary": "SUSE Bug 1219704 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1219704"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-3863"
},
{
"cve": "CVE-2023-40283",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-40283"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-40283",
"url": "https://www.suse.com/security/cve/CVE-2023-40283"
},
{
"category": "external",
"summary": "SUSE Bug 1214233 for CVE-2023-40283",
"url": "https://bugzilla.suse.com/1214233"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-40283"
},
{
"cve": "CVE-2023-4128",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4128"
}
],
"notes": [
{
"category": "general",
"text": "** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Reason: This record is a duplicate of CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Notes: All CVE users should reference CVE-2023-4206, CVE-2023-4207, CVE-2023-4208 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4128",
"url": "https://www.suse.com/security/cve/CVE-2023-4128"
},
{
"category": "external",
"summary": "SUSE Bug 1214149 for CVE-2023-4128",
"url": "https://bugzilla.suse.com/1214149"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "important"
}
],
"title": "CVE-2023-4128"
},
{
"cve": "CVE-2023-4133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4133"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug occurs when the cxgb4 device is detaching due to a possible rearming of the flower_stats_timer from the work queue. This flaw allows a local user to crash the system, causing a denial of service condition.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4133",
"url": "https://www.suse.com/security/cve/CVE-2023-4133"
},
{
"category": "external",
"summary": "SUSE Bug 1213970 for CVE-2023-4133",
"url": "https://bugzilla.suse.com/1213970"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-4133"
},
{
"cve": "CVE-2023-4134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4134"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel. This issue occurs in the device cleanup routine due to a possible rearming of the watchdog_timer from the workqueue. This could allow a local user to crash the system, causing a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4134",
"url": "https://www.suse.com/security/cve/CVE-2023-4134"
},
{
"category": "external",
"summary": "SUSE Bug 1213971 for CVE-2023-4134",
"url": "https://bugzilla.suse.com/1213971"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-4134"
},
{
"cve": "CVE-2023-4147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4147"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free flaw was found in the Linux kernel\u0027s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4147",
"url": "https://www.suse.com/security/cve/CVE-2023-4147"
},
{
"category": "external",
"summary": "SUSE Bug 1213968 for CVE-2023-4147",
"url": "https://bugzilla.suse.com/1213968"
},
{
"category": "external",
"summary": "SUSE Bug 1215118 for CVE-2023-4147",
"url": "https://bugzilla.suse.com/1215118"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "important"
}
],
"title": "CVE-2023-4147"
},
{
"cve": "CVE-2023-4194",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4194"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 (\"tun: tun_chr_open(): correctly initialize socket uid\"), - 66b2c338adce (\"tap: tap_open(): correctly initialize socket uid\"), pass \"inode-\u003ei_uid\" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4194",
"url": "https://www.suse.com/security/cve/CVE-2023-4194"
},
{
"category": "external",
"summary": "SUSE Bug 1214019 for CVE-2023-4194",
"url": "https://bugzilla.suse.com/1214019"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-4194"
},
{
"cve": "CVE-2023-4273",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4273"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file name reconstruction function, which is responsible for reading file name entries from a directory index and merging file name parts belonging to one file into a single long file name. Since the file name characters are copied into a stack variable, a local privileged attacker could use this flaw to overflow the kernel stack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4273",
"url": "https://www.suse.com/security/cve/CVE-2023-4273"
},
{
"category": "external",
"summary": "SUSE Bug 1214120 for CVE-2023-4273",
"url": "https://bugzilla.suse.com/1214120"
},
{
"category": "external",
"summary": "SUSE Bug 1214123 for CVE-2023-4273",
"url": "https://bugzilla.suse.com/1214123"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "important"
}
],
"title": "CVE-2023-4273"
},
{
"cve": "CVE-2023-4387",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4387"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware\u0027s vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash the system due to a double-free while cleaning up vmxnet3_rq_cleanup_all, which could also lead to a kernel information leak problem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4387",
"url": "https://www.suse.com/security/cve/CVE-2023-4387"
},
{
"category": "external",
"summary": "SUSE Bug 1214350 for CVE-2023-4387",
"url": "https://bugzilla.suse.com/1214350"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-4387"
},
{
"cve": "CVE-2023-4459",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4459"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during cleanup.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4459",
"url": "https://www.suse.com/security/cve/CVE-2023-4459"
},
{
"category": "external",
"summary": "SUSE Bug 1214451 for CVE-2023-4459",
"url": "https://bugzilla.suse.com/1214451"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-4459"
},
{
"cve": "CVE-2023-4563",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4563"
}
],
"notes": [
{
"category": "general",
"text": "This was assigned as a duplicate of CVE-2023-4244.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4563",
"url": "https://www.suse.com/security/cve/CVE-2023-4563"
},
{
"category": "external",
"summary": "SUSE Bug 1214727 for CVE-2023-4563",
"url": "https://bugzilla.suse.com/1214727"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "moderate"
}
],
"title": "CVE-2023-4563"
},
{
"cve": "CVE-2023-4569",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4569"
}
],
"notes": [
{
"category": "general",
"text": "A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to cause double-deactivations of catchall elements, which can result in a memory leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4569",
"url": "https://www.suse.com/security/cve/CVE-2023-4569"
},
{
"category": "external",
"summary": "SUSE Bug 1214729 for CVE-2023-4569",
"url": "https://bugzilla.suse.com/1214729"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_14-rt-1-150500.11.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:23Z",
"details": "important"
}
],
"title": "CVE-2023-4569"
}
]
}
SUSE-SU-2023:3600-1
Vulnerability from csaf_suse - Published: 2023-09-21 10:18 - Updated: 2023-09-21 10:18Summary
Security update for the Linux Kernel
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel
Description of the patch:
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).
- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).
- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).
- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).
- CVE-2023-37453: Fixed oversight in SuperSpeed initialization (bsc#1213123).
- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).
- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).
- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).
- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).
- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).
- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).
- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).
- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).
- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).
- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).
- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).
The following non-security bugs were fixed:
- acpi: processor: perflib: avoid updating frequency qos unnecessarily (git-fixes).
- acpi: processor: perflib: use the 'no limit' frequency qos (git-fixes).
- acpi: x86: s2idle: fix a logic error parsing amd constraints table (git-fixes).
- alsa: ac97: fix possible error value of *rac97 (git-fixes).
- alsa: hda/cs8409: support new dell dolphin variants (git-fixes).
- alsa: hda/realtek - remodified 3k pull low procedure (git-fixes).
- alsa: hda/realtek: add quirk for hp victus 16-d1xxx to enable mute led (git-fixes).
- alsa: hda/realtek: add quirk for mute leds on hp envy x360 15-eu0xxx (git-fixes).
- alsa: hda/realtek: add quirks for hp g11 laptops (git-fixes).
- alsa: hda/realtek: switch dell oasis models to use spi (git-fixes).
- alsa: pcm: fix missing fixup call in compat hw_refine ioctl (git-fixes).
- alsa: usb-audio: add support for mythware xa001au capture and playback interfaces (git-fixes).
- alsa: usb-audio: fix init call orders for uac1 (git-fixes).
- alsa: ymfpci: fix the missing snd_card_free() call at probe error (git-fixes).
- amba: bus: fix refcount leak (git-fixes).
- arm64: dts: imx8mn-var-som: add missing pull-up for onboard phy reset pinmux (git-fixes).
- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).
- arm64: dts: rockchip: disable hs400 for emmc on rock pi 4 (git-fixes).
- arm: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix usb related warnings (git-fixes).
- arm: dts: imx6sll: fixup of operating points (git-fixes).
- arm: spear: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- asoc: lower 'no backend dais enabled for ... port' log severity (git-fixes).
- asoc: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).
- asoc: rt5665: add missed regulator_bulk_disable (git-fixes).
- asoc: sof: intel: fix soundwire/hdaudio mutual exclusion (git-fixes).
- asoc: stac9766: fix build errors with regmap_ac97 (git-fixes).
- asoc: tegra: fix sfc conversion for few rates (git-fixes).
- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).
- backlight/bd6107: compare against struct fb_info.device (git-fixes).
- backlight/gpio_backlight: compare against struct fb_info.device (git-fixes).
- backlight/lv5207lp: compare against struct fb_info.device (git-fixes).
- batman-adv: do not get eth header before batadv_check_management_packet (git-fixes).
- batman-adv: do not increase mtu when set by user (git-fixes).
- batman-adv: fix batadv_v_ogm_aggr_send memory leak (git-fixes).
- batman-adv: fix tt global entry leak when client roamed back (git-fixes).
- batman-adv: hold rtnl lock during mtu update via netlink (git-fixes).
- batman-adv: trigger events for auto adjusted mtu (git-fixes).
- bluetooth: btusb: add mt7922 bluetooth id for the asus ally (git-fixes).
- bluetooth: btusb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- bluetooth: fix potential use-after-free when clear keys (git-fixes).
- bluetooth: l2cap: fix use-after-free (git-fixes).
- bluetooth: l2cap: fix use-after-free in l2cap_sock_ready_cb (git-fixes).
- bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).
- bluetooth: remove unused declaration amp_read_loc_info() (git-fixes).
- bnx2x: fix page fault following eeh recovery (bsc#1214299).
- bpf: disable preemption in bpf_event_output (git-fixes).
- bus: ti-sysc: fix build warning for 64-bit build (git-fixes).
- bus: ti-sysc: fix cast to enum warning (git-fixes).
- bus: ti-sysc: flush posted write on enable before reset (git-fixes).
- can: gs_usb: gs_usb_receive_bulk_callback(): count rx overflow errors also in case of oom (git-fixes).
- ceph: defer stopping mdsc delayed_work (bsc#1214392).
- ceph: do not check for quotas on mds stray dirs (bsc#1214238).
- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).
- check-for-config-changes: ignore builtin_return_address_strips_pac (bsc#1214380). gcc7 on sle 15 does not support this while later gcc does.
- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).
- cifs: allow dumping keys for directories too (bsc#1193629).
- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).
- cifs: if deferred close is disabled then close files immediately (git-fixes).
- cifs: is_network_name_deleted should return a bool (bsc#1193629).
- cifs: update internal module version number for cifs.ko (bsc#1193629).
- clk: fix slab-out-of-bounds error in devm_clk_release() (git-fixes).
- clk: fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes).
- clk: imx8mp: fix sai4 clock (git-fixes).
- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).
- clk: imx: pll14xx: dynamically configure pll for 393216000/361267200hz (git-fixes).
- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).
- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).
- clk: qcom: gcc-sc7180: fix up gcc_sdcc2_apps_clk_src (git-fixes).
- clk: qcom: gcc-sm8250: fix gcc_sdcc2_apps_clk_src (git-fixes).
- clk: sunxi-ng: modify mismatched function name (git-fixes).
- clocksource/drivers/arm_arch_timer: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource/drivers/sp804: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- config_nvme_verbose_errors=y gone with a82baa8083b
- config_printk_safe_log_buf_shift=13 gone with 7e152d55123
- cpu/smt: allow enabling partial smt states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: move smt prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpufreq: fix the race condition while updating the transition_task of policy (git-fixes).
- cpufreq: intel_pstate: adjust balance_performance epp for sapphire rapids (bsc#1214659).
- cpufreq: intel_pstate: enable hwp io boost for all servers (bsc#1208949 jsc#ped-6003 jsc#ped-6004).
- cpufreq: intel_pstate: fix scaling for hybrid-capable systems with disabled e-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- cpufreq: intel_pstate: hybrid: rework hwp calibration (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- cpufreq: intel_pstate: hybrid: use known scaling factor for p-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- cpufreq: intel_pstate: read all msrs on the target cpu (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- created new preempt kernel flavor configs are cloned from the respective $arch/default configs. all changed configs appart from config_preempt->y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. tree_rcu has been also changed to preempt_rcu which is the default implementation for preempt kernel.
- crypto: caam - fix unchecked return value error (git-fixes).
- crypto: stm32 - properly handle pm_runtime_get failing (git-fixes).
- dma-buf/sw_sync: avoid recursive lock during fence signal (git-fixes).
- dma-buf/sync_file: fix docs syntax (git-fixes).
- dmaengine: idxd: modify the dependence of attribute pasid_enabled (git-fixes).
- dmaengine: mcf-edma: fix a potential un-allocated memory access (git-fixes).
- dmaengine: pl330: return dma_paused when transaction is paused (git-fixes).
- dmaengine: ste_dma40: add missing irq check in d40_probe (git-fixes).
- docs/process/howto: replace c89 with c11 (bsc#1214756).
- docs: kernel-parameters: refer to the correct bitmap function (git-fixes).
- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).
- docs: printk-formats: fix hex printing of signed values (git-fixes).
- documentation: devices.txt: fix minors for ttycpm* (git-fixes).
- documentation: devices.txt: remove ttyioc* (git-fixes).
- documentation: devices.txt: remove ttysioc* (git-fixes).
- driver core: test_async: fix an error code (git-fixes).
- drivers: clk: keystone: fix parameter judgment in _of_pll_clk_init() (git-fixes).
- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).
- drm/amd/display: check attr flag before set cursor degamma on dcn3+ (git-fixes).
- drm/amd/display: check tg is non-null before checking if enabled (git-fixes).
- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).
- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).
- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).
- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).
- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).
- drm/amdgpu: fix potential fence use-after-free v2 (git-fixes).
- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).
- drm/amdgpu: use rmw accessors for changing lnkctl (git-fixes).
- drm/armada: fix off-by-one error in armada_overlay_get_property() (git-fixes).
- drm/ast: fix dram init on ast2200 (git-fixes).
- drm/atomic-helper: update reference to drm_crtc_force_disable_all() (git-fixes).
- drm/bridge: anx7625: drop device lock before drm_helper_hpd_irq_event() (git-fixes).
- drm/bridge: fix -wunused-const-variable= warning (git-fixes).
- drm/bridge: tc358764: fix debug print parameter order (git-fixes).
- drm/etnaviv: fix dumping of active mmu context (git-fixes).
- drm/mediatek: fix dereference before null check (git-fixes).
- drm/mediatek: fix potential memory leak if vmap() fail (git-fixes).
- drm/msm/a2xx: call adreno_gpu_init() earlier (git-fixes).
- drm/msm/mdp5: do not leak some plane state (git-fixes).
- drm/msm: update dev core dump to not print backwards (git-fixes).
- drm/nouveau/disp: revert a null check inside nouveau_connector_get_modes (git-fixes).
- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).
- drm/panel: simple: add missing connector type and pixel format for auo t215hvn01 (git-fixes).
- drm/panel: simple: fix auo g121ean01 panel timings according to the docs (git-fixes).
- drm/qxl: fix uaf on handle creation (git-fixes).
- drm/radeon: use rmw accessors for changing lnkctl (git-fixes).
- drm/rockchip: do not spam logs in atomic check (git-fixes).
- drm/shmem-helper: reset vma->vm_ops before calling dma_buf_mmap() (git-fixes).
- drm/tegra: dpaux: fix incorrect return value of platform_get_irq (git-fixes).
- drm/ttm: check null pointer before accessing when swapping (git-fixes).
- drm/ttm: never consider pinned bos for eviction&swap (git-fixes).
- drm/vmwgfx: fix shader stage validation (git-fixes).
- drm: adv7511: fix low refresh rate register for adv7533/5 (git-fixes).
- drm: xlnx: zynqmp_dpsub: add missing check for dma_set_mask (git-fixes).
- drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
- drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).
- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).
- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).
- e1000: fix typos in comments (jsc#ped-5738).
- e1000: remove unnecessary use of kmap_atomic() (jsc#ped-5738).
- e1000: switch to napi_build_skb() (jsc#ped-5738).
- e1000: switch to napi_consume_skb() (jsc#ped-5738).
- enable analog devices industrial ethernet phy driver (jsc#ped-4759)
- exfat: fix unexpected eof while reading dir (bsc#1214000).
- exfat: release s_lock before calling dir_emit() (bsc#1214000).
- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).
- fbdev/ep93xx-fb: do not assign to struct fb_info.dev (git-fixes).
- fbdev: fix potential oob read in fast_imageblit() (git-fixes).
- fbdev: fix sys_imageblit() for arbitrary image widths (git-fixes).
- fbdev: improve performance of sys_imageblit() (git-fixes).
- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
- file: reinstate f_pos locking optimization for regular files (bsc#1213759).
- firmware: arm_scmi: drop of node reference in the transport channel setup (git-fixes).
- firmware: cs_dsp: fix new control name check (git-fixes).
- firmware: meson_sm: fix to avoid potential null pointer dereference (git-fixes).
- firmware: stratix10-svc: fix an null vs is_err() bug in probe (git-fixes).
- fs/sysv: null check to prevent null-ptr-deref bug (git-fixes).
- ftrace: fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).
- gpio: mvebu: fix irq domain leak (git-fixes).
- gpio: mvebu: make use of devm_pwmchip_add (git-fixes).
- gpio: tps68470: make tps68470_gpio_output() always set the initial value (git-fixes).
- hid: add quirk for 03f0:464a hp elite presenter mouse (git-fixes).
- hid: logitech-dj: fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).
- hid: logitech-hidpp: add usb and bluetooth ids for the logitech g915 tkl keyboard (git-fixes).
- hid: multitouch: correct devm device reference for hidinput input_dev name (git-fixes).
- hid: wacom: remove the battery when the ekr is off (git-fixes).
- hwmon: (pmbus/bel-pfe) enable pmbus_skip_status_check for pfe1100 (git-fixes).
- hwmon: (tmp513) fix the channel number in tmp51x_is_visible() (git-fixes).
- hwpoison: offline support: fix spelling in documentation/abi/ (git-fixes).
- hwrng: iproc-rng200 - implement suspend and resume calls (git-fixes).
- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).
- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
- i2c: bcm-iproc: fix bcm_iproc_i2c_isr deadlock issue (git-fixes).
- i2c: delete error messages for failed memory allocations (git-fixes).
- i2c: designware: correct length byte validation logic (git-fixes).
- i2c: designware: handle invalid smbus block data response length value (git-fixes).
- i2c: hisi: only handle the interrupt of the driver's transfer (git-fixes).
- i2c: improve size determinations (git-fixes).
- i2c: nomadik: remove a useless call in the remove function (git-fixes).
- i2c: nomadik: remove unnecessary goto label (git-fixes).
- i2c: nomadik: use devm_clk_get_enabled() (git-fixes).
- i40e: fix an null vs is_err() bug for debugfs_create_dir() (git-fixes).
- iavf: fix potential races for fdir filters (git-fixes).
- ib/hfi1: fix possible panic during hotplug remove (git-fixes)
- ib/uverbs: fix an potential error pointer dereference (git-fixes)
- ice: fix crash by keep old cfg when update tcs more than queues (git-fixes).
- ice: fix max_rate check while configuring tx rate limits (git-fixes).
- ice: fix memory management in ice_ethtool_fdir.c (git-fixes).
- ice: fix rdma vsi removal during queue rebuild (git-fixes).
- iio: adc: ina2xx: avoid null pointer dereference on of device match (git-fixes).
- iio: adc: stx104: implement and utilize register structures (git-fixes).
- iio: adc: stx104: utilize iomap interface (git-fixes).
- iio: cros_ec: fix the allocation size for cros_ec_command (git-fixes).
- input: exc3000 - properly stop timer on shutdown (git-fixes).
- intel/e1000:fix repeated words in comments (jsc#ped-5738).
- intel: remove unused macros (jsc#ped-5738).
- iommu/amd: add pci segment support for ivrs_ commands (git-fixes).
- iommu/amd: fix compile warning in init code (git-fixes).
- iommu/amd: fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).
- iommu/amd: fix ivrs_acpihid cmdline parsing code (git-fixes).
- iommu/amd: fix pci device refcount leak in ppr_notifier() (git-fixes).
- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).
- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).
- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
- iommu/arm-smmu-v3: make default domain type of hisilicon ptt device to identity (git-fixes).
- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).
- iommu/dart: initialize dart_streams_enable (git-fixes).
- iommu/dma: fix incorrect error return on iommu deferred attach (git-fixes).
- iommu/dma: fix iova map result check bug (git-fixes).
- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).
- iommu/fsl_pamu: fix resource leak in fsl_pamu_probe() (git-fixes).
- iommu/io-pgtable-arm-v7s: add a quirk to allow pgtable pa up to 35bit (git-fixes).
- iommu/iova: fix module config properly (git-fixes).
- iommu/omap: fix buffer overflow in debugfs (git-fixes).
- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).
- iommu/sun50i: consider all fault sources for reset (git-fixes).
- iommu/sun50i: fix flush size (git-fixes).
- iommu/sun50i: fix r/w permission check (git-fixes).
- iommu/sun50i: fix reset release (git-fixes).
- iommu/sun50i: implement .iotlb_sync_map (git-fixes).
- iommu/sun50i: remove iommu_domain_identity (git-fixes).
- iommu/vt-d: add rpls to quirk list to skip te disabling (git-fixes).
- iommu/vt-d: check correct capability for sagaw determination (git-fixes).
- iommu/vt-d: clean up si_domain in the init_dmars() error path (git-fixes).
- iommu/vt-d: correctly calculate sagaw value of iommu (git-fixes).
- iommu/vt-d: fix kdump kernels boot failure with scalable mode (git-fixes).
- iommu/vt-d: fix pci device refcount leak in dmar_dev_scope_init() (git-fixes).
- iommu/vt-d: fix pci device refcount leak in has_external_pci() (git-fixes).
- iommu/vt-d: preset access bit for iova in fl non-leaf paging entries (git-fixes).
- iommu/vt-d: set sre bit only when hardware has srs cap (git-fixes).
- ipmi:ssif: add check for kstrdup (git-fixes).
- ipmi:ssif: fix a memory leak when scanning for an adapter (git-fixes).
- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).
- kabi/severities: ignore newly added srso mitigation functions
- kabi: allow extra bugsints (bsc#1213927).
- kbuild: add -wno-shift-negative-value where -wextra is used (bsc#1214756).
- kbuild: move to -std=gnu11 (bsc#1214756).
- kernel-binary: common dependencies cleanup common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.
- kernel-binary: drop code for kerntypes support kerntypes was a suse-specific feature dropped before sle 12.
- kunit: make kunit_test_timeout compatible with comment (git-fixes).
- kvm: s390: fix sthyi error handling (git-fixes bsc#1214370).
- leds: fix bug_on check for led_color_id_multi that is always false (git-fixes).
- leds: multicolor: use rounded division when calculating color components (git-fixes).
- leds: pwm: fix error code in led_pwm_create_fwnode() (git-fixes).
- leds: trigger: tty: do not use led_on/off constants, use led_blink_set_oneshot instead (git-fixes).
- leds: turris-omnia: drop unnecessary mutex locking (git-fixes).
- lib/test_meminit: allocate pages up to order max_order (git-fixes).
- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).
- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
- md/raid0: factor out helper for mapping and submitting a bio (bsc#1213916).
- md/raid0: fix performance regression for large sequential writes (bsc#1213916).
- media: ad5820: drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).
- media: cx24120: add retval check for cx24120_message_send() (git-fixes).
- media: dib7000p: fix potential division by zero (git-fixes).
- media: dvb-usb: m920x: fix a potential memory leak in m920x_i2c_xfer() (git-fixes).
- media: go7007: remove redundant if statement (git-fixes).
- media: i2c: ccs: check rules is non-null (git-fixes).
- media: i2c: rdacm21: fix uninitialized value (git-fixes).
- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).
- media: ov2680: add ov2680_fill_format() helper function (git-fixes).
- media: ov2680: do not take the lock for try_fmt calls (git-fixes).
- media: ov2680: fix ov2680_bayer_order() (git-fixes).
- media: ov2680: fix ov2680_set_fmt() which == v4l2_subdev_format_try not working (git-fixes).
- media: ov2680: fix regulators being left enabled on ov2680_power_on() errors (git-fixes).
- media: ov2680: fix vflip / hflip set functions (git-fixes).
- media: ov2680: remove video_v4l2_subdev_api ifdef-s (git-fixes).
- media: ov5640: enable mipi interface in ov5640_set_power_mipi() (git-fixes).
- media: rkvdec: increase max supported height for h.264 (git-fixes).
- media: v4l2-core: fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).
- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).
- media: venus: hfi_venus: only consider sys_idle_indicator on v1 (git-fixes).
- media: venus: hfi_venus: write to vidc_ctrl_init after unmasking interrupts (git-fixes).
- misc: rtsx: judge aspm mode to set petxcfg reg (git-fixes).
- mkspec: allow unsupported kmps (bsc#1214386)
- mlxsw: pci: add shutdown method in pci driver (git-fixes).
- mmc: block: fix in_flight[issue_type] value error (git-fixes).
- mmc: moxart: read scr register without changing byte order (git-fixes).
- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).
- module: avoid allocation if module is already present and ready (bsc#1213921).
- module: extract patient module check into helper (bsc#1213921).
- module: move check_modinfo() early to early_mod_check() (bsc#1213921).
- module: move early sanity checks into a helper (bsc#1213921).
- move upstreamed powerpc patches into sorted section
- mtd: rawnand: brcmnand: fix crash during the panic_write (git-fixes).
- mtd: rawnand: brcmnand: fix mtd oobsize (git-fixes).
- mtd: rawnand: brcmnand: fix potential false time out warning (git-fixes).
- mtd: rawnand: brcmnand: fix potential out-of-bounds access in oob write (git-fixes).
- mtd: rawnand: fsl_upm: fix an off-by one test in fun_exec_op() (git-fixes).
- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).
- mtd: rawnand: omap_elm: fix incorrect type in assignment (git-fixes).
- mtd: rawnand: rockchip: align hwecc vs. raw page helper layouts (git-fixes).
- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).
- mtd: spi-nor: check bus width while setting qe bit (git-fixes).
- mtd: spinand: toshiba: fix ecc_get_status (git-fixes).
- n_tty: rename tail to old_tail in n_tty_read() (git-fixes).
- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
- net: ieee802154: at86rf230: stop leaking skb's (git-fixes).
- net: mana: fix mana vf unload when hardware is unresponsive (git-fixes).
- net: phy: at803x: remove set/get wol callbacks for ar8032 (git-fixes).
- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
- net: phy: fix irq-based wake-on-lan over hibernate / power off (git-fixes).
- net: usb: lan78xx: reorder cleanup operations to avoid uaf bugs (git-fixes).
- net: usbnet: fix warning in usbnet_start_xmit/usb_submit_urb (git-fixes).
- netfs: fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).
- netfs: fix missing xas_retry() calls in xarray iteration (bsc#1213946).
- netfs: fix parameter of cleanup() (bsc#1214743).
- nfsd: remove incorrect check in nfsd4_validate_stateid (git-fixes).
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).
- nilfs2: fix warning in mark_buffer_dirty due to discarded buffer reuse (git-fixes).
- nvme-rdma: fix potential unbalanced freeze & unfreeze (bsc#1208902).
- nvme-tcp: fix potential unbalanced freeze & unfreeze (bsc#1208902).
- objtool/x86: fix srso mess (git-fixes).
- objtool/x86: fixup frame-pointer vs rethunk (git-fixes).
- objtool: union instruction::{call_dest,jump_table} (git-fixes).
- old-flavors: drop 2.6 kernels. 2.6 based kernels are eol, upgrading from them is no longer suported.
- pci/aspm: avoid link retraining race (git-fixes).
- pci/aspm: factor out pcie_wait_for_retrain() (git-fixes).
- pci/aspm: return 0 or -etimedout from pcie_retrain_link() (git-fixes).
- pci: acpiphp: reassign resources on bridge if necessary (git-fixes).
- pci: acpiphp: use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).
- pci: mark nvidia t4 gpus to avoid bus reset (git-fixes).
- pci: meson: remove cast between incompatible function type (git-fixes).
- pci: microchip: correct the ded and sec interrupt bit offsets (git-fixes).
- pci: microchip: remove cast between incompatible function type (git-fixes).
- pci: pciehp: use rmw accessors for changing lnkctl (git-fixes).
- pci: rockchip: remove writes to unused registers (git-fixes).
- pci: s390: fix use-after-free of pci resources with per-function hotplug (git-fixes).
- pci: tegra194: fix possible array out of bounds access (git-fixes).
- pcmcia: rsrc_nonstatic: fix memory leak in nonstatic_release_resource_db() (git-fixes).
- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).
- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).
- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).
- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).
- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).
- phy: qcom-snps: use dev_err_probe() to simplify code (git-fixes).
- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).
- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).
- pinctrl: renesas: rza2: add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).
- platform/x86: dell-sysman: fix reference leak (git-fixes).
- pm / devfreq: fix leak in devfreq_dev_release() (git-fixes).
- powerpc/64e: fix kexec build error (bsc#1212091 ltc#199106).
- powerpc/iommu: do not set failed sg dma_address to dma_mapping_error (bsc#1212091 ltc#199106).
- powerpc/iommu: fix iommu_table_in_use for a small default dma window case (bsc#1212091 ltc#199106).
- powerpc/iommu: incorrect ddw table is referenced for sr-iov device (bsc#1212091 ltc#199106).
- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).
- powerpc/iommu: tces are incorrectly manipulated with dlpar add/remove of memory (bsc#1212091 ltc#199106).
- powerpc/kernel/iommu: add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).
- powerpc/kexec: fix build failure from uninitialised variable (bsc#1212091 ltc#199106).
- powerpc/mm/altmap: fix altmap boundary check (bsc#1120059 git-fixes).
- powerpc/pseries/ddw: do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).
- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add of_node_put() before break (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: allow ddw windows starting at 0x00 (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: check if the default window in use before removing it (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: create huge dma window if no mmio32 is present (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: find existing ddw with given property name (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: make use of ddw for indirect mapping (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: replace hard-coded page shift (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: use correct vfree for it_map (bsc#1212091 ltc#199106).
- powerpc/pseries: add __init attribute to eligible functions (bsc#1212091 ltc#199106).
- powerpc/pseries: honour current smt state when dlpar onlining cpus (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- powerpc/pseries: initialise cpu hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- powerpc/rtas: block error injection when locked down (bsc#1023051).
- powerpc/rtas: enture rtas_call is called with mmu enabled (bsc#1023051).
- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).
- powerpc/security: fix speculation_store_bypass reporting on power10 (bsc#1188885 ltc#193722 git-fixes).
- powerpc: add hotplug_smt support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). update config files.
- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
- powerpc: move dma64_propname define to a header (bsc#1214297 ltc#197503).
- pseries/iommu/ddw: fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).
- pstore/ram: check start of empty przs during init (git-fixes).
- pwm: add a stub for devm_pwmchip_add() (git-fixes).
- pwm: meson: fix handling of period/duty if greater than uint_max (git-fixes).
- pwm: meson: simplify duplicated per-channel tracking (git-fixes).
- qed: fix scheduling in a tasklet while getting stats (git-fixes).
- rdma/bnxt_re: fix error handling in probe failure path (git-fixes)
- rdma/bnxt_re: fix max_qp count for virtual functions (git-fixes)
- rdma/efa: fix wrong resources deallocation order (git-fixes)
- rdma/hns: fix cq and qp cache affinity (git-fixes)
- rdma/hns: fix incorrect post-send with direct wqe of wr-list (git-fixes)
- rdma/hns: fix port active speed (git-fixes)
- rdma/irdma: prevent zero-length stag registration (git-fixes)
- rdma/irdma: replace one-element array with flexible-array member (git-fixes)
- rdma/mlx5: return the firmware result upon destroying qp/rq (git-fixes)
- rdma/qedr: remove a duplicate assignment in irdma_query_ah() (git-fixes)
- rdma/siw: balance the reference of cep->kref in the error path (git-fixes)
- rdma/siw: correct wrong debug message (git-fixes)
- rdma/umem: set iova in odp flow (git-fixes)
- readme.branch: add miroslav franc as a sle15-sp4 co-maintainer.
- regmap: rbtree: use alloc_flags for memory allocations (git-fixes).
- revert 'ib/isert: fix incorrect release of isert connection' (git-fixes)
- revert 'tracing: add '(fault)' name injection to kernel probes' (git-fixes).
- ring-buffer: do not swap cpu_buffer during resize process (git-fixes).
- ring-buffer: fix deadloop issue on reading trace_pipe (git-fixes).
- ring-buffer: fix wrong stat of cpu_buffer->read (git-fixes).
- rpmsg: glink: add check for kstrdup (git-fixes).
- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).
- sched/fair: fix inaccurate tally of ttwu_move_affine (git fixes).
- sched/fair: use recent_used_cpu to test p->cpus_ptr (git fixes).
- sched/psi: use kernfs polling functions for psi trigger polling (bsc#1209799).
- scsi: bsg: increase number of devices (bsc#1210048).
- scsi: core: do not wait for quiesce in scsi_device_block() (bsc#1209284).
- scsi: core: do not wait for quiesce in scsi_stop_queue() (bsc#1209284).
- scsi: core: improve warning message in scsi_device_block() (bsc#1209284).
- scsi: core: merge scsi_internal_device_block() and device_block() (bsc#1209284).
- scsi: rdma/srp: fix residual handling (git-fixes)
- scsi: sg: increase number of devices (bsc#1210048).
- scsi: storvsc: always set no_report_opcodes (git-fixes).
- scsi: storvsc: fix handling of virtual fibre channel timeouts (git-fixes).
- scsi: storvsc: handle srb status value 0x30 (git-fixes).
- scsi: storvsc: limit max_sectors for virtual fibre channel devices (git-fixes).
- scsi: zfcp: defer fc_rport blocking until after adisc response (git-fixes bsc#1214371).
- selftests/futex: order calls to futex_lock_pi (git-fixes).
- selftests/harness: actually report skip for signal tests (git-fixes).
- selftests/resctrl: close perf value read fd on errors (git-fixes).
- selftests/resctrl: do not leak buffer in fill_cache() (git-fixes).
- selftests/resctrl: unmount resctrl fs if child fails to run benchmark (git-fixes).
- selftests/rseq: check if libc rseq support is registered (git-fixes).
- selftests: forwarding: add a helper to skip test when using veth pairs (git-fixes).
- selftests: forwarding: ethtool: skip when using veth pairs (git-fixes).
- selftests: forwarding: ethtool_extended_state: skip when using veth pairs (git-fixes).
- selftests: forwarding: skip test when no interfaces are specified (git-fixes).
- selftests: forwarding: switch off timeout (git-fixes).
- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).
- selftests: forwarding: tc_actions: use ncat instead of nc (git-fixes).
- selftests: forwarding: tc_flower: relax success criterion (git-fixes).
- selftests: mirror_gre_changes: tighten up the ttl test match (git-fixes).
- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
- serial: sc16is7xx: fix bug when first setting gpio direction (git-fixes).
- serial: sprd: assign sprd_port after initialized to avoid wrong access (git-fixes).
- serial: sprd: fix dma buffer leak issue (git-fixes).
- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).
- sfc: fix crash when reading stats while nic is resetting (git-fixes).
- smb3: do not send lease break acknowledgment if all file handles have been closed (git-fixes).
- smb3: do not set ntlmssp_version flag for negotiate not auth request (bsc#1193629).
- smb: client: fix -wstringop-overflow issues (bsc#1193629).
- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
- smb: client: fix null auth (git-fixes).
- soc: aspeed: socinfo: add kfree for kstrdup (git-fixes).
- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).
- soundwire: fix enumeration completion (git-fixes).
- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).
- supported.conf: fix typos for -!optional markers
- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).
- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).
- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).
- target_core_rbd: remove snapshot existence validation code (bsc#1212857).
- thunderbolt: read retimer nvm authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).
- timers: add shutdown mechanism to the internal functions (bsc#1213970).
- timers: provide timer_shutdown[_sync]() (bsc#1213970).
- timers: rename del_timer() to timer_delete() (bsc#1213970).
- timers: rename del_timer_sync() to timer_delete_sync() (bsc#1213970).
- timers: replace bug_on()s (bsc#1213970).
- timers: silently ignore timers with a null function (bsc#1213970).
- timers: split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).
- timers: update kernel-doc for various functions (bsc#1213970).
- timers: use del_timer_sync() even on up (bsc#1213970).
- tracing/histograms: add histograms to hist_vars if they have referenced variables (git-fixes).
- tracing/histograms: return an error if we fail to add histogram to hist_vars list (git-fixes).
- tracing/probes: fix not to count error code to total length (git-fixes).
- tracing/probes: fix to avoid double count of the string length on the array (git-fixes).
- tracing/probes: fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).
- tracing/probes: fix to update dynamic data counter if fetcharg uses it (git-fixes).
- tracing: fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes).
- tracing: fix memleak due to race between current_tracer and trace (git-fixes).
- tracing: fix memory leak of iter->temp when reading trace_pipe (git-fixes).
- tracing: fix null pointer dereference in tracing_err_log_open() (git-fixes).
- tracing: fix warning in trace_buffered_event_disable() (git-fixes).
- tty: fix hang on tty device with no_room set (git-fixes).
- tty: n_gsm: fix the uaf caused by race condition in gsm_cleanup_mux (git-fixes).
- tty: serial: fsl_lpuart: add i.mxrt1050 support (git-fixes).
- tty: serial: fsl_lpuart: clear the error flags by writing 1 for lpuart32 platforms (git-fixes).
- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).
- tty: serial: fsl_lpuart: reduce rx watermark to 0 on ls1028a (git-fixes).
- ubifs: fix memleak when insert_old_idx() failed (git-fixes).
- update patches.suse/cpufreq-intel_pstate-fix-cpu-pstate.turbo_freq-initi (git-fixes bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- usb-storage: alauda: fix uninit-value in alauda_check_media() (git-fixes).
- usb: chipidea: imx: add missing usb phy dpdm wakeup setting (git-fixes).
- usb: chipidea: imx: do not request qos for imx8ulp (git-fixes).
- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).
- usb: common: usb-conn-gpio: prevent bailing out if initial role is none (git-fixes).
- usb: dwc3: fix typos in gadget.c (git-fixes).
- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).
- usb: dwc3: properly handle processing of pending events (git-fixes).
- usb: gadget: f_mass_storage: fix unused variable warning (git-fixes).
- usb: gadget: fix the memory leak in raw_gadget driver (git-fixes).
- usb: gadget: u_serial: avoid spinlock recursion in __gs_console_push (git-fixes).
- usb: ohci-at91: fix the unhandle interrupt when resume (git-fixes).
- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).
- usb: quirks: add quirk for focusrite scarlett (git-fixes).
- usb: serial: option: add quectel ec200a module support (git-fixes).
- usb: serial: option: support quectel em060k_128 (git-fixes).
- usb: serial: simple: add kaufmann rks+can vcp (git-fixes).
- usb: serial: simple: sort driver entries (git-fixes).
- usb: typec: altmodes/displayport: signal hpd when configuring pin assignment (git-fixes).
- usb: typec: tcpm: fix response to vsafe0v event (git-fixes).
- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).
- usb: zaurus: add id for a-300/b-500/c-700 (git-fixes).
- watchdog: sp5100_tco: support hygon fch/sch (server controller hub) (git-fixes).
- wifi: ath10k: use rmw accessors for changing lnkctl (git-fixes).
- wifi: ath11k: use rmw accessors for changing lnkctl (git-fixes).
- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).
- wifi: ath9k: protect wmi command response buffer replacement with a lock (git-fixes).
- wifi: ath9k: use is_err() with debugfs_create_dir() (git-fixes).
- wifi: cfg80211: fix return value in scan logic (git-fixes).
- wifi: cfg80211: fix sband iftype data lookup for ap_vlan (git-fixes).
- wifi: mt76: mt7615: do not advertise 5 ghz on first phy of mt7615d (dbdc) (git-fixes).
- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).
- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).
- wifi: mt76: testmode: add nla_policy for mt76_tm_attr_tx_length (git-fixes).
- wifi: mwifiex: avoid possible null skb pointer dereference (git-fixes).
- wifi: mwifiex: fix error recovery in pcie buffer descriptor management (git-fixes).
- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).
- wifi: mwifiex: fix missed return in oob checks failed path (git-fixes).
- wifi: mwifiex: fix oob and integer underflow when rx packets (git-fixes).
- wifi: nl80211/cfg80211: add forgotten nla_policy for bss color attribute (git-fixes).
- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
- wifi: rtw89: debug: fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).
- x86/alternative: make custom return thunk unconditional (git-fixes).
- x86/cpu/amd: disable xsaves on amd family 0x17 (git-fixes).
- x86/cpu/kvm: provide untrain_ret_vm (git-fixes).
- x86/cpu: clean up srso return thunk mess (git-fixes).
- x86/cpu: cleanup the untrain mess (git-fixes).
- x86/cpu: fix __x86_return_thunk symbol type (git-fixes).
- x86/cpu: fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
- x86/cpu: rename original retbleed methods (git-fixes).
- x86/cpu: rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
- x86/mce: make sure logged mces are processed after sysfs update (git-fixes).
- x86/retpoline,kprobes: fix position of thunk sections with config_lto_clang (git-fixes).
- x86/retpoline,kprobes: skip optprobe check for indirect jumps with retpolines and ibt (git-fixes).
- x86/retpoline: do not clobber rflags during srso_safe_ret() (git-fixes).
- x86/speculation: add cpu_show_gds() prototype (git-fixes).
- x86/speculation: mark all skylake cpus as vulnerable to gds (git-fixes).
- x86/srso: correct the mitigation status when smt is disabled (git-fixes).
- x86/srso: disable the mitigation on unaffected configurations (git-fixes).
- x86/srso: explain the untraining sequences a bit more (git-fixes).
- x86/srso: fix build breakage with the llvm linker (git-fixes).
- x86/srso: fix return thunks in generated code (git-fixes).
- x86/static_call: fix __static_call_fixup() (git-fixes).
- xfs: fix sb write verify for lazysbcount (bsc#1214661).
Patchnames: SUSE-2023-3600,SUSE-SLE-Micro-5.3-2023-3600,SUSE-SLE-Micro-5.4-2023-3600,SUSE-SLE-Module-Live-Patching-15-SP4-2023-3600,SUSE-SLE-Module-RT-15-SP4-2023-3600,openSUSE-SLE-15.4-2023-3600
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
4.4 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.6 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.1 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.1 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.7 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.6 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
119 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\n\nThe SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).\n- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).\n- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).\n- CVE-2023-37453: Fixed oversight in SuperSpeed initialization (bsc#1213123).\n- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).\n- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).\n- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).\n- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).\n- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).\n- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).\n- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).\n- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).\n- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).\n- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).\n- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).\n\nThe following non-security bugs were fixed:\n\n- acpi: processor: perflib: avoid updating frequency qos unnecessarily (git-fixes).\n- acpi: processor: perflib: use the \u0027no limit\u0027 frequency qos (git-fixes).\n- acpi: x86: s2idle: fix a logic error parsing amd constraints table (git-fixes).\n- alsa: ac97: fix possible error value of *rac97 (git-fixes).\n- alsa: hda/cs8409: support new dell dolphin variants (git-fixes).\n- alsa: hda/realtek - remodified 3k pull low procedure (git-fixes).\n- alsa: hda/realtek: add quirk for hp victus 16-d1xxx to enable mute led (git-fixes).\n- alsa: hda/realtek: add quirk for mute leds on hp envy x360 15-eu0xxx (git-fixes).\n- alsa: hda/realtek: add quirks for hp g11 laptops (git-fixes).\n- alsa: hda/realtek: switch dell oasis models to use spi (git-fixes).\n- alsa: pcm: fix missing fixup call in compat hw_refine ioctl (git-fixes).\n- alsa: usb-audio: add support for mythware xa001au capture and playback interfaces (git-fixes).\n- alsa: usb-audio: fix init call orders for uac1 (git-fixes).\n- alsa: ymfpci: fix the missing snd_card_free() call at probe error (git-fixes).\n- amba: bus: fix refcount leak (git-fixes).\n- arm64: dts: imx8mn-var-som: add missing pull-up for onboard phy reset pinmux (git-fixes).\n- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).\n- arm64: dts: rockchip: disable hs400 for emmc on rock pi 4 (git-fixes).\n- arm: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix usb related warnings (git-fixes).\n- arm: dts: imx6sll: fixup of operating points (git-fixes).\n- arm: spear: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- asoc: lower \u0027no backend dais enabled for ... port\u0027 log severity (git-fixes).\n- asoc: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).\n- asoc: rt5665: add missed regulator_bulk_disable (git-fixes).\n- asoc: sof: intel: fix soundwire/hdaudio mutual exclusion (git-fixes).\n- asoc: stac9766: fix build errors with regmap_ac97 (git-fixes).\n- asoc: tegra: fix sfc conversion for few rates (git-fixes).\n- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).\n- backlight/bd6107: compare against struct fb_info.device (git-fixes).\n- backlight/gpio_backlight: compare against struct fb_info.device (git-fixes).\n- backlight/lv5207lp: compare against struct fb_info.device (git-fixes).\n- batman-adv: do not get eth header before batadv_check_management_packet (git-fixes).\n- batman-adv: do not increase mtu when set by user (git-fixes).\n- batman-adv: fix batadv_v_ogm_aggr_send memory leak (git-fixes).\n- batman-adv: fix tt global entry leak when client roamed back (git-fixes).\n- batman-adv: hold rtnl lock during mtu update via netlink (git-fixes).\n- batman-adv: trigger events for auto adjusted mtu (git-fixes).\n- bluetooth: btusb: add mt7922 bluetooth id for the asus ally (git-fixes).\n- bluetooth: btusb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).\n- bluetooth: fix potential use-after-free when clear keys (git-fixes).\n- bluetooth: l2cap: fix use-after-free (git-fixes).\n- bluetooth: l2cap: fix use-after-free in l2cap_sock_ready_cb (git-fixes).\n- bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).\n- bluetooth: remove unused declaration amp_read_loc_info() (git-fixes).\n- bnx2x: fix page fault following eeh recovery (bsc#1214299).\n- bpf: disable preemption in bpf_event_output (git-fixes).\n- bus: ti-sysc: fix build warning for 64-bit build (git-fixes).\n- bus: ti-sysc: fix cast to enum warning (git-fixes).\n- bus: ti-sysc: flush posted write on enable before reset (git-fixes).\n- can: gs_usb: gs_usb_receive_bulk_callback(): count rx overflow errors also in case of oom (git-fixes).\n- ceph: defer stopping mdsc delayed_work (bsc#1214392).\n- ceph: do not check for quotas on mds stray dirs (bsc#1214238).\n- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).\n- check-for-config-changes: ignore builtin_return_address_strips_pac (bsc#1214380). gcc7 on sle 15 does not support this while later gcc does.\n- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).\n- cifs: allow dumping keys for directories too (bsc#1193629).\n- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).\n- cifs: if deferred close is disabled then close files immediately (git-fixes).\n- cifs: is_network_name_deleted should return a bool (bsc#1193629).\n- cifs: update internal module version number for cifs.ko (bsc#1193629).\n- clk: fix slab-out-of-bounds error in devm_clk_release() (git-fixes).\n- clk: fix undefined reference to `clk_rate_exclusive_{get,put}\u0027 (git-fixes).\n- clk: imx8mp: fix sai4 clock (git-fixes).\n- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).\n- clk: imx: pll14xx: dynamically configure pll for 393216000/361267200hz (git-fixes).\n- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).\n- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).\n- clk: qcom: gcc-sc7180: fix up gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: qcom: gcc-sm8250: fix gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: sunxi-ng: modify mismatched function name (git-fixes).\n- clocksource/drivers/arm_arch_timer: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource/drivers/sp804: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- config_nvme_verbose_errors=y gone with a82baa8083b\n- config_printk_safe_log_buf_shift=13 gone with 7e152d55123\n- cpu/smt: allow enabling partial smt states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: move smt prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpufreq: fix the race condition while updating the transition_task of policy (git-fixes).\n- cpufreq: intel_pstate: adjust balance_performance epp for sapphire rapids (bsc#1214659).\n- cpufreq: intel_pstate: enable hwp io boost for all servers (bsc#1208949 jsc#ped-6003 jsc#ped-6004).\n- cpufreq: intel_pstate: fix scaling for hybrid-capable systems with disabled e-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- cpufreq: intel_pstate: hybrid: rework hwp calibration (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- cpufreq: intel_pstate: hybrid: use known scaling factor for p-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- cpufreq: intel_pstate: read all msrs on the target cpu (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- created new preempt kernel flavor configs are cloned from the respective $arch/default configs. all changed configs appart from config_preempt-\u003ey are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. tree_rcu has been also changed to preempt_rcu which is the default implementation for preempt kernel.\n- crypto: caam - fix unchecked return value error (git-fixes).\n- crypto: stm32 - properly handle pm_runtime_get failing (git-fixes).\n- dma-buf/sw_sync: avoid recursive lock during fence signal (git-fixes).\n- dma-buf/sync_file: fix docs syntax (git-fixes).\n- dmaengine: idxd: modify the dependence of attribute pasid_enabled (git-fixes).\n- dmaengine: mcf-edma: fix a potential un-allocated memory access (git-fixes).\n- dmaengine: pl330: return dma_paused when transaction is paused (git-fixes).\n- dmaengine: ste_dma40: add missing irq check in d40_probe (git-fixes).\n- docs/process/howto: replace c89 with c11 (bsc#1214756).\n- docs: kernel-parameters: refer to the correct bitmap function (git-fixes).\n- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).\n- docs: printk-formats: fix hex printing of signed values (git-fixes).\n- documentation: devices.txt: fix minors for ttycpm* (git-fixes).\n- documentation: devices.txt: remove ttyioc* (git-fixes).\n- documentation: devices.txt: remove ttysioc* (git-fixes).\n- driver core: test_async: fix an error code (git-fixes).\n- drivers: clk: keystone: fix parameter judgment in _of_pll_clk_init() (git-fixes).\n- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).\n- drm/amd/display: check attr flag before set cursor degamma on dcn3+ (git-fixes).\n- drm/amd/display: check tg is non-null before checking if enabled (git-fixes).\n- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).\n- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).\n- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).\n- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).\n- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).\n- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).\n- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).\n- drm/amdgpu: fix potential fence use-after-free v2 (git-fixes).\n- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).\n- drm/amdgpu: use rmw accessors for changing lnkctl (git-fixes).\n- drm/armada: fix off-by-one error in armada_overlay_get_property() (git-fixes).\n- drm/ast: fix dram init on ast2200 (git-fixes).\n- drm/atomic-helper: update reference to drm_crtc_force_disable_all() (git-fixes).\n- drm/bridge: anx7625: drop device lock before drm_helper_hpd_irq_event() (git-fixes).\n- drm/bridge: fix -wunused-const-variable= warning (git-fixes).\n- drm/bridge: tc358764: fix debug print parameter order (git-fixes).\n- drm/etnaviv: fix dumping of active mmu context (git-fixes).\n- drm/mediatek: fix dereference before null check (git-fixes).\n- drm/mediatek: fix potential memory leak if vmap() fail (git-fixes).\n- drm/msm/a2xx: call adreno_gpu_init() earlier (git-fixes).\n- drm/msm/mdp5: do not leak some plane state (git-fixes).\n- drm/msm: update dev core dump to not print backwards (git-fixes).\n- drm/nouveau/disp: revert a null check inside nouveau_connector_get_modes (git-fixes).\n- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).\n- drm/panel: simple: add missing connector type and pixel format for auo t215hvn01 (git-fixes).\n- drm/panel: simple: fix auo g121ean01 panel timings according to the docs (git-fixes).\n- drm/qxl: fix uaf on handle creation (git-fixes).\n- drm/radeon: use rmw accessors for changing lnkctl (git-fixes).\n- drm/rockchip: do not spam logs in atomic check (git-fixes).\n- drm/shmem-helper: reset vma-\u003evm_ops before calling dma_buf_mmap() (git-fixes).\n- drm/tegra: dpaux: fix incorrect return value of platform_get_irq (git-fixes).\n- drm/ttm: check null pointer before accessing when swapping (git-fixes).\n- drm/ttm: never consider pinned bos for eviction\u0026swap (git-fixes).\n- drm/vmwgfx: fix shader stage validation (git-fixes).\n- drm: adv7511: fix low refresh rate register for adv7533/5 (git-fixes).\n- drm: xlnx: zynqmp_dpsub: add missing check for dma_set_mask (git-fixes).\n- drop cfg80211 lock fix patches that caused a regression (bsc#1213757) \n- drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428) \n- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).\n- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).\n- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).\n- e1000: fix typos in comments (jsc#ped-5738).\n- e1000: remove unnecessary use of kmap_atomic() (jsc#ped-5738).\n- e1000: switch to napi_build_skb() (jsc#ped-5738).\n- e1000: switch to napi_consume_skb() (jsc#ped-5738).\n- enable analog devices industrial ethernet phy driver (jsc#ped-4759)\n- exfat: fix unexpected eof while reading dir (bsc#1214000).\n- exfat: release s_lock before calling dir_emit() (bsc#1214000).\n- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).\n- fbdev/ep93xx-fb: do not assign to struct fb_info.dev (git-fixes).\n- fbdev: fix potential oob read in fast_imageblit() (git-fixes).\n- fbdev: fix sys_imageblit() for arbitrary image widths (git-fixes).\n- fbdev: improve performance of sys_imageblit() (git-fixes).\n- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).\n- file: reinstate f_pos locking optimization for regular files (bsc#1213759).\n- firmware: arm_scmi: drop of node reference in the transport channel setup (git-fixes).\n- firmware: cs_dsp: fix new control name check (git-fixes).\n- firmware: meson_sm: fix to avoid potential null pointer dereference (git-fixes).\n- firmware: stratix10-svc: fix an null vs is_err() bug in probe (git-fixes).\n- fs/sysv: null check to prevent null-ptr-deref bug (git-fixes).\n- ftrace: fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).\n- gpio: mvebu: fix irq domain leak (git-fixes).\n- gpio: mvebu: make use of devm_pwmchip_add (git-fixes).\n- gpio: tps68470: make tps68470_gpio_output() always set the initial value (git-fixes).\n- hid: add quirk for 03f0:464a hp elite presenter mouse (git-fixes).\n- hid: logitech-dj: fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).\n- hid: logitech-hidpp: add usb and bluetooth ids for the logitech g915 tkl keyboard (git-fixes).\n- hid: multitouch: correct devm device reference for hidinput input_dev name (git-fixes).\n- hid: wacom: remove the battery when the ekr is off (git-fixes).\n- hwmon: (pmbus/bel-pfe) enable pmbus_skip_status_check for pfe1100 (git-fixes).\n- hwmon: (tmp513) fix the channel number in tmp51x_is_visible() (git-fixes).\n- hwpoison: offline support: fix spelling in documentation/abi/ (git-fixes).\n- hwrng: iproc-rng200 - implement suspend and resume calls (git-fixes).\n- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).\n- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).\n- i2c: bcm-iproc: fix bcm_iproc_i2c_isr deadlock issue (git-fixes).\n- i2c: delete error messages for failed memory allocations (git-fixes).\n- i2c: designware: correct length byte validation logic (git-fixes).\n- i2c: designware: handle invalid smbus block data response length value (git-fixes).\n- i2c: hisi: only handle the interrupt of the driver\u0027s transfer (git-fixes).\n- i2c: improve size determinations (git-fixes).\n- i2c: nomadik: remove a useless call in the remove function (git-fixes).\n- i2c: nomadik: remove unnecessary goto label (git-fixes).\n- i2c: nomadik: use devm_clk_get_enabled() (git-fixes).\n- i40e: fix an null vs is_err() bug for debugfs_create_dir() (git-fixes).\n- iavf: fix potential races for fdir filters (git-fixes).\n- ib/hfi1: fix possible panic during hotplug remove (git-fixes)\n- ib/uverbs: fix an potential error pointer dereference (git-fixes)\n- ice: fix crash by keep old cfg when update tcs more than queues (git-fixes).\n- ice: fix max_rate check while configuring tx rate limits (git-fixes).\n- ice: fix memory management in ice_ethtool_fdir.c (git-fixes).\n- ice: fix rdma vsi removal during queue rebuild (git-fixes).\n- iio: adc: ina2xx: avoid null pointer dereference on of device match (git-fixes).\n- iio: adc: stx104: implement and utilize register structures (git-fixes).\n- iio: adc: stx104: utilize iomap interface (git-fixes).\n- iio: cros_ec: fix the allocation size for cros_ec_command (git-fixes).\n- input: exc3000 - properly stop timer on shutdown (git-fixes).\n- intel/e1000:fix repeated words in comments (jsc#ped-5738).\n- intel: remove unused macros (jsc#ped-5738).\n- iommu/amd: add pci segment support for ivrs_ commands (git-fixes).\n- iommu/amd: fix compile warning in init code (git-fixes).\n- iommu/amd: fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).\n- iommu/amd: fix ivrs_acpihid cmdline parsing code (git-fixes).\n- iommu/amd: fix pci device refcount leak in ppr_notifier() (git-fixes).\n- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).\n- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).\n- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).\n- iommu/arm-smmu-v3: make default domain type of hisilicon ptt device to identity (git-fixes).\n- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).\n- iommu/dart: initialize dart_streams_enable (git-fixes).\n- iommu/dma: fix incorrect error return on iommu deferred attach (git-fixes).\n- iommu/dma: fix iova map result check bug (git-fixes).\n- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).\n- iommu/fsl_pamu: fix resource leak in fsl_pamu_probe() (git-fixes).\n- iommu/io-pgtable-arm-v7s: add a quirk to allow pgtable pa up to 35bit (git-fixes).\n- iommu/iova: fix module config properly (git-fixes).\n- iommu/omap: fix buffer overflow in debugfs (git-fixes).\n- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).\n- iommu/sun50i: consider all fault sources for reset (git-fixes).\n- iommu/sun50i: fix flush size (git-fixes).\n- iommu/sun50i: fix r/w permission check (git-fixes).\n- iommu/sun50i: fix reset release (git-fixes).\n- iommu/sun50i: implement .iotlb_sync_map (git-fixes).\n- iommu/sun50i: remove iommu_domain_identity (git-fixes).\n- iommu/vt-d: add rpls to quirk list to skip te disabling (git-fixes).\n- iommu/vt-d: check correct capability for sagaw determination (git-fixes).\n- iommu/vt-d: clean up si_domain in the init_dmars() error path (git-fixes).\n- iommu/vt-d: correctly calculate sagaw value of iommu (git-fixes).\n- iommu/vt-d: fix kdump kernels boot failure with scalable mode (git-fixes).\n- iommu/vt-d: fix pci device refcount leak in dmar_dev_scope_init() (git-fixes).\n- iommu/vt-d: fix pci device refcount leak in has_external_pci() (git-fixes).\n- iommu/vt-d: preset access bit for iova in fl non-leaf paging entries (git-fixes).\n- iommu/vt-d: set sre bit only when hardware has srs cap (git-fixes).\n- ipmi:ssif: add check for kstrdup (git-fixes).\n- ipmi:ssif: fix a memory leak when scanning for an adapter (git-fixes).\n- ipmi_si: fix a memleak in try_smi_init() (git-fixes).\n- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).\n- kabi/severities: ignore newly added srso mitigation functions\n- kabi: allow extra bugsints (bsc#1213927).\n- kbuild: add -wno-shift-negative-value where -wextra is used (bsc#1214756).\n- kbuild: move to -std=gnu11 (bsc#1214756).\n- kernel-binary: common dependencies cleanup common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.\n- kernel-binary: drop code for kerntypes support kerntypes was a suse-specific feature dropped before sle 12.\n- kunit: make kunit_test_timeout compatible with comment (git-fixes).\n- kvm: s390: fix sthyi error handling (git-fixes bsc#1214370).\n- leds: fix bug_on check for led_color_id_multi that is always false (git-fixes).\n- leds: multicolor: use rounded division when calculating color components (git-fixes).\n- leds: pwm: fix error code in led_pwm_create_fwnode() (git-fixes).\n- leds: trigger: tty: do not use led_on/off constants, use led_blink_set_oneshot instead (git-fixes).\n- leds: turris-omnia: drop unnecessary mutex locking (git-fixes).\n- lib/test_meminit: allocate pages up to order max_order (git-fixes).\n- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).\n- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).\n- md/raid0: factor out helper for mapping and submitting a bio (bsc#1213916).\n- md/raid0: fix performance regression for large sequential writes (bsc#1213916).\n- media: ad5820: drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).\n- media: cx24120: add retval check for cx24120_message_send() (git-fixes).\n- media: dib7000p: fix potential division by zero (git-fixes).\n- media: dvb-usb: m920x: fix a potential memory leak in m920x_i2c_xfer() (git-fixes).\n- media: go7007: remove redundant if statement (git-fixes).\n- media: i2c: ccs: check rules is non-null (git-fixes).\n- media: i2c: rdacm21: fix uninitialized value (git-fixes).\n- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).\n- media: ov2680: add ov2680_fill_format() helper function (git-fixes).\n- media: ov2680: do not take the lock for try_fmt calls (git-fixes).\n- media: ov2680: fix ov2680_bayer_order() (git-fixes).\n- media: ov2680: fix ov2680_set_fmt() which == v4l2_subdev_format_try not working (git-fixes).\n- media: ov2680: fix regulators being left enabled on ov2680_power_on() errors (git-fixes).\n- media: ov2680: fix vflip / hflip set functions (git-fixes).\n- media: ov2680: remove video_v4l2_subdev_api ifdef-s (git-fixes).\n- media: ov5640: enable mipi interface in ov5640_set_power_mipi() (git-fixes).\n- media: rkvdec: increase max supported height for h.264 (git-fixes).\n- media: v4l2-core: fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).\n- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).\n- media: venus: hfi_venus: only consider sys_idle_indicator on v1 (git-fixes).\n- media: venus: hfi_venus: write to vidc_ctrl_init after unmasking interrupts (git-fixes).\n- misc: rtsx: judge aspm mode to set petxcfg reg (git-fixes).\n- mkspec: allow unsupported kmps (bsc#1214386)\n- mlxsw: pci: add shutdown method in pci driver (git-fixes).\n- mmc: block: fix in_flight[issue_type] value error (git-fixes).\n- mmc: moxart: read scr register without changing byte order (git-fixes).\n- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).\n- module: avoid allocation if module is already present and ready (bsc#1213921).\n- module: extract patient module check into helper (bsc#1213921).\n- module: move check_modinfo() early to early_mod_check() (bsc#1213921).\n- module: move early sanity checks into a helper (bsc#1213921).\n- move upstreamed powerpc patches into sorted section\n- mtd: rawnand: brcmnand: fix crash during the panic_write (git-fixes).\n- mtd: rawnand: brcmnand: fix mtd oobsize (git-fixes).\n- mtd: rawnand: brcmnand: fix potential false time out warning (git-fixes).\n- mtd: rawnand: brcmnand: fix potential out-of-bounds access in oob write (git-fixes).\n- mtd: rawnand: fsl_upm: fix an off-by one test in fun_exec_op() (git-fixes).\n- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).\n- mtd: rawnand: omap_elm: fix incorrect type in assignment (git-fixes).\n- mtd: rawnand: rockchip: align hwecc vs. raw page helper layouts (git-fixes).\n- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).\n- mtd: spi-nor: check bus width while setting qe bit (git-fixes).\n- mtd: spinand: toshiba: fix ecc_get_status (git-fixes).\n- n_tty: rename tail to old_tail in n_tty_read() (git-fixes).\n- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).\n- net: ieee802154: at86rf230: stop leaking skb\u0027s (git-fixes).\n- net: mana: fix mana vf unload when hardware is unresponsive (git-fixes).\n- net: phy: at803x: remove set/get wol callbacks for ar8032 (git-fixes).\n- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).\n- net: phy: fix irq-based wake-on-lan over hibernate / power off (git-fixes).\n- net: usb: lan78xx: reorder cleanup operations to avoid uaf bugs (git-fixes).\n- net: usbnet: fix warning in usbnet_start_xmit/usb_submit_urb (git-fixes).\n- netfs: fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).\n- netfs: fix missing xas_retry() calls in xarray iteration (bsc#1213946).\n- netfs: fix parameter of cleanup() (bsc#1214743).\n- nfsd: remove incorrect check in nfsd4_validate_stateid (git-fixes).\n- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).\n- nilfs2: fix warning in mark_buffer_dirty due to discarded buffer reuse (git-fixes).\n- nvme-rdma: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- nvme-tcp: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- objtool/x86: fix srso mess (git-fixes).\n- objtool/x86: fixup frame-pointer vs rethunk (git-fixes).\n- objtool: union instruction::{call_dest,jump_table} (git-fixes).\n- old-flavors: drop 2.6 kernels. 2.6 based kernels are eol, upgrading from them is no longer suported.\n- pci/aspm: avoid link retraining race (git-fixes).\n- pci/aspm: factor out pcie_wait_for_retrain() (git-fixes).\n- pci/aspm: return 0 or -etimedout from pcie_retrain_link() (git-fixes).\n- pci: acpiphp: reassign resources on bridge if necessary (git-fixes).\n- pci: acpiphp: use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).\n- pci: mark nvidia t4 gpus to avoid bus reset (git-fixes).\n- pci: meson: remove cast between incompatible function type (git-fixes).\n- pci: microchip: correct the ded and sec interrupt bit offsets (git-fixes).\n- pci: microchip: remove cast between incompatible function type (git-fixes).\n- pci: pciehp: use rmw accessors for changing lnkctl (git-fixes).\n- pci: rockchip: remove writes to unused registers (git-fixes).\n- pci: s390: fix use-after-free of pci resources with per-function hotplug (git-fixes).\n- pci: tegra194: fix possible array out of bounds access (git-fixes).\n- pcmcia: rsrc_nonstatic: fix memory leak in nonstatic_release_resource_db() (git-fixes).\n- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).\n- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).\n- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).\n- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).\n- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).\n- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).\n- phy: qcom-snps: use dev_err_probe() to simplify code (git-fixes).\n- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).\n- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).\n- pinctrl: renesas: rza2: add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).\n- platform/x86: dell-sysman: fix reference leak (git-fixes).\n- pm / devfreq: fix leak in devfreq_dev_release() (git-fixes).\n- powerpc/64e: fix kexec build error (bsc#1212091 ltc#199106).\n- powerpc/iommu: do not set failed sg dma_address to dma_mapping_error (bsc#1212091 ltc#199106).\n- powerpc/iommu: fix iommu_table_in_use for a small default dma window case (bsc#1212091 ltc#199106).\n- powerpc/iommu: incorrect ddw table is referenced for sr-iov device (bsc#1212091 ltc#199106).\n- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).\n- powerpc/iommu: tces are incorrectly manipulated with dlpar add/remove of memory (bsc#1212091 ltc#199106).\n- powerpc/kernel/iommu: add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).\n- powerpc/kexec: fix build failure from uninitialised variable (bsc#1212091 ltc#199106).\n- powerpc/mm/altmap: fix altmap boundary check (bsc#1120059 git-fixes).\n- powerpc/pseries/ddw: do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).\n- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add of_node_put() before break (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: allow ddw windows starting at 0x00 (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: check if the default window in use before removing it (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: create huge dma window if no mmio32 is present (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: find existing ddw with given property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: make use of ddw for indirect mapping (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: rename \u0027direct window\u0027 to \u0027dma window\u0027 (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: replace hard-coded page shift (bsc#1212091 ltc#199106). \n- powerpc/pseries/iommu: update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: use correct vfree for it_map (bsc#1212091 ltc#199106).\n- powerpc/pseries: add __init attribute to eligible functions (bsc#1212091 ltc#199106).\n- powerpc/pseries: honour current smt state when dlpar onlining cpus (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/pseries: initialise cpu hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/rtas: block error injection when locked down (bsc#1023051).\n- powerpc/rtas: enture rtas_call is called with mmu enabled (bsc#1023051).\n- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).\n- powerpc/security: fix speculation_store_bypass reporting on power10 (bsc#1188885 ltc#193722 git-fixes).\n- powerpc: add hotplug_smt support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). update config files.\n- powerpc: fix typos in comments (bsc#1212091 ltc#199106).\n- powerpc: move dma64_propname define to a header (bsc#1214297 ltc#197503).\n- pseries/iommu/ddw: fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).\n- pstore/ram: check start of empty przs during init (git-fixes).\n- pwm: add a stub for devm_pwmchip_add() (git-fixes).\n- pwm: meson: fix handling of period/duty if greater than uint_max (git-fixes).\n- pwm: meson: simplify duplicated per-channel tracking (git-fixes).\n- qed: fix scheduling in a tasklet while getting stats (git-fixes).\n- rdma/bnxt_re: fix error handling in probe failure path (git-fixes)\n- rdma/bnxt_re: fix max_qp count for virtual functions (git-fixes)\n- rdma/efa: fix wrong resources deallocation order (git-fixes)\n- rdma/hns: fix cq and qp cache affinity (git-fixes)\n- rdma/hns: fix incorrect post-send with direct wqe of wr-list (git-fixes)\n- rdma/hns: fix port active speed (git-fixes)\n- rdma/irdma: prevent zero-length stag registration (git-fixes)\n- rdma/irdma: replace one-element array with flexible-array member (git-fixes)\n- rdma/mlx5: return the firmware result upon destroying qp/rq (git-fixes)\n- rdma/qedr: remove a duplicate assignment in irdma_query_ah() (git-fixes)\n- rdma/siw: balance the reference of cep-\u003ekref in the error path (git-fixes)\n- rdma/siw: correct wrong debug message (git-fixes)\n- rdma/umem: set iova in odp flow (git-fixes)\n- readme.branch: add miroslav franc as a sle15-sp4 co-maintainer.\n- regmap: rbtree: use alloc_flags for memory allocations (git-fixes).\n- revert \u0027ib/isert: fix incorrect release of isert connection\u0027 (git-fixes)\n- revert \u0027tracing: add \u0027(fault)\u0027 name injection to kernel probes\u0027 (git-fixes).\n- ring-buffer: do not swap cpu_buffer during resize process (git-fixes).\n- ring-buffer: fix deadloop issue on reading trace_pipe (git-fixes).\n- ring-buffer: fix wrong stat of cpu_buffer-\u003eread (git-fixes).\n- rpmsg: glink: add check for kstrdup (git-fixes).\n- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).\n- sched/fair: fix inaccurate tally of ttwu_move_affine (git fixes).\n- sched/fair: use recent_used_cpu to test p-\u003ecpus_ptr (git fixes).\n- sched/psi: use kernfs polling functions for psi trigger polling (bsc#1209799).\n- scsi: bsg: increase number of devices (bsc#1210048).\n- scsi: core: do not wait for quiesce in scsi_device_block() (bsc#1209284).\n- scsi: core: do not wait for quiesce in scsi_stop_queue() (bsc#1209284).\n- scsi: core: improve warning message in scsi_device_block() (bsc#1209284).\n- scsi: core: merge scsi_internal_device_block() and device_block() (bsc#1209284).\n- scsi: rdma/srp: fix residual handling (git-fixes)\n- scsi: sg: increase number of devices (bsc#1210048).\n- scsi: storvsc: always set no_report_opcodes (git-fixes).\n- scsi: storvsc: fix handling of virtual fibre channel timeouts (git-fixes).\n- scsi: storvsc: handle srb status value 0x30 (git-fixes).\n- scsi: storvsc: limit max_sectors for virtual fibre channel devices (git-fixes).\n- scsi: zfcp: defer fc_rport blocking until after adisc response (git-fixes bsc#1214371).\n- selftests/futex: order calls to futex_lock_pi (git-fixes).\n- selftests/harness: actually report skip for signal tests (git-fixes).\n- selftests/resctrl: close perf value read fd on errors (git-fixes).\n- selftests/resctrl: do not leak buffer in fill_cache() (git-fixes).\n- selftests/resctrl: unmount resctrl fs if child fails to run benchmark (git-fixes).\n- selftests/rseq: check if libc rseq support is registered (git-fixes).\n- selftests: forwarding: add a helper to skip test when using veth pairs (git-fixes).\n- selftests: forwarding: ethtool: skip when using veth pairs (git-fixes).\n- selftests: forwarding: ethtool_extended_state: skip when using veth pairs (git-fixes).\n- selftests: forwarding: skip test when no interfaces are specified (git-fixes).\n- selftests: forwarding: switch off timeout (git-fixes).\n- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).\n- selftests: forwarding: tc_actions: use ncat instead of nc (git-fixes).\n- selftests: forwarding: tc_flower: relax success criterion (git-fixes).\n- selftests: mirror_gre_changes: tighten up the ttl test match (git-fixes).\n- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).\n- serial: sc16is7xx: fix bug when first setting gpio direction (git-fixes).\n- serial: sprd: assign sprd_port after initialized to avoid wrong access (git-fixes).\n- serial: sprd: fix dma buffer leak issue (git-fixes).\n- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).\n- sfc: fix crash when reading stats while nic is resetting (git-fixes).\n- smb3: do not send lease break acknowledgment if all file handles have been closed (git-fixes).\n- smb3: do not set ntlmssp_version flag for negotiate not auth request (bsc#1193629).\n- smb: client: fix -wstringop-overflow issues (bsc#1193629).\n- smb: client: fix dfs link mount against w2k8 (bsc#1212142).\n- smb: client: fix null auth (git-fixes).\n- soc: aspeed: socinfo: add kfree for kstrdup (git-fixes).\n- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).\n- soundwire: fix enumeration completion (git-fixes).\n- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).\n- supported.conf: fix typos for -!optional markers\n- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).\n- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).\n- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).\n- target_core_rbd: remove snapshot existence validation code (bsc#1212857).\n- thunderbolt: read retimer nvm authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).\n- timers: add shutdown mechanism to the internal functions (bsc#1213970).\n- timers: provide timer_shutdown[_sync]() (bsc#1213970).\n- timers: rename del_timer() to timer_delete() (bsc#1213970).\n- timers: rename del_timer_sync() to timer_delete_sync() (bsc#1213970).\n- timers: replace bug_on()s (bsc#1213970).\n- timers: silently ignore timers with a null function (bsc#1213970).\n- timers: split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).\n- timers: update kernel-doc for various functions (bsc#1213970).\n- timers: use del_timer_sync() even on up (bsc#1213970).\n- tracing/histograms: add histograms to hist_vars if they have referenced variables (git-fixes).\n- tracing/histograms: return an error if we fail to add histogram to hist_vars list (git-fixes).\n- tracing/probes: fix not to count error code to total length (git-fixes).\n- tracing/probes: fix to avoid double count of the string length on the array (git-fixes).\n- tracing/probes: fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).\n- tracing/probes: fix to update dynamic data counter if fetcharg uses it (git-fixes).\n- tracing: fix cpu buffers unavailable due to \u0027record_disabled\u0027 missed (git-fixes).\n- tracing: fix memleak due to race between current_tracer and trace (git-fixes).\n- tracing: fix memory leak of iter-\u003etemp when reading trace_pipe (git-fixes).\n- tracing: fix null pointer dereference in tracing_err_log_open() (git-fixes).\n- tracing: fix warning in trace_buffered_event_disable() (git-fixes).\n- tty: fix hang on tty device with no_room set (git-fixes).\n- tty: n_gsm: fix the uaf caused by race condition in gsm_cleanup_mux (git-fixes).\n- tty: serial: fsl_lpuart: add i.mxrt1050 support (git-fixes).\n- tty: serial: fsl_lpuart: clear the error flags by writing 1 for lpuart32 platforms (git-fixes).\n- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).\n- tty: serial: fsl_lpuart: reduce rx watermark to 0 on ls1028a (git-fixes).\n- ubifs: fix memleak when insert_old_idx() failed (git-fixes).\n- update patches.suse/cpufreq-intel_pstate-fix-cpu-pstate.turbo_freq-initi (git-fixes bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- usb-storage: alauda: fix uninit-value in alauda_check_media() (git-fixes).\n- usb: chipidea: imx: add missing usb phy dpdm wakeup setting (git-fixes).\n- usb: chipidea: imx: do not request qos for imx8ulp (git-fixes).\n- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).\n- usb: common: usb-conn-gpio: prevent bailing out if initial role is none (git-fixes).\n- usb: dwc3: fix typos in gadget.c (git-fixes).\n- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).\n- usb: dwc3: properly handle processing of pending events (git-fixes).\n- usb: gadget: f_mass_storage: fix unused variable warning (git-fixes).\n- usb: gadget: fix the memory leak in raw_gadget driver (git-fixes).\n- usb: gadget: u_serial: avoid spinlock recursion in __gs_console_push (git-fixes).\n- usb: ohci-at91: fix the unhandle interrupt when resume (git-fixes).\n- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).\n- usb: quirks: add quirk for focusrite scarlett (git-fixes).\n- usb: serial: option: add quectel ec200a module support (git-fixes).\n- usb: serial: option: support quectel em060k_128 (git-fixes).\n- usb: serial: simple: add kaufmann rks+can vcp (git-fixes).\n- usb: serial: simple: sort driver entries (git-fixes).\n- usb: typec: altmodes/displayport: signal hpd when configuring pin assignment (git-fixes).\n- usb: typec: tcpm: fix response to vsafe0v event (git-fixes).\n- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).\n- usb: zaurus: add id for a-300/b-500/c-700 (git-fixes).\n- watchdog: sp5100_tco: support hygon fch/sch (server controller hub) (git-fixes).\n- wifi: ath10k: use rmw accessors for changing lnkctl (git-fixes).\n- wifi: ath11k: use rmw accessors for changing lnkctl (git-fixes).\n- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).\n- wifi: ath9k: protect wmi command response buffer replacement with a lock (git-fixes).\n- wifi: ath9k: use is_err() with debugfs_create_dir() (git-fixes).\n- wifi: cfg80211: fix return value in scan logic (git-fixes).\n- wifi: cfg80211: fix sband iftype data lookup for ap_vlan (git-fixes).\n- wifi: mt76: mt7615: do not advertise 5 ghz on first phy of mt7615d (dbdc) (git-fixes).\n- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).\n- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).\n- wifi: mt76: testmode: add nla_policy for mt76_tm_attr_tx_length (git-fixes).\n- wifi: mwifiex: avoid possible null skb pointer dereference (git-fixes).\n- wifi: mwifiex: fix error recovery in pcie buffer descriptor management (git-fixes).\n- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).\n- wifi: mwifiex: fix missed return in oob checks failed path (git-fixes).\n- wifi: mwifiex: fix oob and integer underflow when rx packets (git-fixes).\n- wifi: nl80211/cfg80211: add forgotten nla_policy for bss color attribute (git-fixes).\n- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).\n- wifi: rtw89: debug: fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).\n- x86/alternative: make custom return thunk unconditional (git-fixes).\n- x86/cpu/amd: disable xsaves on amd family 0x17 (git-fixes).\n- x86/cpu/kvm: provide untrain_ret_vm (git-fixes).\n- x86/cpu: clean up srso return thunk mess (git-fixes).\n- x86/cpu: cleanup the untrain mess (git-fixes).\n- x86/cpu: fix __x86_return_thunk symbol type (git-fixes).\n- x86/cpu: fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).\n- x86/cpu: rename original retbleed methods (git-fixes).\n- x86/cpu: rename srso_(.*)_alias to srso_alias_\\1 (git-fixes).\n- x86/mce: make sure logged mces are processed after sysfs update (git-fixes).\n- x86/retpoline,kprobes: fix position of thunk sections with config_lto_clang (git-fixes).\n- x86/retpoline,kprobes: skip optprobe check for indirect jumps with retpolines and ibt (git-fixes).\n- x86/retpoline: do not clobber rflags during srso_safe_ret() (git-fixes).\n- x86/speculation: add cpu_show_gds() prototype (git-fixes).\n- x86/speculation: mark all skylake cpus as vulnerable to gds (git-fixes).\n- x86/srso: correct the mitigation status when smt is disabled (git-fixes).\n- x86/srso: disable the mitigation on unaffected configurations (git-fixes).\n- x86/srso: explain the untraining sequences a bit more (git-fixes).\n- x86/srso: fix build breakage with the llvm linker (git-fixes).\n- x86/srso: fix return thunks in generated code (git-fixes).\n- x86/static_call: fix __static_call_fixup() (git-fixes).\n- xfs: fix sb write verify for lazysbcount (bsc#1214661).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2023-3600,SUSE-SLE-Micro-5.3-2023-3600,SUSE-SLE-Micro-5.4-2023-3600,SUSE-SLE-Module-Live-Patching-15-SP4-2023-3600,SUSE-SLE-Module-RT-15-SP4-2023-3600,openSUSE-SLE-15.4-2023-3600",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_3600-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2023:3600-1",
"url": "https://www.suse.com/support/update/announcement/2023/suse-su-20233600-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2023:3600-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2023-September/031433.html"
},
{
"category": "self",
"summary": "SUSE Bug 1023051",
"url": "https://bugzilla.suse.com/1023051"
},
{
"category": "self",
"summary": "SUSE Bug 1120059",
"url": "https://bugzilla.suse.com/1120059"
},
{
"category": "self",
"summary": "SUSE Bug 1177719",
"url": "https://bugzilla.suse.com/1177719"
},
{
"category": "self",
"summary": "SUSE Bug 1188885",
"url": "https://bugzilla.suse.com/1188885"
},
{
"category": "self",
"summary": "SUSE Bug 1193629",
"url": "https://bugzilla.suse.com/1193629"
},
{
"category": "self",
"summary": "SUSE Bug 1194869",
"url": "https://bugzilla.suse.com/1194869"
},
{
"category": "self",
"summary": "SUSE Bug 1205462",
"url": "https://bugzilla.suse.com/1205462"
},
{
"category": "self",
"summary": "SUSE Bug 1208902",
"url": "https://bugzilla.suse.com/1208902"
},
{
"category": "self",
"summary": "SUSE Bug 1208949",
"url": "https://bugzilla.suse.com/1208949"
},
{
"category": "self",
"summary": "SUSE Bug 1209284",
"url": "https://bugzilla.suse.com/1209284"
},
{
"category": "self",
"summary": "SUSE Bug 1209799",
"url": "https://bugzilla.suse.com/1209799"
},
{
"category": "self",
"summary": "SUSE Bug 1210048",
"url": "https://bugzilla.suse.com/1210048"
},
{
"category": "self",
"summary": "SUSE Bug 1210448",
"url": "https://bugzilla.suse.com/1210448"
},
{
"category": "self",
"summary": "SUSE Bug 1212091",
"url": "https://bugzilla.suse.com/1212091"
},
{
"category": "self",
"summary": "SUSE Bug 1212142",
"url": "https://bugzilla.suse.com/1212142"
},
{
"category": "self",
"summary": "SUSE Bug 1212526",
"url": "https://bugzilla.suse.com/1212526"
},
{
"category": "self",
"summary": "SUSE Bug 1212857",
"url": "https://bugzilla.suse.com/1212857"
},
{
"category": "self",
"summary": "SUSE Bug 1212873",
"url": "https://bugzilla.suse.com/1212873"
},
{
"category": "self",
"summary": "SUSE Bug 1213026",
"url": "https://bugzilla.suse.com/1213026"
},
{
"category": "self",
"summary": "SUSE Bug 1213123",
"url": "https://bugzilla.suse.com/1213123"
},
{
"category": "self",
"summary": "SUSE Bug 1213546",
"url": "https://bugzilla.suse.com/1213546"
},
{
"category": "self",
"summary": "SUSE Bug 1213580",
"url": "https://bugzilla.suse.com/1213580"
},
{
"category": "self",
"summary": "SUSE Bug 1213601",
"url": "https://bugzilla.suse.com/1213601"
},
{
"category": "self",
"summary": "SUSE Bug 1213666",
"url": "https://bugzilla.suse.com/1213666"
},
{
"category": "self",
"summary": "SUSE Bug 1213757",
"url": "https://bugzilla.suse.com/1213757"
},
{
"category": "self",
"summary": "SUSE Bug 1213759",
"url": "https://bugzilla.suse.com/1213759"
},
{
"category": "self",
"summary": "SUSE Bug 1213916",
"url": "https://bugzilla.suse.com/1213916"
},
{
"category": "self",
"summary": "SUSE Bug 1213921",
"url": "https://bugzilla.suse.com/1213921"
},
{
"category": "self",
"summary": "SUSE Bug 1213927",
"url": "https://bugzilla.suse.com/1213927"
},
{
"category": "self",
"summary": "SUSE Bug 1213946",
"url": "https://bugzilla.suse.com/1213946"
},
{
"category": "self",
"summary": "SUSE Bug 1213968",
"url": "https://bugzilla.suse.com/1213968"
},
{
"category": "self",
"summary": "SUSE Bug 1213970",
"url": "https://bugzilla.suse.com/1213970"
},
{
"category": "self",
"summary": "SUSE Bug 1213971",
"url": "https://bugzilla.suse.com/1213971"
},
{
"category": "self",
"summary": "SUSE Bug 1214000",
"url": "https://bugzilla.suse.com/1214000"
},
{
"category": "self",
"summary": "SUSE Bug 1214019",
"url": "https://bugzilla.suse.com/1214019"
},
{
"category": "self",
"summary": "SUSE Bug 1214120",
"url": "https://bugzilla.suse.com/1214120"
},
{
"category": "self",
"summary": "SUSE Bug 1214149",
"url": "https://bugzilla.suse.com/1214149"
},
{
"category": "self",
"summary": "SUSE Bug 1214180",
"url": "https://bugzilla.suse.com/1214180"
},
{
"category": "self",
"summary": "SUSE Bug 1214238",
"url": "https://bugzilla.suse.com/1214238"
},
{
"category": "self",
"summary": "SUSE Bug 1214285",
"url": "https://bugzilla.suse.com/1214285"
},
{
"category": "self",
"summary": "SUSE Bug 1214297",
"url": "https://bugzilla.suse.com/1214297"
},
{
"category": "self",
"summary": "SUSE Bug 1214299",
"url": "https://bugzilla.suse.com/1214299"
},
{
"category": "self",
"summary": "SUSE Bug 1214350",
"url": "https://bugzilla.suse.com/1214350"
},
{
"category": "self",
"summary": "SUSE Bug 1214368",
"url": "https://bugzilla.suse.com/1214368"
},
{
"category": "self",
"summary": "SUSE Bug 1214370",
"url": "https://bugzilla.suse.com/1214370"
},
{
"category": "self",
"summary": "SUSE Bug 1214371",
"url": "https://bugzilla.suse.com/1214371"
},
{
"category": "self",
"summary": "SUSE Bug 1214372",
"url": "https://bugzilla.suse.com/1214372"
},
{
"category": "self",
"summary": "SUSE Bug 1214380",
"url": "https://bugzilla.suse.com/1214380"
},
{
"category": "self",
"summary": "SUSE Bug 1214386",
"url": "https://bugzilla.suse.com/1214386"
},
{
"category": "self",
"summary": "SUSE Bug 1214392",
"url": "https://bugzilla.suse.com/1214392"
},
{
"category": "self",
"summary": "SUSE Bug 1214393",
"url": "https://bugzilla.suse.com/1214393"
},
{
"category": "self",
"summary": "SUSE Bug 1214397",
"url": "https://bugzilla.suse.com/1214397"
},
{
"category": "self",
"summary": "SUSE Bug 1214428",
"url": "https://bugzilla.suse.com/1214428"
},
{
"category": "self",
"summary": "SUSE Bug 1214451",
"url": "https://bugzilla.suse.com/1214451"
},
{
"category": "self",
"summary": "SUSE Bug 1214659",
"url": "https://bugzilla.suse.com/1214659"
},
{
"category": "self",
"summary": "SUSE Bug 1214661",
"url": "https://bugzilla.suse.com/1214661"
},
{
"category": "self",
"summary": "SUSE Bug 1214729",
"url": "https://bugzilla.suse.com/1214729"
},
{
"category": "self",
"summary": "SUSE Bug 1214742",
"url": "https://bugzilla.suse.com/1214742"
},
{
"category": "self",
"summary": "SUSE Bug 1214743",
"url": "https://bugzilla.suse.com/1214743"
},
{
"category": "self",
"summary": "SUSE Bug 1214756",
"url": "https://bugzilla.suse.com/1214756"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2007 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2007/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-20588 page",
"url": "https://www.suse.com/security/cve/CVE-2023-20588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-34319 page",
"url": "https://www.suse.com/security/cve/CVE-2023-34319/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-3610 page",
"url": "https://www.suse.com/security/cve/CVE-2023-3610/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-37453 page",
"url": "https://www.suse.com/security/cve/CVE-2023-37453/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-3772 page",
"url": "https://www.suse.com/security/cve/CVE-2023-3772/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-3863 page",
"url": "https://www.suse.com/security/cve/CVE-2023-3863/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4128 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4128/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4133 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4134 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4147 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4147/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4194 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4194/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4273 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4273/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4387 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4387/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4459 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4459/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4569 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4569/"
}
],
"title": "Security update for the Linux Kernel",
"tracking": {
"current_release_date": "2023-09-21T10:18:09Z",
"generator": {
"date": "2023-09-21T10:18:09Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2023:3600-1",
"initial_release_date": "2023-09-21T10:18:09Z",
"revision_history": [
{
"date": "2023-09-21T10:18:09Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64",
"product": {
"name": "kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64",
"product_id": "kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Live Patching 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Live Patching 15 SP4",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-live-patching:15:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP4",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
},
"product_reference": "kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 15 SP4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-2007",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2007"
}
],
"notes": [
{
"category": "general",
"text": "The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2007",
"url": "https://www.suse.com/security/cve/CVE-2023-2007"
},
{
"category": "external",
"summary": "SUSE Bug 1210448 for CVE-2023-2007",
"url": "https://bugzilla.suse.com/1210448"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "moderate"
}
],
"title": "CVE-2023-2007"
},
{
"cve": "CVE-2023-20588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-20588"
}
],
"notes": [
{
"category": "general",
"text": "\nA division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. \n\n\n\n\n\n\n\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-20588",
"url": "https://www.suse.com/security/cve/CVE-2023-20588"
},
{
"category": "external",
"summary": "SUSE Bug 1213927 for CVE-2023-20588",
"url": "https://bugzilla.suse.com/1213927"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "moderate"
}
],
"title": "CVE-2023-20588"
},
{
"cve": "CVE-2023-34319",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-34319"
}
],
"notes": [
{
"category": "general",
"text": "The fix for XSA-423 added logic to Linux\u0027es netback driver to deal with\na frontend splitting a packet in a way such that not all of the headers\nwould come in one piece. Unfortunately the logic introduced there\ndidn\u0027t account for the extreme case of the entire packet being split\ninto as many pieces as permitted by the protocol, yet still being\nsmaller than the area that\u0027s specially dealt with to keep all (possible)\nheaders together. Such an unusual packet would therefore trigger a\nbuffer overrun in the driver.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-34319",
"url": "https://www.suse.com/security/cve/CVE-2023-34319"
},
{
"category": "external",
"summary": "SUSE Bug 1213546 for CVE-2023-34319",
"url": "https://bugzilla.suse.com/1213546"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "moderate"
}
],
"title": "CVE-2023-34319"
},
{
"cve": "CVE-2023-3610",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-3610"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability in the Linux kernel\u0027s netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nFlaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.\n\nWe recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-3610",
"url": "https://www.suse.com/security/cve/CVE-2023-3610"
},
{
"category": "external",
"summary": "SUSE Bug 1213580 for CVE-2023-3610",
"url": "https://bugzilla.suse.com/1213580"
},
{
"category": "external",
"summary": "SUSE Bug 1213584 for CVE-2023-3610",
"url": "https://bugzilla.suse.com/1213584"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "important"
}
],
"title": "CVE-2023-3610"
},
{
"cve": "CVE-2023-37453",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-37453"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-37453",
"url": "https://www.suse.com/security/cve/CVE-2023-37453"
},
{
"category": "external",
"summary": "SUSE Bug 1213123 for CVE-2023-37453",
"url": "https://bugzilla.suse.com/1213123"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "moderate"
}
],
"title": "CVE-2023-37453"
},
{
"cve": "CVE-2023-3772",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-3772"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-3772",
"url": "https://www.suse.com/security/cve/CVE-2023-3772"
},
{
"category": "external",
"summary": "SUSE Bug 1213666 for CVE-2023-3772",
"url": "https://bugzilla.suse.com/1213666"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "moderate"
}
],
"title": "CVE-2023-3772"
},
{
"cve": "CVE-2023-3863",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-3863"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-3863",
"url": "https://www.suse.com/security/cve/CVE-2023-3863"
},
{
"category": "external",
"summary": "SUSE Bug 1213601 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1213601"
},
{
"category": "external",
"summary": "SUSE Bug 1213603 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1213603"
},
{
"category": "external",
"summary": "SUSE Bug 1217444 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1217444"
},
{
"category": "external",
"summary": "SUSE Bug 1217531 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1217531"
},
{
"category": "external",
"summary": "SUSE Bug 1219704 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1219704"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "moderate"
}
],
"title": "CVE-2023-3863"
},
{
"cve": "CVE-2023-4128",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4128"
}
],
"notes": [
{
"category": "general",
"text": "** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Reason: This record is a duplicate of CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Notes: All CVE users should reference CVE-2023-4206, CVE-2023-4207, CVE-2023-4208 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4128",
"url": "https://www.suse.com/security/cve/CVE-2023-4128"
},
{
"category": "external",
"summary": "SUSE Bug 1214149 for CVE-2023-4128",
"url": "https://bugzilla.suse.com/1214149"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "important"
}
],
"title": "CVE-2023-4128"
},
{
"cve": "CVE-2023-4133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4133"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug occurs when the cxgb4 device is detaching due to a possible rearming of the flower_stats_timer from the work queue. This flaw allows a local user to crash the system, causing a denial of service condition.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4133",
"url": "https://www.suse.com/security/cve/CVE-2023-4133"
},
{
"category": "external",
"summary": "SUSE Bug 1213970 for CVE-2023-4133",
"url": "https://bugzilla.suse.com/1213970"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "moderate"
}
],
"title": "CVE-2023-4133"
},
{
"cve": "CVE-2023-4134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4134"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel. This issue occurs in the device cleanup routine due to a possible rearming of the watchdog_timer from the workqueue. This could allow a local user to crash the system, causing a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4134",
"url": "https://www.suse.com/security/cve/CVE-2023-4134"
},
{
"category": "external",
"summary": "SUSE Bug 1213971 for CVE-2023-4134",
"url": "https://bugzilla.suse.com/1213971"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "moderate"
}
],
"title": "CVE-2023-4134"
},
{
"cve": "CVE-2023-4147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4147"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free flaw was found in the Linux kernel\u0027s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4147",
"url": "https://www.suse.com/security/cve/CVE-2023-4147"
},
{
"category": "external",
"summary": "SUSE Bug 1213968 for CVE-2023-4147",
"url": "https://bugzilla.suse.com/1213968"
},
{
"category": "external",
"summary": "SUSE Bug 1215118 for CVE-2023-4147",
"url": "https://bugzilla.suse.com/1215118"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "important"
}
],
"title": "CVE-2023-4147"
},
{
"cve": "CVE-2023-4194",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4194"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 (\"tun: tun_chr_open(): correctly initialize socket uid\"), - 66b2c338adce (\"tap: tap_open(): correctly initialize socket uid\"), pass \"inode-\u003ei_uid\" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4194",
"url": "https://www.suse.com/security/cve/CVE-2023-4194"
},
{
"category": "external",
"summary": "SUSE Bug 1214019 for CVE-2023-4194",
"url": "https://bugzilla.suse.com/1214019"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "moderate"
}
],
"title": "CVE-2023-4194"
},
{
"cve": "CVE-2023-4273",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4273"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file name reconstruction function, which is responsible for reading file name entries from a directory index and merging file name parts belonging to one file into a single long file name. Since the file name characters are copied into a stack variable, a local privileged attacker could use this flaw to overflow the kernel stack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4273",
"url": "https://www.suse.com/security/cve/CVE-2023-4273"
},
{
"category": "external",
"summary": "SUSE Bug 1214120 for CVE-2023-4273",
"url": "https://bugzilla.suse.com/1214120"
},
{
"category": "external",
"summary": "SUSE Bug 1214123 for CVE-2023-4273",
"url": "https://bugzilla.suse.com/1214123"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "important"
}
],
"title": "CVE-2023-4273"
},
{
"cve": "CVE-2023-4387",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4387"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware\u0027s vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash the system due to a double-free while cleaning up vmxnet3_rq_cleanup_all, which could also lead to a kernel information leak problem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4387",
"url": "https://www.suse.com/security/cve/CVE-2023-4387"
},
{
"category": "external",
"summary": "SUSE Bug 1214350 for CVE-2023-4387",
"url": "https://bugzilla.suse.com/1214350"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "moderate"
}
],
"title": "CVE-2023-4387"
},
{
"cve": "CVE-2023-4459",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4459"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during cleanup.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4459",
"url": "https://www.suse.com/security/cve/CVE-2023-4459"
},
{
"category": "external",
"summary": "SUSE Bug 1214451 for CVE-2023-4459",
"url": "https://bugzilla.suse.com/1214451"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "moderate"
}
],
"title": "CVE-2023-4459"
},
{
"cve": "CVE-2023-4569",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4569"
}
],
"notes": [
{
"category": "general",
"text": "A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to cause double-deactivations of catchall elements, which can result in a memory leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4569",
"url": "https://www.suse.com/security/cve/CVE-2023-4569"
},
{
"category": "external",
"summary": "SUSE Bug 1214729 for CVE-2023-4569",
"url": "https://bugzilla.suse.com/1214729"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "important"
}
],
"title": "CVE-2023-4569"
}
]
}
SUSE-SU-2023:3600-2
Vulnerability from csaf_suse - Published: 2023-09-21 10:18 - Updated: 2023-09-21 10:18Summary
Security update for the Linux Kernel
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel
Description of the patch:
The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).
- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).
- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).
- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).
- CVE-2023-37453: Fixed oversight in SuperSpeed initialization (bsc#1213123).
- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).
- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).
- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).
- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).
- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).
- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).
- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).
- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).
- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).
- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).
- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).
The following non-security bugs were fixed:
- acpi: processor: perflib: avoid updating frequency qos unnecessarily (git-fixes).
- acpi: processor: perflib: use the 'no limit' frequency qos (git-fixes).
- acpi: x86: s2idle: fix a logic error parsing amd constraints table (git-fixes).
- alsa: ac97: fix possible error value of *rac97 (git-fixes).
- alsa: hda/cs8409: support new dell dolphin variants (git-fixes).
- alsa: hda/realtek - remodified 3k pull low procedure (git-fixes).
- alsa: hda/realtek: add quirk for hp victus 16-d1xxx to enable mute led (git-fixes).
- alsa: hda/realtek: add quirk for mute leds on hp envy x360 15-eu0xxx (git-fixes).
- alsa: hda/realtek: add quirks for hp g11 laptops (git-fixes).
- alsa: hda/realtek: switch dell oasis models to use spi (git-fixes).
- alsa: pcm: fix missing fixup call in compat hw_refine ioctl (git-fixes).
- alsa: usb-audio: add support for mythware xa001au capture and playback interfaces (git-fixes).
- alsa: usb-audio: fix init call orders for uac1 (git-fixes).
- alsa: ymfpci: fix the missing snd_card_free() call at probe error (git-fixes).
- amba: bus: fix refcount leak (git-fixes).
- arm64: dts: imx8mn-var-som: add missing pull-up for onboard phy reset pinmux (git-fixes).
- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).
- arm64: dts: rockchip: disable hs400 for emmc on rock pi 4 (git-fixes).
- arm: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix usb related warnings (git-fixes).
- arm: dts: imx6sll: fixup of operating points (git-fixes).
- arm: spear: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- asoc: lower 'no backend dais enabled for ... port' log severity (git-fixes).
- asoc: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).
- asoc: rt5665: add missed regulator_bulk_disable (git-fixes).
- asoc: sof: intel: fix soundwire/hdaudio mutual exclusion (git-fixes).
- asoc: stac9766: fix build errors with regmap_ac97 (git-fixes).
- asoc: tegra: fix sfc conversion for few rates (git-fixes).
- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).
- backlight/bd6107: compare against struct fb_info.device (git-fixes).
- backlight/gpio_backlight: compare against struct fb_info.device (git-fixes).
- backlight/lv5207lp: compare against struct fb_info.device (git-fixes).
- batman-adv: do not get eth header before batadv_check_management_packet (git-fixes).
- batman-adv: do not increase mtu when set by user (git-fixes).
- batman-adv: fix batadv_v_ogm_aggr_send memory leak (git-fixes).
- batman-adv: fix tt global entry leak when client roamed back (git-fixes).
- batman-adv: hold rtnl lock during mtu update via netlink (git-fixes).
- batman-adv: trigger events for auto adjusted mtu (git-fixes).
- bluetooth: btusb: add mt7922 bluetooth id for the asus ally (git-fixes).
- bluetooth: btusb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- bluetooth: fix potential use-after-free when clear keys (git-fixes).
- bluetooth: l2cap: fix use-after-free (git-fixes).
- bluetooth: l2cap: fix use-after-free in l2cap_sock_ready_cb (git-fixes).
- bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).
- bluetooth: remove unused declaration amp_read_loc_info() (git-fixes).
- bnx2x: fix page fault following eeh recovery (bsc#1214299).
- bpf: disable preemption in bpf_event_output (git-fixes).
- bus: ti-sysc: fix build warning for 64-bit build (git-fixes).
- bus: ti-sysc: fix cast to enum warning (git-fixes).
- bus: ti-sysc: flush posted write on enable before reset (git-fixes).
- can: gs_usb: gs_usb_receive_bulk_callback(): count rx overflow errors also in case of oom (git-fixes).
- ceph: defer stopping mdsc delayed_work (bsc#1214392).
- ceph: do not check for quotas on mds stray dirs (bsc#1214238).
- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).
- check-for-config-changes: ignore builtin_return_address_strips_pac (bsc#1214380). gcc7 on sle 15 does not support this while later gcc does.
- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).
- cifs: allow dumping keys for directories too (bsc#1193629).
- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).
- cifs: if deferred close is disabled then close files immediately (git-fixes).
- cifs: is_network_name_deleted should return a bool (bsc#1193629).
- cifs: update internal module version number for cifs.ko (bsc#1193629).
- clk: fix slab-out-of-bounds error in devm_clk_release() (git-fixes).
- clk: fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes).
- clk: imx8mp: fix sai4 clock (git-fixes).
- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).
- clk: imx: pll14xx: dynamically configure pll for 393216000/361267200hz (git-fixes).
- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).
- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).
- clk: qcom: gcc-sc7180: fix up gcc_sdcc2_apps_clk_src (git-fixes).
- clk: qcom: gcc-sm8250: fix gcc_sdcc2_apps_clk_src (git-fixes).
- clk: sunxi-ng: modify mismatched function name (git-fixes).
- clocksource/drivers/arm_arch_timer: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource/drivers/sp804: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- config_nvme_verbose_errors=y gone with a82baa8083b
- config_printk_safe_log_buf_shift=13 gone with 7e152d55123
- cpu/smt: allow enabling partial smt states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: move smt prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/smt: store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpufreq: fix the race condition while updating the transition_task of policy (git-fixes).
- cpufreq: intel_pstate: adjust balance_performance epp for sapphire rapids (bsc#1214659).
- cpufreq: intel_pstate: enable hwp io boost for all servers (bsc#1208949 jsc#ped-6003 jsc#ped-6004).
- cpufreq: intel_pstate: fix scaling for hybrid-capable systems with disabled e-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- cpufreq: intel_pstate: hybrid: rework hwp calibration (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- cpufreq: intel_pstate: hybrid: use known scaling factor for p-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- cpufreq: intel_pstate: read all msrs on the target cpu (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- created new preempt kernel flavor configs are cloned from the respective $arch/default configs. all changed configs appart from config_preempt->y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. tree_rcu has been also changed to preempt_rcu which is the default implementation for preempt kernel.
- crypto: caam - fix unchecked return value error (git-fixes).
- crypto: stm32 - properly handle pm_runtime_get failing (git-fixes).
- dma-buf/sw_sync: avoid recursive lock during fence signal (git-fixes).
- dma-buf/sync_file: fix docs syntax (git-fixes).
- dmaengine: idxd: modify the dependence of attribute pasid_enabled (git-fixes).
- dmaengine: mcf-edma: fix a potential un-allocated memory access (git-fixes).
- dmaengine: pl330: return dma_paused when transaction is paused (git-fixes).
- dmaengine: ste_dma40: add missing irq check in d40_probe (git-fixes).
- docs/process/howto: replace c89 with c11 (bsc#1214756).
- docs: kernel-parameters: refer to the correct bitmap function (git-fixes).
- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).
- docs: printk-formats: fix hex printing of signed values (git-fixes).
- documentation: devices.txt: fix minors for ttycpm* (git-fixes).
- documentation: devices.txt: remove ttyioc* (git-fixes).
- documentation: devices.txt: remove ttysioc* (git-fixes).
- driver core: test_async: fix an error code (git-fixes).
- drivers: clk: keystone: fix parameter judgment in _of_pll_clk_init() (git-fixes).
- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).
- drm/amd/display: check attr flag before set cursor degamma on dcn3+ (git-fixes).
- drm/amd/display: check tg is non-null before checking if enabled (git-fixes).
- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).
- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).
- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).
- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).
- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).
- drm/amdgpu: fix potential fence use-after-free v2 (git-fixes).
- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).
- drm/amdgpu: use rmw accessors for changing lnkctl (git-fixes).
- drm/armada: fix off-by-one error in armada_overlay_get_property() (git-fixes).
- drm/ast: fix dram init on ast2200 (git-fixes).
- drm/atomic-helper: update reference to drm_crtc_force_disable_all() (git-fixes).
- drm/bridge: anx7625: drop device lock before drm_helper_hpd_irq_event() (git-fixes).
- drm/bridge: fix -wunused-const-variable= warning (git-fixes).
- drm/bridge: tc358764: fix debug print parameter order (git-fixes).
- drm/etnaviv: fix dumping of active mmu context (git-fixes).
- drm/mediatek: fix dereference before null check (git-fixes).
- drm/mediatek: fix potential memory leak if vmap() fail (git-fixes).
- drm/msm/a2xx: call adreno_gpu_init() earlier (git-fixes).
- drm/msm/mdp5: do not leak some plane state (git-fixes).
- drm/msm: update dev core dump to not print backwards (git-fixes).
- drm/nouveau/disp: revert a null check inside nouveau_connector_get_modes (git-fixes).
- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).
- drm/panel: simple: add missing connector type and pixel format for auo t215hvn01 (git-fixes).
- drm/panel: simple: fix auo g121ean01 panel timings according to the docs (git-fixes).
- drm/qxl: fix uaf on handle creation (git-fixes).
- drm/radeon: use rmw accessors for changing lnkctl (git-fixes).
- drm/rockchip: do not spam logs in atomic check (git-fixes).
- drm/shmem-helper: reset vma->vm_ops before calling dma_buf_mmap() (git-fixes).
- drm/tegra: dpaux: fix incorrect return value of platform_get_irq (git-fixes).
- drm/ttm: check null pointer before accessing when swapping (git-fixes).
- drm/ttm: never consider pinned bos for eviction&swap (git-fixes).
- drm/vmwgfx: fix shader stage validation (git-fixes).
- drm: adv7511: fix low refresh rate register for adv7533/5 (git-fixes).
- drm: xlnx: zynqmp_dpsub: add missing check for dma_set_mask (git-fixes).
- drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
- drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).
- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).
- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).
- e1000: fix typos in comments (jsc#ped-5738).
- e1000: remove unnecessary use of kmap_atomic() (jsc#ped-5738).
- e1000: switch to napi_build_skb() (jsc#ped-5738).
- e1000: switch to napi_consume_skb() (jsc#ped-5738).
- enable analog devices industrial ethernet phy driver (jsc#ped-4759)
- exfat: fix unexpected eof while reading dir (bsc#1214000).
- exfat: release s_lock before calling dir_emit() (bsc#1214000).
- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).
- fbdev/ep93xx-fb: do not assign to struct fb_info.dev (git-fixes).
- fbdev: fix potential oob read in fast_imageblit() (git-fixes).
- fbdev: fix sys_imageblit() for arbitrary image widths (git-fixes).
- fbdev: improve performance of sys_imageblit() (git-fixes).
- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
- file: reinstate f_pos locking optimization for regular files (bsc#1213759).
- firmware: arm_scmi: drop of node reference in the transport channel setup (git-fixes).
- firmware: cs_dsp: fix new control name check (git-fixes).
- firmware: meson_sm: fix to avoid potential null pointer dereference (git-fixes).
- firmware: stratix10-svc: fix an null vs is_err() bug in probe (git-fixes).
- fs/sysv: null check to prevent null-ptr-deref bug (git-fixes).
- ftrace: fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).
- gpio: mvebu: fix irq domain leak (git-fixes).
- gpio: mvebu: make use of devm_pwmchip_add (git-fixes).
- gpio: tps68470: make tps68470_gpio_output() always set the initial value (git-fixes).
- hid: add quirk for 03f0:464a hp elite presenter mouse (git-fixes).
- hid: logitech-dj: fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).
- hid: logitech-hidpp: add usb and bluetooth ids for the logitech g915 tkl keyboard (git-fixes).
- hid: multitouch: correct devm device reference for hidinput input_dev name (git-fixes).
- hid: wacom: remove the battery when the ekr is off (git-fixes).
- hwmon: (pmbus/bel-pfe) enable pmbus_skip_status_check for pfe1100 (git-fixes).
- hwmon: (tmp513) fix the channel number in tmp51x_is_visible() (git-fixes).
- hwpoison: offline support: fix spelling in documentation/abi/ (git-fixes).
- hwrng: iproc-rng200 - implement suspend and resume calls (git-fixes).
- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).
- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
- i2c: bcm-iproc: fix bcm_iproc_i2c_isr deadlock issue (git-fixes).
- i2c: delete error messages for failed memory allocations (git-fixes).
- i2c: designware: correct length byte validation logic (git-fixes).
- i2c: designware: handle invalid smbus block data response length value (git-fixes).
- i2c: hisi: only handle the interrupt of the driver's transfer (git-fixes).
- i2c: improve size determinations (git-fixes).
- i2c: nomadik: remove a useless call in the remove function (git-fixes).
- i2c: nomadik: remove unnecessary goto label (git-fixes).
- i2c: nomadik: use devm_clk_get_enabled() (git-fixes).
- i40e: fix an null vs is_err() bug for debugfs_create_dir() (git-fixes).
- iavf: fix potential races for fdir filters (git-fixes).
- ib/hfi1: fix possible panic during hotplug remove (git-fixes)
- ib/uverbs: fix an potential error pointer dereference (git-fixes)
- ice: fix crash by keep old cfg when update tcs more than queues (git-fixes).
- ice: fix max_rate check while configuring tx rate limits (git-fixes).
- ice: fix memory management in ice_ethtool_fdir.c (git-fixes).
- ice: fix rdma vsi removal during queue rebuild (git-fixes).
- iio: adc: ina2xx: avoid null pointer dereference on of device match (git-fixes).
- iio: adc: stx104: implement and utilize register structures (git-fixes).
- iio: adc: stx104: utilize iomap interface (git-fixes).
- iio: cros_ec: fix the allocation size for cros_ec_command (git-fixes).
- input: exc3000 - properly stop timer on shutdown (git-fixes).
- intel/e1000:fix repeated words in comments (jsc#ped-5738).
- intel: remove unused macros (jsc#ped-5738).
- iommu/amd: add pci segment support for ivrs_ commands (git-fixes).
- iommu/amd: fix compile warning in init code (git-fixes).
- iommu/amd: fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).
- iommu/amd: fix ivrs_acpihid cmdline parsing code (git-fixes).
- iommu/amd: fix pci device refcount leak in ppr_notifier() (git-fixes).
- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).
- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).
- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
- iommu/arm-smmu-v3: make default domain type of hisilicon ptt device to identity (git-fixes).
- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).
- iommu/dart: initialize dart_streams_enable (git-fixes).
- iommu/dma: fix incorrect error return on iommu deferred attach (git-fixes).
- iommu/dma: fix iova map result check bug (git-fixes).
- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).
- iommu/fsl_pamu: fix resource leak in fsl_pamu_probe() (git-fixes).
- iommu/io-pgtable-arm-v7s: add a quirk to allow pgtable pa up to 35bit (git-fixes).
- iommu/iova: fix module config properly (git-fixes).
- iommu/omap: fix buffer overflow in debugfs (git-fixes).
- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).
- iommu/sun50i: consider all fault sources for reset (git-fixes).
- iommu/sun50i: fix flush size (git-fixes).
- iommu/sun50i: fix r/w permission check (git-fixes).
- iommu/sun50i: fix reset release (git-fixes).
- iommu/sun50i: implement .iotlb_sync_map (git-fixes).
- iommu/sun50i: remove iommu_domain_identity (git-fixes).
- iommu/vt-d: add rpls to quirk list to skip te disabling (git-fixes).
- iommu/vt-d: check correct capability for sagaw determination (git-fixes).
- iommu/vt-d: clean up si_domain in the init_dmars() error path (git-fixes).
- iommu/vt-d: correctly calculate sagaw value of iommu (git-fixes).
- iommu/vt-d: fix kdump kernels boot failure with scalable mode (git-fixes).
- iommu/vt-d: fix pci device refcount leak in dmar_dev_scope_init() (git-fixes).
- iommu/vt-d: fix pci device refcount leak in has_external_pci() (git-fixes).
- iommu/vt-d: preset access bit for iova in fl non-leaf paging entries (git-fixes).
- iommu/vt-d: set sre bit only when hardware has srs cap (git-fixes).
- ipmi:ssif: add check for kstrdup (git-fixes).
- ipmi:ssif: fix a memory leak when scanning for an adapter (git-fixes).
- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).
- kabi/severities: ignore newly added srso mitigation functions
- kabi: allow extra bugsints (bsc#1213927).
- kbuild: add -wno-shift-negative-value where -wextra is used (bsc#1214756).
- kbuild: move to -std=gnu11 (bsc#1214756).
- kernel-binary: common dependencies cleanup common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.
- kernel-binary: drop code for kerntypes support kerntypes was a suse-specific feature dropped before sle 12.
- kunit: make kunit_test_timeout compatible with comment (git-fixes).
- kvm: s390: fix sthyi error handling (git-fixes bsc#1214370).
- leds: fix bug_on check for led_color_id_multi that is always false (git-fixes).
- leds: multicolor: use rounded division when calculating color components (git-fixes).
- leds: pwm: fix error code in led_pwm_create_fwnode() (git-fixes).
- leds: trigger: tty: do not use led_on/off constants, use led_blink_set_oneshot instead (git-fixes).
- leds: turris-omnia: drop unnecessary mutex locking (git-fixes).
- lib/test_meminit: allocate pages up to order max_order (git-fixes).
- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).
- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
- md/raid0: factor out helper for mapping and submitting a bio (bsc#1213916).
- md/raid0: fix performance regression for large sequential writes (bsc#1213916).
- media: ad5820: drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).
- media: cx24120: add retval check for cx24120_message_send() (git-fixes).
- media: dib7000p: fix potential division by zero (git-fixes).
- media: dvb-usb: m920x: fix a potential memory leak in m920x_i2c_xfer() (git-fixes).
- media: go7007: remove redundant if statement (git-fixes).
- media: i2c: ccs: check rules is non-null (git-fixes).
- media: i2c: rdacm21: fix uninitialized value (git-fixes).
- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).
- media: ov2680: add ov2680_fill_format() helper function (git-fixes).
- media: ov2680: do not take the lock for try_fmt calls (git-fixes).
- media: ov2680: fix ov2680_bayer_order() (git-fixes).
- media: ov2680: fix ov2680_set_fmt() which == v4l2_subdev_format_try not working (git-fixes).
- media: ov2680: fix regulators being left enabled on ov2680_power_on() errors (git-fixes).
- media: ov2680: fix vflip / hflip set functions (git-fixes).
- media: ov2680: remove video_v4l2_subdev_api ifdef-s (git-fixes).
- media: ov5640: enable mipi interface in ov5640_set_power_mipi() (git-fixes).
- media: rkvdec: increase max supported height for h.264 (git-fixes).
- media: v4l2-core: fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).
- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).
- media: venus: hfi_venus: only consider sys_idle_indicator on v1 (git-fixes).
- media: venus: hfi_venus: write to vidc_ctrl_init after unmasking interrupts (git-fixes).
- misc: rtsx: judge aspm mode to set petxcfg reg (git-fixes).
- mkspec: allow unsupported kmps (bsc#1214386)
- mlxsw: pci: add shutdown method in pci driver (git-fixes).
- mmc: block: fix in_flight[issue_type] value error (git-fixes).
- mmc: moxart: read scr register without changing byte order (git-fixes).
- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).
- module: avoid allocation if module is already present and ready (bsc#1213921).
- module: extract patient module check into helper (bsc#1213921).
- module: move check_modinfo() early to early_mod_check() (bsc#1213921).
- module: move early sanity checks into a helper (bsc#1213921).
- move upstreamed powerpc patches into sorted section
- mtd: rawnand: brcmnand: fix crash during the panic_write (git-fixes).
- mtd: rawnand: brcmnand: fix mtd oobsize (git-fixes).
- mtd: rawnand: brcmnand: fix potential false time out warning (git-fixes).
- mtd: rawnand: brcmnand: fix potential out-of-bounds access in oob write (git-fixes).
- mtd: rawnand: fsl_upm: fix an off-by one test in fun_exec_op() (git-fixes).
- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).
- mtd: rawnand: omap_elm: fix incorrect type in assignment (git-fixes).
- mtd: rawnand: rockchip: align hwecc vs. raw page helper layouts (git-fixes).
- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).
- mtd: spi-nor: check bus width while setting qe bit (git-fixes).
- mtd: spinand: toshiba: fix ecc_get_status (git-fixes).
- n_tty: rename tail to old_tail in n_tty_read() (git-fixes).
- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
- net: ieee802154: at86rf230: stop leaking skb's (git-fixes).
- net: mana: fix mana vf unload when hardware is unresponsive (git-fixes).
- net: phy: at803x: remove set/get wol callbacks for ar8032 (git-fixes).
- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
- net: phy: fix irq-based wake-on-lan over hibernate / power off (git-fixes).
- net: usb: lan78xx: reorder cleanup operations to avoid uaf bugs (git-fixes).
- net: usbnet: fix warning in usbnet_start_xmit/usb_submit_urb (git-fixes).
- netfs: fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).
- netfs: fix missing xas_retry() calls in xarray iteration (bsc#1213946).
- netfs: fix parameter of cleanup() (bsc#1214743).
- nfsd: remove incorrect check in nfsd4_validate_stateid (git-fixes).
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).
- nilfs2: fix warning in mark_buffer_dirty due to discarded buffer reuse (git-fixes).
- nvme-rdma: fix potential unbalanced freeze & unfreeze (bsc#1208902).
- nvme-tcp: fix potential unbalanced freeze & unfreeze (bsc#1208902).
- objtool/x86: fix srso mess (git-fixes).
- objtool/x86: fixup frame-pointer vs rethunk (git-fixes).
- objtool: union instruction::{call_dest,jump_table} (git-fixes).
- old-flavors: drop 2.6 kernels. 2.6 based kernels are eol, upgrading from them is no longer suported.
- pci/aspm: avoid link retraining race (git-fixes).
- pci/aspm: factor out pcie_wait_for_retrain() (git-fixes).
- pci/aspm: return 0 or -etimedout from pcie_retrain_link() (git-fixes).
- pci: acpiphp: reassign resources on bridge if necessary (git-fixes).
- pci: acpiphp: use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).
- pci: mark nvidia t4 gpus to avoid bus reset (git-fixes).
- pci: meson: remove cast between incompatible function type (git-fixes).
- pci: microchip: correct the ded and sec interrupt bit offsets (git-fixes).
- pci: microchip: remove cast between incompatible function type (git-fixes).
- pci: pciehp: use rmw accessors for changing lnkctl (git-fixes).
- pci: rockchip: remove writes to unused registers (git-fixes).
- pci: s390: fix use-after-free of pci resources with per-function hotplug (git-fixes).
- pci: tegra194: fix possible array out of bounds access (git-fixes).
- pcmcia: rsrc_nonstatic: fix memory leak in nonstatic_release_resource_db() (git-fixes).
- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).
- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).
- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).
- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).
- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).
- phy: qcom-snps: use dev_err_probe() to simplify code (git-fixes).
- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).
- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).
- pinctrl: renesas: rza2: add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).
- platform/x86: dell-sysman: fix reference leak (git-fixes).
- pm / devfreq: fix leak in devfreq_dev_release() (git-fixes).
- powerpc/64e: fix kexec build error (bsc#1212091 ltc#199106).
- powerpc/iommu: do not set failed sg dma_address to dma_mapping_error (bsc#1212091 ltc#199106).
- powerpc/iommu: fix iommu_table_in_use for a small default dma window case (bsc#1212091 ltc#199106).
- powerpc/iommu: incorrect ddw table is referenced for sr-iov device (bsc#1212091 ltc#199106).
- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).
- powerpc/iommu: tces are incorrectly manipulated with dlpar add/remove of memory (bsc#1212091 ltc#199106).
- powerpc/kernel/iommu: add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).
- powerpc/kexec: fix build failure from uninitialised variable (bsc#1212091 ltc#199106).
- powerpc/mm/altmap: fix altmap boundary check (bsc#1120059 git-fixes).
- powerpc/pseries/ddw: do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).
- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: add of_node_put() before break (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: allow ddw windows starting at 0x00 (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: check if the default window in use before removing it (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: create huge dma window if no mmio32 is present (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: find existing ddw with given property name (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: make use of ddw for indirect mapping (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: replace hard-coded page shift (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: use correct vfree for it_map (bsc#1212091 ltc#199106).
- powerpc/pseries: add __init attribute to eligible functions (bsc#1212091 ltc#199106).
- powerpc/pseries: honour current smt state when dlpar onlining cpus (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- powerpc/pseries: initialise cpu hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- powerpc/rtas: block error injection when locked down (bsc#1023051).
- powerpc/rtas: enture rtas_call is called with mmu enabled (bsc#1023051).
- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).
- powerpc/security: fix speculation_store_bypass reporting on power10 (bsc#1188885 ltc#193722 git-fixes).
- powerpc: add hotplug_smt support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). update config files.
- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
- powerpc: move dma64_propname define to a header (bsc#1214297 ltc#197503).
- pseries/iommu/ddw: fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).
- pstore/ram: check start of empty przs during init (git-fixes).
- pwm: add a stub for devm_pwmchip_add() (git-fixes).
- pwm: meson: fix handling of period/duty if greater than uint_max (git-fixes).
- pwm: meson: simplify duplicated per-channel tracking (git-fixes).
- qed: fix scheduling in a tasklet while getting stats (git-fixes).
- rdma/bnxt_re: fix error handling in probe failure path (git-fixes)
- rdma/bnxt_re: fix max_qp count for virtual functions (git-fixes)
- rdma/efa: fix wrong resources deallocation order (git-fixes)
- rdma/hns: fix cq and qp cache affinity (git-fixes)
- rdma/hns: fix incorrect post-send with direct wqe of wr-list (git-fixes)
- rdma/hns: fix port active speed (git-fixes)
- rdma/irdma: prevent zero-length stag registration (git-fixes)
- rdma/irdma: replace one-element array with flexible-array member (git-fixes)
- rdma/mlx5: return the firmware result upon destroying qp/rq (git-fixes)
- rdma/qedr: remove a duplicate assignment in irdma_query_ah() (git-fixes)
- rdma/siw: balance the reference of cep->kref in the error path (git-fixes)
- rdma/siw: correct wrong debug message (git-fixes)
- rdma/umem: set iova in odp flow (git-fixes)
- readme.branch: add miroslav franc as a sle15-sp4 co-maintainer.
- regmap: rbtree: use alloc_flags for memory allocations (git-fixes).
- revert 'ib/isert: fix incorrect release of isert connection' (git-fixes)
- revert 'tracing: add '(fault)' name injection to kernel probes' (git-fixes).
- ring-buffer: do not swap cpu_buffer during resize process (git-fixes).
- ring-buffer: fix deadloop issue on reading trace_pipe (git-fixes).
- ring-buffer: fix wrong stat of cpu_buffer->read (git-fixes).
- rpmsg: glink: add check for kstrdup (git-fixes).
- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).
- sched/fair: fix inaccurate tally of ttwu_move_affine (git fixes).
- sched/fair: use recent_used_cpu to test p->cpus_ptr (git fixes).
- sched/psi: use kernfs polling functions for psi trigger polling (bsc#1209799).
- scsi: bsg: increase number of devices (bsc#1210048).
- scsi: core: do not wait for quiesce in scsi_device_block() (bsc#1209284).
- scsi: core: do not wait for quiesce in scsi_stop_queue() (bsc#1209284).
- scsi: core: improve warning message in scsi_device_block() (bsc#1209284).
- scsi: core: merge scsi_internal_device_block() and device_block() (bsc#1209284).
- scsi: rdma/srp: fix residual handling (git-fixes)
- scsi: sg: increase number of devices (bsc#1210048).
- scsi: storvsc: always set no_report_opcodes (git-fixes).
- scsi: storvsc: fix handling of virtual fibre channel timeouts (git-fixes).
- scsi: storvsc: handle srb status value 0x30 (git-fixes).
- scsi: storvsc: limit max_sectors for virtual fibre channel devices (git-fixes).
- scsi: zfcp: defer fc_rport blocking until after adisc response (git-fixes bsc#1214371).
- selftests/futex: order calls to futex_lock_pi (git-fixes).
- selftests/harness: actually report skip for signal tests (git-fixes).
- selftests/resctrl: close perf value read fd on errors (git-fixes).
- selftests/resctrl: do not leak buffer in fill_cache() (git-fixes).
- selftests/resctrl: unmount resctrl fs if child fails to run benchmark (git-fixes).
- selftests/rseq: check if libc rseq support is registered (git-fixes).
- selftests: forwarding: add a helper to skip test when using veth pairs (git-fixes).
- selftests: forwarding: ethtool: skip when using veth pairs (git-fixes).
- selftests: forwarding: ethtool_extended_state: skip when using veth pairs (git-fixes).
- selftests: forwarding: skip test when no interfaces are specified (git-fixes).
- selftests: forwarding: switch off timeout (git-fixes).
- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).
- selftests: forwarding: tc_actions: use ncat instead of nc (git-fixes).
- selftests: forwarding: tc_flower: relax success criterion (git-fixes).
- selftests: mirror_gre_changes: tighten up the ttl test match (git-fixes).
- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
- serial: sc16is7xx: fix bug when first setting gpio direction (git-fixes).
- serial: sprd: assign sprd_port after initialized to avoid wrong access (git-fixes).
- serial: sprd: fix dma buffer leak issue (git-fixes).
- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).
- sfc: fix crash when reading stats while nic is resetting (git-fixes).
- smb3: do not send lease break acknowledgment if all file handles have been closed (git-fixes).
- smb3: do not set ntlmssp_version flag for negotiate not auth request (bsc#1193629).
- smb: client: fix -wstringop-overflow issues (bsc#1193629).
- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
- smb: client: fix null auth (git-fixes).
- soc: aspeed: socinfo: add kfree for kstrdup (git-fixes).
- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).
- soundwire: fix enumeration completion (git-fixes).
- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).
- supported.conf: fix typos for -!optional markers
- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).
- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).
- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).
- target_core_rbd: remove snapshot existence validation code (bsc#1212857).
- thunderbolt: read retimer nvm authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).
- timers: add shutdown mechanism to the internal functions (bsc#1213970).
- timers: provide timer_shutdown[_sync]() (bsc#1213970).
- timers: rename del_timer() to timer_delete() (bsc#1213970).
- timers: rename del_timer_sync() to timer_delete_sync() (bsc#1213970).
- timers: replace bug_on()s (bsc#1213970).
- timers: silently ignore timers with a null function (bsc#1213970).
- timers: split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).
- timers: update kernel-doc for various functions (bsc#1213970).
- timers: use del_timer_sync() even on up (bsc#1213970).
- tracing/histograms: add histograms to hist_vars if they have referenced variables (git-fixes).
- tracing/histograms: return an error if we fail to add histogram to hist_vars list (git-fixes).
- tracing/probes: fix not to count error code to total length (git-fixes).
- tracing/probes: fix to avoid double count of the string length on the array (git-fixes).
- tracing/probes: fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).
- tracing/probes: fix to update dynamic data counter if fetcharg uses it (git-fixes).
- tracing: fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes).
- tracing: fix memleak due to race between current_tracer and trace (git-fixes).
- tracing: fix memory leak of iter->temp when reading trace_pipe (git-fixes).
- tracing: fix null pointer dereference in tracing_err_log_open() (git-fixes).
- tracing: fix warning in trace_buffered_event_disable() (git-fixes).
- tty: fix hang on tty device with no_room set (git-fixes).
- tty: n_gsm: fix the uaf caused by race condition in gsm_cleanup_mux (git-fixes).
- tty: serial: fsl_lpuart: add i.mxrt1050 support (git-fixes).
- tty: serial: fsl_lpuart: clear the error flags by writing 1 for lpuart32 platforms (git-fixes).
- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).
- tty: serial: fsl_lpuart: reduce rx watermark to 0 on ls1028a (git-fixes).
- ubifs: fix memleak when insert_old_idx() failed (git-fixes).
- update patches.suse/cpufreq-intel_pstate-fix-cpu-pstate.turbo_freq-initi (git-fixes bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).
- usb-storage: alauda: fix uninit-value in alauda_check_media() (git-fixes).
- usb: chipidea: imx: add missing usb phy dpdm wakeup setting (git-fixes).
- usb: chipidea: imx: do not request qos for imx8ulp (git-fixes).
- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).
- usb: common: usb-conn-gpio: prevent bailing out if initial role is none (git-fixes).
- usb: dwc3: fix typos in gadget.c (git-fixes).
- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).
- usb: dwc3: properly handle processing of pending events (git-fixes).
- usb: gadget: f_mass_storage: fix unused variable warning (git-fixes).
- usb: gadget: fix the memory leak in raw_gadget driver (git-fixes).
- usb: gadget: u_serial: avoid spinlock recursion in __gs_console_push (git-fixes).
- usb: ohci-at91: fix the unhandle interrupt when resume (git-fixes).
- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).
- usb: quirks: add quirk for focusrite scarlett (git-fixes).
- usb: serial: option: add quectel ec200a module support (git-fixes).
- usb: serial: option: support quectel em060k_128 (git-fixes).
- usb: serial: simple: add kaufmann rks+can vcp (git-fixes).
- usb: serial: simple: sort driver entries (git-fixes).
- usb: typec: altmodes/displayport: signal hpd when configuring pin assignment (git-fixes).
- usb: typec: tcpm: fix response to vsafe0v event (git-fixes).
- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).
- usb: zaurus: add id for a-300/b-500/c-700 (git-fixes).
- watchdog: sp5100_tco: support hygon fch/sch (server controller hub) (git-fixes).
- wifi: ath10k: use rmw accessors for changing lnkctl (git-fixes).
- wifi: ath11k: use rmw accessors for changing lnkctl (git-fixes).
- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).
- wifi: ath9k: protect wmi command response buffer replacement with a lock (git-fixes).
- wifi: ath9k: use is_err() with debugfs_create_dir() (git-fixes).
- wifi: cfg80211: fix return value in scan logic (git-fixes).
- wifi: cfg80211: fix sband iftype data lookup for ap_vlan (git-fixes).
- wifi: mt76: mt7615: do not advertise 5 ghz on first phy of mt7615d (dbdc) (git-fixes).
- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).
- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).
- wifi: mt76: testmode: add nla_policy for mt76_tm_attr_tx_length (git-fixes).
- wifi: mwifiex: avoid possible null skb pointer dereference (git-fixes).
- wifi: mwifiex: fix error recovery in pcie buffer descriptor management (git-fixes).
- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).
- wifi: mwifiex: fix missed return in oob checks failed path (git-fixes).
- wifi: mwifiex: fix oob and integer underflow when rx packets (git-fixes).
- wifi: nl80211/cfg80211: add forgotten nla_policy for bss color attribute (git-fixes).
- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
- wifi: rtw89: debug: fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).
- x86/alternative: make custom return thunk unconditional (git-fixes).
- x86/cpu/amd: disable xsaves on amd family 0x17 (git-fixes).
- x86/cpu/kvm: provide untrain_ret_vm (git-fixes).
- x86/cpu: clean up srso return thunk mess (git-fixes).
- x86/cpu: cleanup the untrain mess (git-fixes).
- x86/cpu: fix __x86_return_thunk symbol type (git-fixes).
- x86/cpu: fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
- x86/cpu: rename original retbleed methods (git-fixes).
- x86/cpu: rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
- x86/mce: make sure logged mces are processed after sysfs update (git-fixes).
- x86/retpoline,kprobes: fix position of thunk sections with config_lto_clang (git-fixes).
- x86/retpoline,kprobes: skip optprobe check for indirect jumps with retpolines and ibt (git-fixes).
- x86/retpoline: do not clobber rflags during srso_safe_ret() (git-fixes).
- x86/speculation: add cpu_show_gds() prototype (git-fixes).
- x86/speculation: mark all skylake cpus as vulnerable to gds (git-fixes).
- x86/srso: correct the mitigation status when smt is disabled (git-fixes).
- x86/srso: disable the mitigation on unaffected configurations (git-fixes).
- x86/srso: explain the untraining sequences a bit more (git-fixes).
- x86/srso: fix build breakage with the llvm linker (git-fixes).
- x86/srso: fix return thunks in generated code (git-fixes).
- x86/static_call: fix __static_call_fixup() (git-fixes).
- xfs: fix sb write verify for lazysbcount (bsc#1214661).
Patchnames: SUSE-2023-3600,SUSE-SLE-Micro-5.3-2023-3600,SUSE-SLE-Micro-5.4-2023-3600,SUSE-SLE-Module-Live-Patching-15-SP4-2023-3600,SUSE-SLE-Module-RT-15-SP4-2023-3600,openSUSE-SLE-15.4-2023-3600
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
4.4 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.6 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.1 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.1 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.7 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.6 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
119 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\n\nThe SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).\n- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).\n- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).\n- CVE-2023-37453: Fixed oversight in SuperSpeed initialization (bsc#1213123).\n- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).\n- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).\n- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).\n- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).\n- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).\n- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).\n- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).\n- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).\n- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).\n- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).\n- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).\n\nThe following non-security bugs were fixed:\n\n- acpi: processor: perflib: avoid updating frequency qos unnecessarily (git-fixes).\n- acpi: processor: perflib: use the \u0027no limit\u0027 frequency qos (git-fixes).\n- acpi: x86: s2idle: fix a logic error parsing amd constraints table (git-fixes).\n- alsa: ac97: fix possible error value of *rac97 (git-fixes).\n- alsa: hda/cs8409: support new dell dolphin variants (git-fixes).\n- alsa: hda/realtek - remodified 3k pull low procedure (git-fixes).\n- alsa: hda/realtek: add quirk for hp victus 16-d1xxx to enable mute led (git-fixes).\n- alsa: hda/realtek: add quirk for mute leds on hp envy x360 15-eu0xxx (git-fixes).\n- alsa: hda/realtek: add quirks for hp g11 laptops (git-fixes).\n- alsa: hda/realtek: switch dell oasis models to use spi (git-fixes).\n- alsa: pcm: fix missing fixup call in compat hw_refine ioctl (git-fixes).\n- alsa: usb-audio: add support for mythware xa001au capture and playback interfaces (git-fixes).\n- alsa: usb-audio: fix init call orders for uac1 (git-fixes).\n- alsa: ymfpci: fix the missing snd_card_free() call at probe error (git-fixes).\n- amba: bus: fix refcount leak (git-fixes).\n- arm64: dts: imx8mn-var-som: add missing pull-up for onboard phy reset pinmux (git-fixes).\n- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).\n- arm64: dts: rockchip: disable hs400 for emmc on rock pi 4 (git-fixes).\n- arm: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix usb related warnings (git-fixes).\n- arm: dts: imx6sll: fixup of operating points (git-fixes).\n- arm: spear: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- asoc: lower \u0027no backend dais enabled for ... port\u0027 log severity (git-fixes).\n- asoc: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).\n- asoc: rt5665: add missed regulator_bulk_disable (git-fixes).\n- asoc: sof: intel: fix soundwire/hdaudio mutual exclusion (git-fixes).\n- asoc: stac9766: fix build errors with regmap_ac97 (git-fixes).\n- asoc: tegra: fix sfc conversion for few rates (git-fixes).\n- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).\n- backlight/bd6107: compare against struct fb_info.device (git-fixes).\n- backlight/gpio_backlight: compare against struct fb_info.device (git-fixes).\n- backlight/lv5207lp: compare against struct fb_info.device (git-fixes).\n- batman-adv: do not get eth header before batadv_check_management_packet (git-fixes).\n- batman-adv: do not increase mtu when set by user (git-fixes).\n- batman-adv: fix batadv_v_ogm_aggr_send memory leak (git-fixes).\n- batman-adv: fix tt global entry leak when client roamed back (git-fixes).\n- batman-adv: hold rtnl lock during mtu update via netlink (git-fixes).\n- batman-adv: trigger events for auto adjusted mtu (git-fixes).\n- bluetooth: btusb: add mt7922 bluetooth id for the asus ally (git-fixes).\n- bluetooth: btusb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).\n- bluetooth: fix potential use-after-free when clear keys (git-fixes).\n- bluetooth: l2cap: fix use-after-free (git-fixes).\n- bluetooth: l2cap: fix use-after-free in l2cap_sock_ready_cb (git-fixes).\n- bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).\n- bluetooth: remove unused declaration amp_read_loc_info() (git-fixes).\n- bnx2x: fix page fault following eeh recovery (bsc#1214299).\n- bpf: disable preemption in bpf_event_output (git-fixes).\n- bus: ti-sysc: fix build warning for 64-bit build (git-fixes).\n- bus: ti-sysc: fix cast to enum warning (git-fixes).\n- bus: ti-sysc: flush posted write on enable before reset (git-fixes).\n- can: gs_usb: gs_usb_receive_bulk_callback(): count rx overflow errors also in case of oom (git-fixes).\n- ceph: defer stopping mdsc delayed_work (bsc#1214392).\n- ceph: do not check for quotas on mds stray dirs (bsc#1214238).\n- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).\n- check-for-config-changes: ignore builtin_return_address_strips_pac (bsc#1214380). gcc7 on sle 15 does not support this while later gcc does.\n- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).\n- cifs: allow dumping keys for directories too (bsc#1193629).\n- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).\n- cifs: if deferred close is disabled then close files immediately (git-fixes).\n- cifs: is_network_name_deleted should return a bool (bsc#1193629).\n- cifs: update internal module version number for cifs.ko (bsc#1193629).\n- clk: fix slab-out-of-bounds error in devm_clk_release() (git-fixes).\n- clk: fix undefined reference to `clk_rate_exclusive_{get,put}\u0027 (git-fixes).\n- clk: imx8mp: fix sai4 clock (git-fixes).\n- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).\n- clk: imx: pll14xx: dynamically configure pll for 393216000/361267200hz (git-fixes).\n- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).\n- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).\n- clk: qcom: gcc-sc7180: fix up gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: qcom: gcc-sm8250: fix gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: sunxi-ng: modify mismatched function name (git-fixes).\n- clocksource/drivers/arm_arch_timer: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource/drivers/sp804: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- config_nvme_verbose_errors=y gone with a82baa8083b\n- config_printk_safe_log_buf_shift=13 gone with 7e152d55123\n- cpu/smt: allow enabling partial smt states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: move smt prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/smt: store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpufreq: fix the race condition while updating the transition_task of policy (git-fixes).\n- cpufreq: intel_pstate: adjust balance_performance epp for sapphire rapids (bsc#1214659).\n- cpufreq: intel_pstate: enable hwp io boost for all servers (bsc#1208949 jsc#ped-6003 jsc#ped-6004).\n- cpufreq: intel_pstate: fix scaling for hybrid-capable systems with disabled e-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- cpufreq: intel_pstate: hybrid: rework hwp calibration (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- cpufreq: intel_pstate: hybrid: use known scaling factor for p-cores (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- cpufreq: intel_pstate: read all msrs on the target cpu (bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- created new preempt kernel flavor configs are cloned from the respective $arch/default configs. all changed configs appart from config_preempt-\u003ey are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. tree_rcu has been also changed to preempt_rcu which is the default implementation for preempt kernel.\n- crypto: caam - fix unchecked return value error (git-fixes).\n- crypto: stm32 - properly handle pm_runtime_get failing (git-fixes).\n- dma-buf/sw_sync: avoid recursive lock during fence signal (git-fixes).\n- dma-buf/sync_file: fix docs syntax (git-fixes).\n- dmaengine: idxd: modify the dependence of attribute pasid_enabled (git-fixes).\n- dmaengine: mcf-edma: fix a potential un-allocated memory access (git-fixes).\n- dmaengine: pl330: return dma_paused when transaction is paused (git-fixes).\n- dmaengine: ste_dma40: add missing irq check in d40_probe (git-fixes).\n- docs/process/howto: replace c89 with c11 (bsc#1214756).\n- docs: kernel-parameters: refer to the correct bitmap function (git-fixes).\n- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).\n- docs: printk-formats: fix hex printing of signed values (git-fixes).\n- documentation: devices.txt: fix minors for ttycpm* (git-fixes).\n- documentation: devices.txt: remove ttyioc* (git-fixes).\n- documentation: devices.txt: remove ttysioc* (git-fixes).\n- driver core: test_async: fix an error code (git-fixes).\n- drivers: clk: keystone: fix parameter judgment in _of_pll_clk_init() (git-fixes).\n- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).\n- drm/amd/display: check attr flag before set cursor degamma on dcn3+ (git-fixes).\n- drm/amd/display: check tg is non-null before checking if enabled (git-fixes).\n- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).\n- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).\n- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).\n- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).\n- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).\n- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).\n- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).\n- drm/amdgpu: fix potential fence use-after-free v2 (git-fixes).\n- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).\n- drm/amdgpu: use rmw accessors for changing lnkctl (git-fixes).\n- drm/armada: fix off-by-one error in armada_overlay_get_property() (git-fixes).\n- drm/ast: fix dram init on ast2200 (git-fixes).\n- drm/atomic-helper: update reference to drm_crtc_force_disable_all() (git-fixes).\n- drm/bridge: anx7625: drop device lock before drm_helper_hpd_irq_event() (git-fixes).\n- drm/bridge: fix -wunused-const-variable= warning (git-fixes).\n- drm/bridge: tc358764: fix debug print parameter order (git-fixes).\n- drm/etnaviv: fix dumping of active mmu context (git-fixes).\n- drm/mediatek: fix dereference before null check (git-fixes).\n- drm/mediatek: fix potential memory leak if vmap() fail (git-fixes).\n- drm/msm/a2xx: call adreno_gpu_init() earlier (git-fixes).\n- drm/msm/mdp5: do not leak some plane state (git-fixes).\n- drm/msm: update dev core dump to not print backwards (git-fixes).\n- drm/nouveau/disp: revert a null check inside nouveau_connector_get_modes (git-fixes).\n- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).\n- drm/panel: simple: add missing connector type and pixel format for auo t215hvn01 (git-fixes).\n- drm/panel: simple: fix auo g121ean01 panel timings according to the docs (git-fixes).\n- drm/qxl: fix uaf on handle creation (git-fixes).\n- drm/radeon: use rmw accessors for changing lnkctl (git-fixes).\n- drm/rockchip: do not spam logs in atomic check (git-fixes).\n- drm/shmem-helper: reset vma-\u003evm_ops before calling dma_buf_mmap() (git-fixes).\n- drm/tegra: dpaux: fix incorrect return value of platform_get_irq (git-fixes).\n- drm/ttm: check null pointer before accessing when swapping (git-fixes).\n- drm/ttm: never consider pinned bos for eviction\u0026swap (git-fixes).\n- drm/vmwgfx: fix shader stage validation (git-fixes).\n- drm: adv7511: fix low refresh rate register for adv7533/5 (git-fixes).\n- drm: xlnx: zynqmp_dpsub: add missing check for dma_set_mask (git-fixes).\n- drop cfg80211 lock fix patches that caused a regression (bsc#1213757) \n- drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428) \n- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).\n- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).\n- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).\n- e1000: fix typos in comments (jsc#ped-5738).\n- e1000: remove unnecessary use of kmap_atomic() (jsc#ped-5738).\n- e1000: switch to napi_build_skb() (jsc#ped-5738).\n- e1000: switch to napi_consume_skb() (jsc#ped-5738).\n- enable analog devices industrial ethernet phy driver (jsc#ped-4759)\n- exfat: fix unexpected eof while reading dir (bsc#1214000).\n- exfat: release s_lock before calling dir_emit() (bsc#1214000).\n- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).\n- fbdev/ep93xx-fb: do not assign to struct fb_info.dev (git-fixes).\n- fbdev: fix potential oob read in fast_imageblit() (git-fixes).\n- fbdev: fix sys_imageblit() for arbitrary image widths (git-fixes).\n- fbdev: improve performance of sys_imageblit() (git-fixes).\n- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).\n- file: reinstate f_pos locking optimization for regular files (bsc#1213759).\n- firmware: arm_scmi: drop of node reference in the transport channel setup (git-fixes).\n- firmware: cs_dsp: fix new control name check (git-fixes).\n- firmware: meson_sm: fix to avoid potential null pointer dereference (git-fixes).\n- firmware: stratix10-svc: fix an null vs is_err() bug in probe (git-fixes).\n- fs/sysv: null check to prevent null-ptr-deref bug (git-fixes).\n- ftrace: fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).\n- gpio: mvebu: fix irq domain leak (git-fixes).\n- gpio: mvebu: make use of devm_pwmchip_add (git-fixes).\n- gpio: tps68470: make tps68470_gpio_output() always set the initial value (git-fixes).\n- hid: add quirk for 03f0:464a hp elite presenter mouse (git-fixes).\n- hid: logitech-dj: fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).\n- hid: logitech-hidpp: add usb and bluetooth ids for the logitech g915 tkl keyboard (git-fixes).\n- hid: multitouch: correct devm device reference for hidinput input_dev name (git-fixes).\n- hid: wacom: remove the battery when the ekr is off (git-fixes).\n- hwmon: (pmbus/bel-pfe) enable pmbus_skip_status_check for pfe1100 (git-fixes).\n- hwmon: (tmp513) fix the channel number in tmp51x_is_visible() (git-fixes).\n- hwpoison: offline support: fix spelling in documentation/abi/ (git-fixes).\n- hwrng: iproc-rng200 - implement suspend and resume calls (git-fixes).\n- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).\n- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).\n- i2c: bcm-iproc: fix bcm_iproc_i2c_isr deadlock issue (git-fixes).\n- i2c: delete error messages for failed memory allocations (git-fixes).\n- i2c: designware: correct length byte validation logic (git-fixes).\n- i2c: designware: handle invalid smbus block data response length value (git-fixes).\n- i2c: hisi: only handle the interrupt of the driver\u0027s transfer (git-fixes).\n- i2c: improve size determinations (git-fixes).\n- i2c: nomadik: remove a useless call in the remove function (git-fixes).\n- i2c: nomadik: remove unnecessary goto label (git-fixes).\n- i2c: nomadik: use devm_clk_get_enabled() (git-fixes).\n- i40e: fix an null vs is_err() bug for debugfs_create_dir() (git-fixes).\n- iavf: fix potential races for fdir filters (git-fixes).\n- ib/hfi1: fix possible panic during hotplug remove (git-fixes)\n- ib/uverbs: fix an potential error pointer dereference (git-fixes)\n- ice: fix crash by keep old cfg when update tcs more than queues (git-fixes).\n- ice: fix max_rate check while configuring tx rate limits (git-fixes).\n- ice: fix memory management in ice_ethtool_fdir.c (git-fixes).\n- ice: fix rdma vsi removal during queue rebuild (git-fixes).\n- iio: adc: ina2xx: avoid null pointer dereference on of device match (git-fixes).\n- iio: adc: stx104: implement and utilize register structures (git-fixes).\n- iio: adc: stx104: utilize iomap interface (git-fixes).\n- iio: cros_ec: fix the allocation size for cros_ec_command (git-fixes).\n- input: exc3000 - properly stop timer on shutdown (git-fixes).\n- intel/e1000:fix repeated words in comments (jsc#ped-5738).\n- intel: remove unused macros (jsc#ped-5738).\n- iommu/amd: add pci segment support for ivrs_ commands (git-fixes).\n- iommu/amd: fix compile warning in init code (git-fixes).\n- iommu/amd: fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).\n- iommu/amd: fix ivrs_acpihid cmdline parsing code (git-fixes).\n- iommu/amd: fix pci device refcount leak in ppr_notifier() (git-fixes).\n- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).\n- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).\n- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).\n- iommu/arm-smmu-v3: make default domain type of hisilicon ptt device to identity (git-fixes).\n- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).\n- iommu/dart: initialize dart_streams_enable (git-fixes).\n- iommu/dma: fix incorrect error return on iommu deferred attach (git-fixes).\n- iommu/dma: fix iova map result check bug (git-fixes).\n- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).\n- iommu/fsl_pamu: fix resource leak in fsl_pamu_probe() (git-fixes).\n- iommu/io-pgtable-arm-v7s: add a quirk to allow pgtable pa up to 35bit (git-fixes).\n- iommu/iova: fix module config properly (git-fixes).\n- iommu/omap: fix buffer overflow in debugfs (git-fixes).\n- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).\n- iommu/sun50i: consider all fault sources for reset (git-fixes).\n- iommu/sun50i: fix flush size (git-fixes).\n- iommu/sun50i: fix r/w permission check (git-fixes).\n- iommu/sun50i: fix reset release (git-fixes).\n- iommu/sun50i: implement .iotlb_sync_map (git-fixes).\n- iommu/sun50i: remove iommu_domain_identity (git-fixes).\n- iommu/vt-d: add rpls to quirk list to skip te disabling (git-fixes).\n- iommu/vt-d: check correct capability for sagaw determination (git-fixes).\n- iommu/vt-d: clean up si_domain in the init_dmars() error path (git-fixes).\n- iommu/vt-d: correctly calculate sagaw value of iommu (git-fixes).\n- iommu/vt-d: fix kdump kernels boot failure with scalable mode (git-fixes).\n- iommu/vt-d: fix pci device refcount leak in dmar_dev_scope_init() (git-fixes).\n- iommu/vt-d: fix pci device refcount leak in has_external_pci() (git-fixes).\n- iommu/vt-d: preset access bit for iova in fl non-leaf paging entries (git-fixes).\n- iommu/vt-d: set sre bit only when hardware has srs cap (git-fixes).\n- ipmi:ssif: add check for kstrdup (git-fixes).\n- ipmi:ssif: fix a memory leak when scanning for an adapter (git-fixes).\n- ipmi_si: fix a memleak in try_smi_init() (git-fixes).\n- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).\n- kabi/severities: ignore newly added srso mitigation functions\n- kabi: allow extra bugsints (bsc#1213927).\n- kbuild: add -wno-shift-negative-value where -wextra is used (bsc#1214756).\n- kbuild: move to -std=gnu11 (bsc#1214756).\n- kernel-binary: common dependencies cleanup common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.\n- kernel-binary: drop code for kerntypes support kerntypes was a suse-specific feature dropped before sle 12.\n- kunit: make kunit_test_timeout compatible with comment (git-fixes).\n- kvm: s390: fix sthyi error handling (git-fixes bsc#1214370).\n- leds: fix bug_on check for led_color_id_multi that is always false (git-fixes).\n- leds: multicolor: use rounded division when calculating color components (git-fixes).\n- leds: pwm: fix error code in led_pwm_create_fwnode() (git-fixes).\n- leds: trigger: tty: do not use led_on/off constants, use led_blink_set_oneshot instead (git-fixes).\n- leds: turris-omnia: drop unnecessary mutex locking (git-fixes).\n- lib/test_meminit: allocate pages up to order max_order (git-fixes).\n- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).\n- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).\n- md/raid0: factor out helper for mapping and submitting a bio (bsc#1213916).\n- md/raid0: fix performance regression for large sequential writes (bsc#1213916).\n- media: ad5820: drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).\n- media: cx24120: add retval check for cx24120_message_send() (git-fixes).\n- media: dib7000p: fix potential division by zero (git-fixes).\n- media: dvb-usb: m920x: fix a potential memory leak in m920x_i2c_xfer() (git-fixes).\n- media: go7007: remove redundant if statement (git-fixes).\n- media: i2c: ccs: check rules is non-null (git-fixes).\n- media: i2c: rdacm21: fix uninitialized value (git-fixes).\n- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).\n- media: ov2680: add ov2680_fill_format() helper function (git-fixes).\n- media: ov2680: do not take the lock for try_fmt calls (git-fixes).\n- media: ov2680: fix ov2680_bayer_order() (git-fixes).\n- media: ov2680: fix ov2680_set_fmt() which == v4l2_subdev_format_try not working (git-fixes).\n- media: ov2680: fix regulators being left enabled on ov2680_power_on() errors (git-fixes).\n- media: ov2680: fix vflip / hflip set functions (git-fixes).\n- media: ov2680: remove video_v4l2_subdev_api ifdef-s (git-fixes).\n- media: ov5640: enable mipi interface in ov5640_set_power_mipi() (git-fixes).\n- media: rkvdec: increase max supported height for h.264 (git-fixes).\n- media: v4l2-core: fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).\n- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).\n- media: venus: hfi_venus: only consider sys_idle_indicator on v1 (git-fixes).\n- media: venus: hfi_venus: write to vidc_ctrl_init after unmasking interrupts (git-fixes).\n- misc: rtsx: judge aspm mode to set petxcfg reg (git-fixes).\n- mkspec: allow unsupported kmps (bsc#1214386)\n- mlxsw: pci: add shutdown method in pci driver (git-fixes).\n- mmc: block: fix in_flight[issue_type] value error (git-fixes).\n- mmc: moxart: read scr register without changing byte order (git-fixes).\n- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).\n- module: avoid allocation if module is already present and ready (bsc#1213921).\n- module: extract patient module check into helper (bsc#1213921).\n- module: move check_modinfo() early to early_mod_check() (bsc#1213921).\n- module: move early sanity checks into a helper (bsc#1213921).\n- move upstreamed powerpc patches into sorted section\n- mtd: rawnand: brcmnand: fix crash during the panic_write (git-fixes).\n- mtd: rawnand: brcmnand: fix mtd oobsize (git-fixes).\n- mtd: rawnand: brcmnand: fix potential false time out warning (git-fixes).\n- mtd: rawnand: brcmnand: fix potential out-of-bounds access in oob write (git-fixes).\n- mtd: rawnand: fsl_upm: fix an off-by one test in fun_exec_op() (git-fixes).\n- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).\n- mtd: rawnand: omap_elm: fix incorrect type in assignment (git-fixes).\n- mtd: rawnand: rockchip: align hwecc vs. raw page helper layouts (git-fixes).\n- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).\n- mtd: spi-nor: check bus width while setting qe bit (git-fixes).\n- mtd: spinand: toshiba: fix ecc_get_status (git-fixes).\n- n_tty: rename tail to old_tail in n_tty_read() (git-fixes).\n- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).\n- net: ieee802154: at86rf230: stop leaking skb\u0027s (git-fixes).\n- net: mana: fix mana vf unload when hardware is unresponsive (git-fixes).\n- net: phy: at803x: remove set/get wol callbacks for ar8032 (git-fixes).\n- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).\n- net: phy: fix irq-based wake-on-lan over hibernate / power off (git-fixes).\n- net: usb: lan78xx: reorder cleanup operations to avoid uaf bugs (git-fixes).\n- net: usbnet: fix warning in usbnet_start_xmit/usb_submit_urb (git-fixes).\n- netfs: fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).\n- netfs: fix missing xas_retry() calls in xarray iteration (bsc#1213946).\n- netfs: fix parameter of cleanup() (bsc#1214743).\n- nfsd: remove incorrect check in nfsd4_validate_stateid (git-fixes).\n- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).\n- nilfs2: fix warning in mark_buffer_dirty due to discarded buffer reuse (git-fixes).\n- nvme-rdma: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- nvme-tcp: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- objtool/x86: fix srso mess (git-fixes).\n- objtool/x86: fixup frame-pointer vs rethunk (git-fixes).\n- objtool: union instruction::{call_dest,jump_table} (git-fixes).\n- old-flavors: drop 2.6 kernels. 2.6 based kernels are eol, upgrading from them is no longer suported.\n- pci/aspm: avoid link retraining race (git-fixes).\n- pci/aspm: factor out pcie_wait_for_retrain() (git-fixes).\n- pci/aspm: return 0 or -etimedout from pcie_retrain_link() (git-fixes).\n- pci: acpiphp: reassign resources on bridge if necessary (git-fixes).\n- pci: acpiphp: use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).\n- pci: mark nvidia t4 gpus to avoid bus reset (git-fixes).\n- pci: meson: remove cast between incompatible function type (git-fixes).\n- pci: microchip: correct the ded and sec interrupt bit offsets (git-fixes).\n- pci: microchip: remove cast between incompatible function type (git-fixes).\n- pci: pciehp: use rmw accessors for changing lnkctl (git-fixes).\n- pci: rockchip: remove writes to unused registers (git-fixes).\n- pci: s390: fix use-after-free of pci resources with per-function hotplug (git-fixes).\n- pci: tegra194: fix possible array out of bounds access (git-fixes).\n- pcmcia: rsrc_nonstatic: fix memory leak in nonstatic_release_resource_db() (git-fixes).\n- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).\n- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).\n- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).\n- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).\n- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).\n- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).\n- phy: qcom-snps: use dev_err_probe() to simplify code (git-fixes).\n- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).\n- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).\n- pinctrl: renesas: rza2: add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).\n- platform/x86: dell-sysman: fix reference leak (git-fixes).\n- pm / devfreq: fix leak in devfreq_dev_release() (git-fixes).\n- powerpc/64e: fix kexec build error (bsc#1212091 ltc#199106).\n- powerpc/iommu: do not set failed sg dma_address to dma_mapping_error (bsc#1212091 ltc#199106).\n- powerpc/iommu: fix iommu_table_in_use for a small default dma window case (bsc#1212091 ltc#199106).\n- powerpc/iommu: incorrect ddw table is referenced for sr-iov device (bsc#1212091 ltc#199106).\n- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).\n- powerpc/iommu: tces are incorrectly manipulated with dlpar add/remove of memory (bsc#1212091 ltc#199106).\n- powerpc/kernel/iommu: add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).\n- powerpc/kexec: fix build failure from uninitialised variable (bsc#1212091 ltc#199106).\n- powerpc/mm/altmap: fix altmap boundary check (bsc#1120059 git-fixes).\n- powerpc/pseries/ddw: do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).\n- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: add of_node_put() before break (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: allow ddw windows starting at 0x00 (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: check if the default window in use before removing it (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: create huge dma window if no mmio32 is present (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: find existing ddw with given property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: make use of ddw for indirect mapping (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: rename \u0027direct window\u0027 to \u0027dma window\u0027 (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: replace hard-coded page shift (bsc#1212091 ltc#199106). \n- powerpc/pseries/iommu: update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: use correct vfree for it_map (bsc#1212091 ltc#199106).\n- powerpc/pseries: add __init attribute to eligible functions (bsc#1212091 ltc#199106).\n- powerpc/pseries: honour current smt state when dlpar onlining cpus (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/pseries: initialise cpu hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/rtas: block error injection when locked down (bsc#1023051).\n- powerpc/rtas: enture rtas_call is called with mmu enabled (bsc#1023051).\n- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).\n- powerpc/security: fix speculation_store_bypass reporting on power10 (bsc#1188885 ltc#193722 git-fixes).\n- powerpc: add hotplug_smt support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). update config files.\n- powerpc: fix typos in comments (bsc#1212091 ltc#199106).\n- powerpc: move dma64_propname define to a header (bsc#1214297 ltc#197503).\n- pseries/iommu/ddw: fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).\n- pstore/ram: check start of empty przs during init (git-fixes).\n- pwm: add a stub for devm_pwmchip_add() (git-fixes).\n- pwm: meson: fix handling of period/duty if greater than uint_max (git-fixes).\n- pwm: meson: simplify duplicated per-channel tracking (git-fixes).\n- qed: fix scheduling in a tasklet while getting stats (git-fixes).\n- rdma/bnxt_re: fix error handling in probe failure path (git-fixes)\n- rdma/bnxt_re: fix max_qp count for virtual functions (git-fixes)\n- rdma/efa: fix wrong resources deallocation order (git-fixes)\n- rdma/hns: fix cq and qp cache affinity (git-fixes)\n- rdma/hns: fix incorrect post-send with direct wqe of wr-list (git-fixes)\n- rdma/hns: fix port active speed (git-fixes)\n- rdma/irdma: prevent zero-length stag registration (git-fixes)\n- rdma/irdma: replace one-element array with flexible-array member (git-fixes)\n- rdma/mlx5: return the firmware result upon destroying qp/rq (git-fixes)\n- rdma/qedr: remove a duplicate assignment in irdma_query_ah() (git-fixes)\n- rdma/siw: balance the reference of cep-\u003ekref in the error path (git-fixes)\n- rdma/siw: correct wrong debug message (git-fixes)\n- rdma/umem: set iova in odp flow (git-fixes)\n- readme.branch: add miroslav franc as a sle15-sp4 co-maintainer.\n- regmap: rbtree: use alloc_flags for memory allocations (git-fixes).\n- revert \u0027ib/isert: fix incorrect release of isert connection\u0027 (git-fixes)\n- revert \u0027tracing: add \u0027(fault)\u0027 name injection to kernel probes\u0027 (git-fixes).\n- ring-buffer: do not swap cpu_buffer during resize process (git-fixes).\n- ring-buffer: fix deadloop issue on reading trace_pipe (git-fixes).\n- ring-buffer: fix wrong stat of cpu_buffer-\u003eread (git-fixes).\n- rpmsg: glink: add check for kstrdup (git-fixes).\n- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).\n- sched/fair: fix inaccurate tally of ttwu_move_affine (git fixes).\n- sched/fair: use recent_used_cpu to test p-\u003ecpus_ptr (git fixes).\n- sched/psi: use kernfs polling functions for psi trigger polling (bsc#1209799).\n- scsi: bsg: increase number of devices (bsc#1210048).\n- scsi: core: do not wait for quiesce in scsi_device_block() (bsc#1209284).\n- scsi: core: do not wait for quiesce in scsi_stop_queue() (bsc#1209284).\n- scsi: core: improve warning message in scsi_device_block() (bsc#1209284).\n- scsi: core: merge scsi_internal_device_block() and device_block() (bsc#1209284).\n- scsi: rdma/srp: fix residual handling (git-fixes)\n- scsi: sg: increase number of devices (bsc#1210048).\n- scsi: storvsc: always set no_report_opcodes (git-fixes).\n- scsi: storvsc: fix handling of virtual fibre channel timeouts (git-fixes).\n- scsi: storvsc: handle srb status value 0x30 (git-fixes).\n- scsi: storvsc: limit max_sectors for virtual fibre channel devices (git-fixes).\n- scsi: zfcp: defer fc_rport blocking until after adisc response (git-fixes bsc#1214371).\n- selftests/futex: order calls to futex_lock_pi (git-fixes).\n- selftests/harness: actually report skip for signal tests (git-fixes).\n- selftests/resctrl: close perf value read fd on errors (git-fixes).\n- selftests/resctrl: do not leak buffer in fill_cache() (git-fixes).\n- selftests/resctrl: unmount resctrl fs if child fails to run benchmark (git-fixes).\n- selftests/rseq: check if libc rseq support is registered (git-fixes).\n- selftests: forwarding: add a helper to skip test when using veth pairs (git-fixes).\n- selftests: forwarding: ethtool: skip when using veth pairs (git-fixes).\n- selftests: forwarding: ethtool_extended_state: skip when using veth pairs (git-fixes).\n- selftests: forwarding: skip test when no interfaces are specified (git-fixes).\n- selftests: forwarding: switch off timeout (git-fixes).\n- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).\n- selftests: forwarding: tc_actions: use ncat instead of nc (git-fixes).\n- selftests: forwarding: tc_flower: relax success criterion (git-fixes).\n- selftests: mirror_gre_changes: tighten up the ttl test match (git-fixes).\n- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).\n- serial: sc16is7xx: fix bug when first setting gpio direction (git-fixes).\n- serial: sprd: assign sprd_port after initialized to avoid wrong access (git-fixes).\n- serial: sprd: fix dma buffer leak issue (git-fixes).\n- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).\n- sfc: fix crash when reading stats while nic is resetting (git-fixes).\n- smb3: do not send lease break acknowledgment if all file handles have been closed (git-fixes).\n- smb3: do not set ntlmssp_version flag for negotiate not auth request (bsc#1193629).\n- smb: client: fix -wstringop-overflow issues (bsc#1193629).\n- smb: client: fix dfs link mount against w2k8 (bsc#1212142).\n- smb: client: fix null auth (git-fixes).\n- soc: aspeed: socinfo: add kfree for kstrdup (git-fixes).\n- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).\n- soundwire: fix enumeration completion (git-fixes).\n- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).\n- supported.conf: fix typos for -!optional markers\n- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).\n- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).\n- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).\n- target_core_rbd: remove snapshot existence validation code (bsc#1212857).\n- thunderbolt: read retimer nvm authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).\n- timers: add shutdown mechanism to the internal functions (bsc#1213970).\n- timers: provide timer_shutdown[_sync]() (bsc#1213970).\n- timers: rename del_timer() to timer_delete() (bsc#1213970).\n- timers: rename del_timer_sync() to timer_delete_sync() (bsc#1213970).\n- timers: replace bug_on()s (bsc#1213970).\n- timers: silently ignore timers with a null function (bsc#1213970).\n- timers: split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).\n- timers: update kernel-doc for various functions (bsc#1213970).\n- timers: use del_timer_sync() even on up (bsc#1213970).\n- tracing/histograms: add histograms to hist_vars if they have referenced variables (git-fixes).\n- tracing/histograms: return an error if we fail to add histogram to hist_vars list (git-fixes).\n- tracing/probes: fix not to count error code to total length (git-fixes).\n- tracing/probes: fix to avoid double count of the string length on the array (git-fixes).\n- tracing/probes: fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).\n- tracing/probes: fix to update dynamic data counter if fetcharg uses it (git-fixes).\n- tracing: fix cpu buffers unavailable due to \u0027record_disabled\u0027 missed (git-fixes).\n- tracing: fix memleak due to race between current_tracer and trace (git-fixes).\n- tracing: fix memory leak of iter-\u003etemp when reading trace_pipe (git-fixes).\n- tracing: fix null pointer dereference in tracing_err_log_open() (git-fixes).\n- tracing: fix warning in trace_buffered_event_disable() (git-fixes).\n- tty: fix hang on tty device with no_room set (git-fixes).\n- tty: n_gsm: fix the uaf caused by race condition in gsm_cleanup_mux (git-fixes).\n- tty: serial: fsl_lpuart: add i.mxrt1050 support (git-fixes).\n- tty: serial: fsl_lpuart: clear the error flags by writing 1 for lpuart32 platforms (git-fixes).\n- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).\n- tty: serial: fsl_lpuart: reduce rx watermark to 0 on ls1028a (git-fixes).\n- ubifs: fix memleak when insert_old_idx() failed (git-fixes).\n- update patches.suse/cpufreq-intel_pstate-fix-cpu-pstate.turbo_freq-initi (git-fixes bsc#1212526 bsc#1214368 jsc#ped-4927 jsc#ped-4929).\n- usb-storage: alauda: fix uninit-value in alauda_check_media() (git-fixes).\n- usb: chipidea: imx: add missing usb phy dpdm wakeup setting (git-fixes).\n- usb: chipidea: imx: do not request qos for imx8ulp (git-fixes).\n- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).\n- usb: common: usb-conn-gpio: prevent bailing out if initial role is none (git-fixes).\n- usb: dwc3: fix typos in gadget.c (git-fixes).\n- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).\n- usb: dwc3: properly handle processing of pending events (git-fixes).\n- usb: gadget: f_mass_storage: fix unused variable warning (git-fixes).\n- usb: gadget: fix the memory leak in raw_gadget driver (git-fixes).\n- usb: gadget: u_serial: avoid spinlock recursion in __gs_console_push (git-fixes).\n- usb: ohci-at91: fix the unhandle interrupt when resume (git-fixes).\n- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).\n- usb: quirks: add quirk for focusrite scarlett (git-fixes).\n- usb: serial: option: add quectel ec200a module support (git-fixes).\n- usb: serial: option: support quectel em060k_128 (git-fixes).\n- usb: serial: simple: add kaufmann rks+can vcp (git-fixes).\n- usb: serial: simple: sort driver entries (git-fixes).\n- usb: typec: altmodes/displayport: signal hpd when configuring pin assignment (git-fixes).\n- usb: typec: tcpm: fix response to vsafe0v event (git-fixes).\n- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).\n- usb: zaurus: add id for a-300/b-500/c-700 (git-fixes).\n- watchdog: sp5100_tco: support hygon fch/sch (server controller hub) (git-fixes).\n- wifi: ath10k: use rmw accessors for changing lnkctl (git-fixes).\n- wifi: ath11k: use rmw accessors for changing lnkctl (git-fixes).\n- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).\n- wifi: ath9k: protect wmi command response buffer replacement with a lock (git-fixes).\n- wifi: ath9k: use is_err() with debugfs_create_dir() (git-fixes).\n- wifi: cfg80211: fix return value in scan logic (git-fixes).\n- wifi: cfg80211: fix sband iftype data lookup for ap_vlan (git-fixes).\n- wifi: mt76: mt7615: do not advertise 5 ghz on first phy of mt7615d (dbdc) (git-fixes).\n- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).\n- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).\n- wifi: mt76: testmode: add nla_policy for mt76_tm_attr_tx_length (git-fixes).\n- wifi: mwifiex: avoid possible null skb pointer dereference (git-fixes).\n- wifi: mwifiex: fix error recovery in pcie buffer descriptor management (git-fixes).\n- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).\n- wifi: mwifiex: fix missed return in oob checks failed path (git-fixes).\n- wifi: mwifiex: fix oob and integer underflow when rx packets (git-fixes).\n- wifi: nl80211/cfg80211: add forgotten nla_policy for bss color attribute (git-fixes).\n- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).\n- wifi: rtw89: debug: fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).\n- x86/alternative: make custom return thunk unconditional (git-fixes).\n- x86/cpu/amd: disable xsaves on amd family 0x17 (git-fixes).\n- x86/cpu/kvm: provide untrain_ret_vm (git-fixes).\n- x86/cpu: clean up srso return thunk mess (git-fixes).\n- x86/cpu: cleanup the untrain mess (git-fixes).\n- x86/cpu: fix __x86_return_thunk symbol type (git-fixes).\n- x86/cpu: fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).\n- x86/cpu: rename original retbleed methods (git-fixes).\n- x86/cpu: rename srso_(.*)_alias to srso_alias_\\1 (git-fixes).\n- x86/mce: make sure logged mces are processed after sysfs update (git-fixes).\n- x86/retpoline,kprobes: fix position of thunk sections with config_lto_clang (git-fixes).\n- x86/retpoline,kprobes: skip optprobe check for indirect jumps with retpolines and ibt (git-fixes).\n- x86/retpoline: do not clobber rflags during srso_safe_ret() (git-fixes).\n- x86/speculation: add cpu_show_gds() prototype (git-fixes).\n- x86/speculation: mark all skylake cpus as vulnerable to gds (git-fixes).\n- x86/srso: correct the mitigation status when smt is disabled (git-fixes).\n- x86/srso: disable the mitigation on unaffected configurations (git-fixes).\n- x86/srso: explain the untraining sequences a bit more (git-fixes).\n- x86/srso: fix build breakage with the llvm linker (git-fixes).\n- x86/srso: fix return thunks in generated code (git-fixes).\n- x86/static_call: fix __static_call_fixup() (git-fixes).\n- xfs: fix sb write verify for lazysbcount (bsc#1214661).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2023-3600,SUSE-SLE-Micro-5.3-2023-3600,SUSE-SLE-Micro-5.4-2023-3600,SUSE-SLE-Module-Live-Patching-15-SP4-2023-3600,SUSE-SLE-Module-RT-15-SP4-2023-3600,openSUSE-SLE-15.4-2023-3600",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_3600-2.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2023:3600-2",
"url": "https://www.suse.com/support/update/announcement/2023/suse-su-20233600-2/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2023:3600-2",
"url": "https://lists.suse.com/pipermail/sle-updates/2023-September/031622.html"
},
{
"category": "self",
"summary": "SUSE Bug 1023051",
"url": "https://bugzilla.suse.com/1023051"
},
{
"category": "self",
"summary": "SUSE Bug 1120059",
"url": "https://bugzilla.suse.com/1120059"
},
{
"category": "self",
"summary": "SUSE Bug 1177719",
"url": "https://bugzilla.suse.com/1177719"
},
{
"category": "self",
"summary": "SUSE Bug 1188885",
"url": "https://bugzilla.suse.com/1188885"
},
{
"category": "self",
"summary": "SUSE Bug 1193629",
"url": "https://bugzilla.suse.com/1193629"
},
{
"category": "self",
"summary": "SUSE Bug 1194869",
"url": "https://bugzilla.suse.com/1194869"
},
{
"category": "self",
"summary": "SUSE Bug 1205462",
"url": "https://bugzilla.suse.com/1205462"
},
{
"category": "self",
"summary": "SUSE Bug 1208902",
"url": "https://bugzilla.suse.com/1208902"
},
{
"category": "self",
"summary": "SUSE Bug 1208949",
"url": "https://bugzilla.suse.com/1208949"
},
{
"category": "self",
"summary": "SUSE Bug 1209284",
"url": "https://bugzilla.suse.com/1209284"
},
{
"category": "self",
"summary": "SUSE Bug 1209799",
"url": "https://bugzilla.suse.com/1209799"
},
{
"category": "self",
"summary": "SUSE Bug 1210048",
"url": "https://bugzilla.suse.com/1210048"
},
{
"category": "self",
"summary": "SUSE Bug 1210448",
"url": "https://bugzilla.suse.com/1210448"
},
{
"category": "self",
"summary": "SUSE Bug 1212091",
"url": "https://bugzilla.suse.com/1212091"
},
{
"category": "self",
"summary": "SUSE Bug 1212142",
"url": "https://bugzilla.suse.com/1212142"
},
{
"category": "self",
"summary": "SUSE Bug 1212526",
"url": "https://bugzilla.suse.com/1212526"
},
{
"category": "self",
"summary": "SUSE Bug 1212857",
"url": "https://bugzilla.suse.com/1212857"
},
{
"category": "self",
"summary": "SUSE Bug 1212873",
"url": "https://bugzilla.suse.com/1212873"
},
{
"category": "self",
"summary": "SUSE Bug 1213026",
"url": "https://bugzilla.suse.com/1213026"
},
{
"category": "self",
"summary": "SUSE Bug 1213123",
"url": "https://bugzilla.suse.com/1213123"
},
{
"category": "self",
"summary": "SUSE Bug 1213546",
"url": "https://bugzilla.suse.com/1213546"
},
{
"category": "self",
"summary": "SUSE Bug 1213580",
"url": "https://bugzilla.suse.com/1213580"
},
{
"category": "self",
"summary": "SUSE Bug 1213601",
"url": "https://bugzilla.suse.com/1213601"
},
{
"category": "self",
"summary": "SUSE Bug 1213666",
"url": "https://bugzilla.suse.com/1213666"
},
{
"category": "self",
"summary": "SUSE Bug 1213757",
"url": "https://bugzilla.suse.com/1213757"
},
{
"category": "self",
"summary": "SUSE Bug 1213759",
"url": "https://bugzilla.suse.com/1213759"
},
{
"category": "self",
"summary": "SUSE Bug 1213916",
"url": "https://bugzilla.suse.com/1213916"
},
{
"category": "self",
"summary": "SUSE Bug 1213921",
"url": "https://bugzilla.suse.com/1213921"
},
{
"category": "self",
"summary": "SUSE Bug 1213927",
"url": "https://bugzilla.suse.com/1213927"
},
{
"category": "self",
"summary": "SUSE Bug 1213946",
"url": "https://bugzilla.suse.com/1213946"
},
{
"category": "self",
"summary": "SUSE Bug 1213968",
"url": "https://bugzilla.suse.com/1213968"
},
{
"category": "self",
"summary": "SUSE Bug 1213970",
"url": "https://bugzilla.suse.com/1213970"
},
{
"category": "self",
"summary": "SUSE Bug 1213971",
"url": "https://bugzilla.suse.com/1213971"
},
{
"category": "self",
"summary": "SUSE Bug 1214000",
"url": "https://bugzilla.suse.com/1214000"
},
{
"category": "self",
"summary": "SUSE Bug 1214019",
"url": "https://bugzilla.suse.com/1214019"
},
{
"category": "self",
"summary": "SUSE Bug 1214120",
"url": "https://bugzilla.suse.com/1214120"
},
{
"category": "self",
"summary": "SUSE Bug 1214149",
"url": "https://bugzilla.suse.com/1214149"
},
{
"category": "self",
"summary": "SUSE Bug 1214180",
"url": "https://bugzilla.suse.com/1214180"
},
{
"category": "self",
"summary": "SUSE Bug 1214238",
"url": "https://bugzilla.suse.com/1214238"
},
{
"category": "self",
"summary": "SUSE Bug 1214285",
"url": "https://bugzilla.suse.com/1214285"
},
{
"category": "self",
"summary": "SUSE Bug 1214297",
"url": "https://bugzilla.suse.com/1214297"
},
{
"category": "self",
"summary": "SUSE Bug 1214299",
"url": "https://bugzilla.suse.com/1214299"
},
{
"category": "self",
"summary": "SUSE Bug 1214350",
"url": "https://bugzilla.suse.com/1214350"
},
{
"category": "self",
"summary": "SUSE Bug 1214368",
"url": "https://bugzilla.suse.com/1214368"
},
{
"category": "self",
"summary": "SUSE Bug 1214370",
"url": "https://bugzilla.suse.com/1214370"
},
{
"category": "self",
"summary": "SUSE Bug 1214371",
"url": "https://bugzilla.suse.com/1214371"
},
{
"category": "self",
"summary": "SUSE Bug 1214372",
"url": "https://bugzilla.suse.com/1214372"
},
{
"category": "self",
"summary": "SUSE Bug 1214380",
"url": "https://bugzilla.suse.com/1214380"
},
{
"category": "self",
"summary": "SUSE Bug 1214386",
"url": "https://bugzilla.suse.com/1214386"
},
{
"category": "self",
"summary": "SUSE Bug 1214392",
"url": "https://bugzilla.suse.com/1214392"
},
{
"category": "self",
"summary": "SUSE Bug 1214393",
"url": "https://bugzilla.suse.com/1214393"
},
{
"category": "self",
"summary": "SUSE Bug 1214397",
"url": "https://bugzilla.suse.com/1214397"
},
{
"category": "self",
"summary": "SUSE Bug 1214428",
"url": "https://bugzilla.suse.com/1214428"
},
{
"category": "self",
"summary": "SUSE Bug 1214451",
"url": "https://bugzilla.suse.com/1214451"
},
{
"category": "self",
"summary": "SUSE Bug 1214659",
"url": "https://bugzilla.suse.com/1214659"
},
{
"category": "self",
"summary": "SUSE Bug 1214661",
"url": "https://bugzilla.suse.com/1214661"
},
{
"category": "self",
"summary": "SUSE Bug 1214729",
"url": "https://bugzilla.suse.com/1214729"
},
{
"category": "self",
"summary": "SUSE Bug 1214742",
"url": "https://bugzilla.suse.com/1214742"
},
{
"category": "self",
"summary": "SUSE Bug 1214743",
"url": "https://bugzilla.suse.com/1214743"
},
{
"category": "self",
"summary": "SUSE Bug 1214756",
"url": "https://bugzilla.suse.com/1214756"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2007 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2007/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-20588 page",
"url": "https://www.suse.com/security/cve/CVE-2023-20588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-34319 page",
"url": "https://www.suse.com/security/cve/CVE-2023-34319/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-3610 page",
"url": "https://www.suse.com/security/cve/CVE-2023-3610/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-37453 page",
"url": "https://www.suse.com/security/cve/CVE-2023-37453/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-3772 page",
"url": "https://www.suse.com/security/cve/CVE-2023-3772/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-3863 page",
"url": "https://www.suse.com/security/cve/CVE-2023-3863/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4128 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4128/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4133 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4134 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4147 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4147/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4194 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4194/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4273 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4273/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4387 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4387/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4459 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4459/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4569 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4569/"
}
],
"title": "Security update for the Linux Kernel",
"tracking": {
"current_release_date": "2023-09-21T10:18:09Z",
"generator": {
"date": "2023-09-21T10:18:09Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2023:3600-2",
"initial_release_date": "2023-09-21T10:18:09Z",
"revision_history": [
{
"date": "2023-09-21T10:18:09Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64",
"product": {
"name": "kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64",
"product_id": "kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Live Patching 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Live Patching 15 SP4",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-live-patching:15:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP4",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
},
"product_reference": "kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 15 SP4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-2007",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2007"
}
],
"notes": [
{
"category": "general",
"text": "The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2007",
"url": "https://www.suse.com/security/cve/CVE-2023-2007"
},
{
"category": "external",
"summary": "SUSE Bug 1210448 for CVE-2023-2007",
"url": "https://bugzilla.suse.com/1210448"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "moderate"
}
],
"title": "CVE-2023-2007"
},
{
"cve": "CVE-2023-20588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-20588"
}
],
"notes": [
{
"category": "general",
"text": "\nA division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. \n\n\n\n\n\n\n\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-20588",
"url": "https://www.suse.com/security/cve/CVE-2023-20588"
},
{
"category": "external",
"summary": "SUSE Bug 1213927 for CVE-2023-20588",
"url": "https://bugzilla.suse.com/1213927"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "moderate"
}
],
"title": "CVE-2023-20588"
},
{
"cve": "CVE-2023-34319",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-34319"
}
],
"notes": [
{
"category": "general",
"text": "The fix for XSA-423 added logic to Linux\u0027es netback driver to deal with\na frontend splitting a packet in a way such that not all of the headers\nwould come in one piece. Unfortunately the logic introduced there\ndidn\u0027t account for the extreme case of the entire packet being split\ninto as many pieces as permitted by the protocol, yet still being\nsmaller than the area that\u0027s specially dealt with to keep all (possible)\nheaders together. Such an unusual packet would therefore trigger a\nbuffer overrun in the driver.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-34319",
"url": "https://www.suse.com/security/cve/CVE-2023-34319"
},
{
"category": "external",
"summary": "SUSE Bug 1213546 for CVE-2023-34319",
"url": "https://bugzilla.suse.com/1213546"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "moderate"
}
],
"title": "CVE-2023-34319"
},
{
"cve": "CVE-2023-3610",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-3610"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability in the Linux kernel\u0027s netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nFlaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.\n\nWe recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-3610",
"url": "https://www.suse.com/security/cve/CVE-2023-3610"
},
{
"category": "external",
"summary": "SUSE Bug 1213580 for CVE-2023-3610",
"url": "https://bugzilla.suse.com/1213580"
},
{
"category": "external",
"summary": "SUSE Bug 1213584 for CVE-2023-3610",
"url": "https://bugzilla.suse.com/1213584"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "important"
}
],
"title": "CVE-2023-3610"
},
{
"cve": "CVE-2023-37453",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-37453"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-37453",
"url": "https://www.suse.com/security/cve/CVE-2023-37453"
},
{
"category": "external",
"summary": "SUSE Bug 1213123 for CVE-2023-37453",
"url": "https://bugzilla.suse.com/1213123"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "moderate"
}
],
"title": "CVE-2023-37453"
},
{
"cve": "CVE-2023-3772",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-3772"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-3772",
"url": "https://www.suse.com/security/cve/CVE-2023-3772"
},
{
"category": "external",
"summary": "SUSE Bug 1213666 for CVE-2023-3772",
"url": "https://bugzilla.suse.com/1213666"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "moderate"
}
],
"title": "CVE-2023-3772"
},
{
"cve": "CVE-2023-3863",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-3863"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-3863",
"url": "https://www.suse.com/security/cve/CVE-2023-3863"
},
{
"category": "external",
"summary": "SUSE Bug 1213601 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1213601"
},
{
"category": "external",
"summary": "SUSE Bug 1213603 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1213603"
},
{
"category": "external",
"summary": "SUSE Bug 1217444 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1217444"
},
{
"category": "external",
"summary": "SUSE Bug 1217531 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1217531"
},
{
"category": "external",
"summary": "SUSE Bug 1219704 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1219704"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "moderate"
}
],
"title": "CVE-2023-3863"
},
{
"cve": "CVE-2023-4128",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4128"
}
],
"notes": [
{
"category": "general",
"text": "** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Reason: This record is a duplicate of CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Notes: All CVE users should reference CVE-2023-4206, CVE-2023-4207, CVE-2023-4208 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4128",
"url": "https://www.suse.com/security/cve/CVE-2023-4128"
},
{
"category": "external",
"summary": "SUSE Bug 1214149 for CVE-2023-4128",
"url": "https://bugzilla.suse.com/1214149"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "important"
}
],
"title": "CVE-2023-4128"
},
{
"cve": "CVE-2023-4133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4133"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug occurs when the cxgb4 device is detaching due to a possible rearming of the flower_stats_timer from the work queue. This flaw allows a local user to crash the system, causing a denial of service condition.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4133",
"url": "https://www.suse.com/security/cve/CVE-2023-4133"
},
{
"category": "external",
"summary": "SUSE Bug 1213970 for CVE-2023-4133",
"url": "https://bugzilla.suse.com/1213970"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "moderate"
}
],
"title": "CVE-2023-4133"
},
{
"cve": "CVE-2023-4134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4134"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel. This issue occurs in the device cleanup routine due to a possible rearming of the watchdog_timer from the workqueue. This could allow a local user to crash the system, causing a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4134",
"url": "https://www.suse.com/security/cve/CVE-2023-4134"
},
{
"category": "external",
"summary": "SUSE Bug 1213971 for CVE-2023-4134",
"url": "https://bugzilla.suse.com/1213971"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "moderate"
}
],
"title": "CVE-2023-4134"
},
{
"cve": "CVE-2023-4147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4147"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free flaw was found in the Linux kernel\u0027s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4147",
"url": "https://www.suse.com/security/cve/CVE-2023-4147"
},
{
"category": "external",
"summary": "SUSE Bug 1213968 for CVE-2023-4147",
"url": "https://bugzilla.suse.com/1213968"
},
{
"category": "external",
"summary": "SUSE Bug 1215118 for CVE-2023-4147",
"url": "https://bugzilla.suse.com/1215118"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "important"
}
],
"title": "CVE-2023-4147"
},
{
"cve": "CVE-2023-4194",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4194"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 (\"tun: tun_chr_open(): correctly initialize socket uid\"), - 66b2c338adce (\"tap: tap_open(): correctly initialize socket uid\"), pass \"inode-\u003ei_uid\" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4194",
"url": "https://www.suse.com/security/cve/CVE-2023-4194"
},
{
"category": "external",
"summary": "SUSE Bug 1214019 for CVE-2023-4194",
"url": "https://bugzilla.suse.com/1214019"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "moderate"
}
],
"title": "CVE-2023-4194"
},
{
"cve": "CVE-2023-4273",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4273"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file name reconstruction function, which is responsible for reading file name entries from a directory index and merging file name parts belonging to one file into a single long file name. Since the file name characters are copied into a stack variable, a local privileged attacker could use this flaw to overflow the kernel stack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4273",
"url": "https://www.suse.com/security/cve/CVE-2023-4273"
},
{
"category": "external",
"summary": "SUSE Bug 1214120 for CVE-2023-4273",
"url": "https://bugzilla.suse.com/1214120"
},
{
"category": "external",
"summary": "SUSE Bug 1214123 for CVE-2023-4273",
"url": "https://bugzilla.suse.com/1214123"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "important"
}
],
"title": "CVE-2023-4273"
},
{
"cve": "CVE-2023-4387",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4387"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware\u0027s vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash the system due to a double-free while cleaning up vmxnet3_rq_cleanup_all, which could also lead to a kernel information leak problem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4387",
"url": "https://www.suse.com/security/cve/CVE-2023-4387"
},
{
"category": "external",
"summary": "SUSE Bug 1214350 for CVE-2023-4387",
"url": "https://bugzilla.suse.com/1214350"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "moderate"
}
],
"title": "CVE-2023-4387"
},
{
"cve": "CVE-2023-4459",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4459"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during cleanup.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4459",
"url": "https://www.suse.com/security/cve/CVE-2023-4459"
},
{
"category": "external",
"summary": "SUSE Bug 1214451 for CVE-2023-4459",
"url": "https://bugzilla.suse.com/1214451"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "moderate"
}
],
"title": "CVE-2023-4459"
},
{
"cve": "CVE-2023-4569",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4569"
}
],
"notes": [
{
"category": "general",
"text": "A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to cause double-deactivations of catchall elements, which can result in a memory leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4569",
"url": "https://www.suse.com/security/cve/CVE-2023-4569"
},
{
"category": "external",
"summary": "SUSE Bug 1214729 for CVE-2023-4569",
"url": "https://bugzilla.suse.com/1214729"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_15_49-rt-1-150400.1.3.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-21T10:18:09Z",
"details": "important"
}
],
"title": "CVE-2023-4569"
}
]
}
SUSE-SU-2023:3601-1
Vulnerability from csaf_suse - Published: 2023-09-14 10:31 - Updated: 2023-09-14 10:31Summary
Security update for the Linux Kernel
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel
Description of the patch:
The SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
- CVE-2022-36402: Fixed an integer overflow vulnerability in vmwgfx driver in that allowed a local attacker with a user account on the system to gain privilege, causing a denial of service (bsc#1203517).
- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).
- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).
- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).
- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).
- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).
- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).
- CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233).
- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).
- CVE-2023-4132: Fixed use-after-free vulnerability was found in the siano smsusb module that allowed a local user to crash the system, causing a denial of service condition (bsc#1213969).
- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).
- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).
- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).
- CVE-2023-4385: Fixed a NULL pointer dereference flaw in dbFree that may have allowed a local attacker to crash the system due to a missing sanity check (bsc#1214348).
- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).
- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).
The following non-security bugs were fixed:
- af_key: fix send_acquire race with pfkey_register (git-fixes).
- af_packet: fix data-race in packet_setsockopt / packet_setsockopt (git-fixes).
- af_unix: fix a data race of sk->sk_receive_queue->qlen (git-fixes).
- arm64: re-enable support for contiguous hugepages (git-fixes)
- arm64: vdso: fix clock_getres() for clock_realtime (git-fixes)
- arm: spear: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).
- bnx2x: fix page fault following eeh recovery (bsc#1214299).
- bonding: fix a use-after-free problem when bond_sysfs_slave_add() failed (git-fixes).
- bpf, arm64: remove prefetch insn in xadd mapping (git-fixes)
- bpf, arm64: use more scalable stadd over ldxr / stxr loop in xadd (git-fixes)
- bridge: ebtables: do not crash when using dnat target in output chains (git-fixes).
- btrfs-allow-use-of-global-block-reserve-for-balance: (bsc#1214335).
- btrfs-unset-reloc-control-if-transaction-commit-fail: (bsc#1212051).
- clocksource/drivers/arm_arch_timer: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource/drivers/sp804: do not use timer namespace for timer_shutdown() function (bsc#1213970).
- fs/sysv: null check to prevent null-ptr-deref bug (git-fixes).
- fs: hfsplus: remove warn_on() from hfsplus_cat_{read,write}_inode() (git-fixes).
- fs: lockd: avoid possible wrong null parameter (git-fixes).
- inetpeer: fix data-race in inet_putpeer / inet_putpeer (git-fixes).
- kabi/severities: ignore newly added srso mitigation functions
- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214752).
- module: avoid allocation if module is already present and ready (bsc#1213921).
- module: extract patient module check into helper (bsc#1213921).
- module: move check_modinfo() early to early_mod_check() (bsc#1213921).
- module: move early sanity checks into a helper (bsc#1213921).
- net-sysfs: call dev_hold always in netdev_queue_add_kobject (git-fixes).
- net-sysfs: call dev_hold always in rx_queue_add_kobject (git-fixes).
- net-sysfs: fix netdev_queue_add_kobject() breakage (git-fixes).
- net-sysfs: fix reference count leak in rx|netdev_queue_add_kobject (git-fixes).
- net/af_unix: fix a data-race in unix_dgram_poll (git-fixes).
- net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock (git-fixes).
- net/fq_impl: switch to kvmalloc() for memory allocation (git-fixes).
- net: bnx2x: fix variable dereferenced before check (git-fixes).
- net: icmp: fix data-race in cmp_global_allow() (git-fixes).
- net: mana: add support for xdp_query_prog (jsc#sle-18779, bsc#1214209).
- net: usb: qmi_wwan: add support for compal rxm-g1 (git-fixes).
- netfilter: ipset: fix an error code in ip_set_sockfn_get() (git-fixes).
- netfilter: nf_conntrack: fix possible possible crash on module loading (git-fixes).
- nfs/blocklayout: use the passed in gfp flags (git-fixes).
- nfs: guard against readdir loop when entry names exceed maxnamelen (git-fixes).
- nfsd: add encoding of op_recall flag for write delegation (git-fixes).
- nfsd: da_addr_body field missing in some getdeviceinfo replies (git-fixes).
- nfsd: remove incorrect check in nfsd4_validate_stateid (git-fixes).
- packet: fix data-race in fanout_flow_is_huge() (git-fixes).
- packet: unconditionally free po->rollover (git-fixes).
- powerpc/mm/altmap: fix altmap boundary check (bsc#1120059 git-fixes).
- revert 'scsi: qla2xxx: fix buffer overrun' (bsc#1214928).
- ring-buffer: fix deadloop issue on reading trace_pipe (git-fixes).
- ring-buffer: fix wrong stat of cpu_buffer->read (git-fixes).
- s390/cio: cio_ignore_proc_seq_next should increase position index (git-fixes bsc#1215057).
- s390/cpum_sf: avoid sbd overflow condition in irq handler (git-fixes bsc#1213908).
- s390/cpum_sf: check for sdbt and sdb consistency (git-fixes bsc#1213910).
- s390/dasd/cio: interpret ccw_device_get_mdc return value correctly (git-fixes bsc#1215049).
- s390/dasd: fix capacity calculation for large volumes (git-fixes bsc#1215034).
- s390/dasd: fix hanging device after quiesce/resume (git-fixes bsc#1214157).
- s390/ftrace: fix endless recursion in function_graph tracer (git-fixes bsc#1213912).
- s390/jump_label: print real address in a case of a jump label bug (git-fixes bsc#1213899).
- s390/kasan: fix strncpy_from_user kasan checks (git-fixes bsc#1215037).
- s390/kdump: fix memleak in nt_vmcoreinfo (git-fixes bsc#1215028).
- s390/pkey: add one more argument space for debug feature entry (git-fixes bsc#1215035).
- s390/qdio: add sanity checks to the fast-requeue path (git-fixes bsc#1215038).
- s390/smp: __smp_rescan_cpus() - move cpumask away from stack (git-fixes bsc#1213906).
- s390/smp: fix physical to logical cpu map for smt (git-fixes bsc#1213904).
- s390/time: ensure get_clock_monotonic() returns monotonic values (git-fixes bsc#1213911).
- s390/uaccess: avoid (false positive) compiler warnings (git-fixes bsc#1215041).
- s390/zcrypt: handle new reply code filtered_by_hypervisor (git-fixes bsc#1215046).
- s390/zcrypt: improve special ap message cmd handling (git-fixes bsc#1215032).
- s390: zcrypt: initialize variables before_use (git-fixes bsc#1215036).
- sched/core: check quota and period overflow at usec to nsec conversion (git fixes).
- sched/core: handle overflow in cpu_shares_write_u64 (git fixes).
- sched/cpufreq: fix kobject memleak (git fixes).
- sched/fair: do not numa balance for kthreads (git fixes).
- sched/fair: fix cfs bandwidth hrtimer expiry type (git fixes).
- sched/topology: fix off by one bug (git fixes).
- scsi: qla2xxx: add logs for sfp temperature monitoring (bsc#1214928).
- scsi: qla2xxx: allow 32-byte cdbs (bsc#1214928).
- scsi: qla2xxx: error code did not return to upper layer (bsc#1214928).
- scsi: qla2xxx: fix firmware resource tracking (bsc#1214928).
- scsi: qla2xxx: fix smatch warn for qla_init_iocb_limit() (bsc#1214928).
- scsi: qla2xxx: flush mailbox commands on chip reset (bsc#1214928).
- scsi: qla2xxx: move resource to allow code reuse (bsc#1214928).
- scsi: qla2xxx: remove unsupported ql2xenabledif option (bsc#1214928).
- scsi: qla2xxx: remove unused declarations (bsc#1214928).
- scsi: qla2xxx: remove unused variables in qla24xx_build_scsi_type_6_iocbs() (bsc#1214928).
- scsi: qla2xxx: update version to 10.02.09.100-k (bsc#1214928).
- scsi: storvsc: always set no_report_opcodes (git-fixes).
- scsi: storvsc: fix handling of virtual fibre channel timeouts (git-fixes).
- skbuff: fix a data race in skb_queue_len() (git-fixes).
- sort latest foray of security patches
- sunrpc: always clear xprt_sock_connecting before xprt_clear_connecting on tcp xprt (bsc#1214453).
- timers: add shutdown mechanism to the internal functions (bsc#1213970).
- timers: provide timer_shutdown[_sync]() (bsc#1213970).
- timers: rename del_timer() to timer_delete() (bsc#1213970).
- timers: rename del_timer_sync() to timer_delete_sync() (bsc#1213970).
- timers: replace bug_on()s (bsc#1213970).
- timers: silently ignore timers with a null function (bsc#1213970).
- timers: split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).
- timers: update kernel-doc for various functions (bsc#1213970).
- timers: use del_timer_sync() even on up (bsc#1213970).
- tracing: fix warning in trace_buffered_event_disable() (git-fixes).
- tun: fix bonding active backup with arp monitoring (git-fixes).
- ubifs: fix snprintf() checking (git-fixes).
- udp6: fix race condition in udp6_sendmsg & connect (git-fixes).
- udp: fix race between close() and udp_abort() (git-fixes).
- usb-storage: alauda: fix uninit-value in alauda_check_media() (git-fixes).
- usb: host: xhci: fix potential memory leak in xhci_alloc_stream_info() (git-fixes).
- usb: serial: cp210x: add kamstrup rf sniffer pids (git-fixes).
- usb: serial: cp210x: add scalance lpe-9000 device id (git-fixes).
- usb: serial: option: add lara-r6 01b pids (git-fixes).
- usb: serial: option: add quectel ec200a module support (git-fixes).
- usb: serial: option: add quectel ec200u modem (git-fixes).
- usb: serial: option: add quectel em05cn (sg) modem (git-fixes).
- usb: serial: option: add quectel em05cn modem (git-fixes).
- usb: serial: option: add support for vw/skoda 'carstick lte' (git-fixes).
- usb: serial: option: add u-blox lara-l6 modem (git-fixes).
- usb: serial: option: support quectel em060k_128 (git-fixes).
- usb: serial: simple: add kaufmann rks+can vcp (git-fixes).
- usb: serial: simple: sort driver entries (git-fixes).
- usb: xhci-mtk: set the dma max_seg_size (git-fixes).
- usb: xhci: check endpoint is valid before dereferencing it (git-fixes).
- usb: zaurus: add id for a-300/b-500/c-700 (git-fixes).
- x86/bugs: reset speculation control settings on init (git-fixes).
- x86/cpu/amd: disable xsaves on amd family 0x17 (git-fixes).
- x86/cpu/amd: enable zenbleed fix for amd custom apu 0405 (git-fixes).
- x86/cpu/kvm: provide untrain_ret_vm (git-fixes).
- x86/cpu/vmware: fix platform detection vmware_port macro (bsc#1210327).
- x86/cpu/vmware: use the full form of inl in vmware_hypercall, for clang/llvm (bsc#1210327).
- x86/cpu/vmware: use the full form of inl in vmware_port (bsc#1210327).
- x86/cpu: cleanup the untrain mess (git-fixes).
- x86/cpu: fix __x86_return_thunk symbol type (git-fixes).
- x86/cpu: fix amd_check_microcode() declaration (git-fixes).
- x86/cpu: fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
- x86/cpu: rename original retbleed methods (git-fixes).
- x86/cpu: rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
- x86/crash: disable virt in core nmi crash handler to avoid double shootdown (git-fixes).
- x86/ioapic: do not return 0 from arch_dynirq_lower_bound() (git-fixes).
- x86/microcode/amd: load late on both threads too (git-fixes).
- x86/mm: do not shuffle cpu entry areas without kaslr (git-fixes).
- x86/mm: fix use of uninitialized buffer in sme_enable() (git-fixes).
- x86/reboot: disable svm, not just vmx, when stopping cpus (git-fixes).
- x86/retpoline,kprobes: fix position of thunk sections with config_lto_clang (git-fixes).
- x86/retpoline,kprobes: skip optprobe check for indirect jumps with retpolines and ibt (git-fixes).
- x86/retpoline: do not clobber rflags during srso_safe_ret() (git-fixes).
- x86/speculation: add cpu_show_gds() prototype (git-fixes).
- x86/speculation: mark all skylake cpus as vulnerable to gds (git-fixes).
- x86/srso: correct the mitigation status when smt is disabled (git-fixes).
- x86/srso: disable the mitigation on unaffected configurations (git-fixes).
- x86/srso: explain the untraining sequences a bit more (git-fixes).
- x86/srso: fix build breakage with the llvm linker (git-fixes).
- x86/virt: force gif=1 prior to disabling svm (for reboot flows) (git-fixes).
- x86/vmware: add a header file for hypercall definitions (bsc#1210327).
- x86/vmware: add steal time clock support for vmware guests (bsc#1210327).
- x86/vmware: enable steal time accounting (bsc#1210327).
- x86/vmware: update platform detection code for vmcall/vmmcall hypercalls (bsc#1210327).
- x86: move gds_ucode_mitigated() declaration to header (git-fixes).
- xfrm: release device reference for invalid state (git-fixes).
- xhci-pci: set the dma max_seg_size (git-fixes).
- xhci: Remove device endpoints from bandwidth list when freeing the device (git-fixes).
Patchnames: SUSE-2023-3601,SUSE-SLE-RT-12-SP5-2023-3601
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.4 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.7 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.2 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.1 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.1 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.7 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.6 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
105 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\n\nThe SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-36402: Fixed an integer overflow vulnerability in vmwgfx driver in that allowed a local attacker with a user account on the system to gain privilege, causing a denial of service (bsc#1203517).\n- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).\n- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).\n- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).\n- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).\n- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).\n- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).\n- CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233).\n- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).\n- CVE-2023-4132: Fixed use-after-free vulnerability was found in the siano smsusb module that allowed a local user to crash the system, causing a denial of service condition (bsc#1213969).\n- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).\n- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).\n- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).\n- CVE-2023-4385: Fixed a NULL pointer dereference flaw in dbFree that may have allowed a local attacker to crash the system due to a missing sanity check (bsc#1214348).\n- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).\n- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).\n\nThe following non-security bugs were fixed:\n\n- af_key: fix send_acquire race with pfkey_register (git-fixes).\n- af_packet: fix data-race in packet_setsockopt / packet_setsockopt (git-fixes).\n- af_unix: fix a data race of sk-\u003esk_receive_queue-\u003eqlen (git-fixes).\n- arm64: re-enable support for contiguous hugepages (git-fixes)\n- arm64: vdso: fix clock_getres() for clock_realtime (git-fixes)\n- arm: spear: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).\n- bnx2x: fix page fault following eeh recovery (bsc#1214299).\n- bonding: fix a use-after-free problem when bond_sysfs_slave_add() failed (git-fixes).\n- bpf, arm64: remove prefetch insn in xadd mapping (git-fixes)\n- bpf, arm64: use more scalable stadd over ldxr / stxr loop in xadd (git-fixes)\n- bridge: ebtables: do not crash when using dnat target in output chains (git-fixes).\n- btrfs-allow-use-of-global-block-reserve-for-balance: (bsc#1214335).\n- btrfs-unset-reloc-control-if-transaction-commit-fail: (bsc#1212051).\n- clocksource/drivers/arm_arch_timer: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource/drivers/sp804: do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- fs/sysv: null check to prevent null-ptr-deref bug (git-fixes).\n- fs: hfsplus: remove warn_on() from hfsplus_cat_{read,write}_inode() (git-fixes).\n- fs: lockd: avoid possible wrong null parameter (git-fixes).\n- inetpeer: fix data-race in inet_putpeer / inet_putpeer (git-fixes).\n- kabi/severities: ignore newly added srso mitigation functions\n- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214752).\n- module: avoid allocation if module is already present and ready (bsc#1213921).\n- module: extract patient module check into helper (bsc#1213921).\n- module: move check_modinfo() early to early_mod_check() (bsc#1213921).\n- module: move early sanity checks into a helper (bsc#1213921).\n- net-sysfs: call dev_hold always in netdev_queue_add_kobject (git-fixes).\n- net-sysfs: call dev_hold always in rx_queue_add_kobject (git-fixes).\n- net-sysfs: fix netdev_queue_add_kobject() breakage (git-fixes).\n- net-sysfs: fix reference count leak in rx|netdev_queue_add_kobject (git-fixes).\n- net/af_unix: fix a data-race in unix_dgram_poll (git-fixes).\n- net/af_unix: fix a data-race in unix_dgram_sendmsg / unix_release_sock (git-fixes).\n- net/fq_impl: switch to kvmalloc() for memory allocation (git-fixes).\n- net: bnx2x: fix variable dereferenced before check (git-fixes).\n- net: icmp: fix data-race in cmp_global_allow() (git-fixes).\n- net: mana: add support for xdp_query_prog (jsc#sle-18779, bsc#1214209).\n- net: usb: qmi_wwan: add support for compal rxm-g1 (git-fixes).\n- netfilter: ipset: fix an error code in ip_set_sockfn_get() (git-fixes).\n- netfilter: nf_conntrack: fix possible possible crash on module loading (git-fixes).\n- nfs/blocklayout: use the passed in gfp flags (git-fixes).\n- nfs: guard against readdir loop when entry names exceed maxnamelen (git-fixes).\n- nfsd: add encoding of op_recall flag for write delegation (git-fixes).\n- nfsd: da_addr_body field missing in some getdeviceinfo replies (git-fixes).\n- nfsd: remove incorrect check in nfsd4_validate_stateid (git-fixes).\n- packet: fix data-race in fanout_flow_is_huge() (git-fixes).\n- packet: unconditionally free po-\u003erollover (git-fixes).\n- powerpc/mm/altmap: fix altmap boundary check (bsc#1120059 git-fixes).\n- revert \u0027scsi: qla2xxx: fix buffer overrun\u0027 (bsc#1214928).\n- ring-buffer: fix deadloop issue on reading trace_pipe (git-fixes).\n- ring-buffer: fix wrong stat of cpu_buffer-\u003eread (git-fixes).\n- s390/cio: cio_ignore_proc_seq_next should increase position index (git-fixes bsc#1215057).\n- s390/cpum_sf: avoid sbd overflow condition in irq handler (git-fixes bsc#1213908).\n- s390/cpum_sf: check for sdbt and sdb consistency (git-fixes bsc#1213910).\n- s390/dasd/cio: interpret ccw_device_get_mdc return value correctly (git-fixes bsc#1215049).\n- s390/dasd: fix capacity calculation for large volumes (git-fixes bsc#1215034).\n- s390/dasd: fix hanging device after quiesce/resume (git-fixes bsc#1214157).\n- s390/ftrace: fix endless recursion in function_graph tracer (git-fixes bsc#1213912).\n- s390/jump_label: print real address in a case of a jump label bug (git-fixes bsc#1213899).\n- s390/kasan: fix strncpy_from_user kasan checks (git-fixes bsc#1215037).\n- s390/kdump: fix memleak in nt_vmcoreinfo (git-fixes bsc#1215028).\n- s390/pkey: add one more argument space for debug feature entry (git-fixes bsc#1215035).\n- s390/qdio: add sanity checks to the fast-requeue path (git-fixes bsc#1215038).\n- s390/smp: __smp_rescan_cpus() - move cpumask away from stack (git-fixes bsc#1213906).\n- s390/smp: fix physical to logical cpu map for smt (git-fixes bsc#1213904).\n- s390/time: ensure get_clock_monotonic() returns monotonic values (git-fixes bsc#1213911).\n- s390/uaccess: avoid (false positive) compiler warnings (git-fixes bsc#1215041).\n- s390/zcrypt: handle new reply code filtered_by_hypervisor (git-fixes bsc#1215046).\n- s390/zcrypt: improve special ap message cmd handling (git-fixes bsc#1215032).\n- s390: zcrypt: initialize variables before_use (git-fixes bsc#1215036).\n- sched/core: check quota and period overflow at usec to nsec conversion (git fixes).\n- sched/core: handle overflow in cpu_shares_write_u64 (git fixes).\n- sched/cpufreq: fix kobject memleak (git fixes).\n- sched/fair: do not numa balance for kthreads (git fixes).\n- sched/fair: fix cfs bandwidth hrtimer expiry type (git fixes).\n- sched/topology: fix off by one bug (git fixes).\n- scsi: qla2xxx: add logs for sfp temperature monitoring (bsc#1214928).\n- scsi: qla2xxx: allow 32-byte cdbs (bsc#1214928).\n- scsi: qla2xxx: error code did not return to upper layer (bsc#1214928).\n- scsi: qla2xxx: fix firmware resource tracking (bsc#1214928).\n- scsi: qla2xxx: fix smatch warn for qla_init_iocb_limit() (bsc#1214928).\n- scsi: qla2xxx: flush mailbox commands on chip reset (bsc#1214928).\n- scsi: qla2xxx: move resource to allow code reuse (bsc#1214928).\n- scsi: qla2xxx: remove unsupported ql2xenabledif option (bsc#1214928).\n- scsi: qla2xxx: remove unused declarations (bsc#1214928).\n- scsi: qla2xxx: remove unused variables in qla24xx_build_scsi_type_6_iocbs() (bsc#1214928).\n- scsi: qla2xxx: update version to 10.02.09.100-k (bsc#1214928).\n- scsi: storvsc: always set no_report_opcodes (git-fixes).\n- scsi: storvsc: fix handling of virtual fibre channel timeouts (git-fixes).\n- skbuff: fix a data race in skb_queue_len() (git-fixes).\n- sort latest foray of security patches\n- sunrpc: always clear xprt_sock_connecting before xprt_clear_connecting on tcp xprt (bsc#1214453).\n- timers: add shutdown mechanism to the internal functions (bsc#1213970).\n- timers: provide timer_shutdown[_sync]() (bsc#1213970).\n- timers: rename del_timer() to timer_delete() (bsc#1213970).\n- timers: rename del_timer_sync() to timer_delete_sync() (bsc#1213970).\n- timers: replace bug_on()s (bsc#1213970).\n- timers: silently ignore timers with a null function (bsc#1213970).\n- timers: split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).\n- timers: update kernel-doc for various functions (bsc#1213970).\n- timers: use del_timer_sync() even on up (bsc#1213970).\n- tracing: fix warning in trace_buffered_event_disable() (git-fixes).\n- tun: fix bonding active backup with arp monitoring (git-fixes).\n- ubifs: fix snprintf() checking (git-fixes).\n- udp6: fix race condition in udp6_sendmsg \u0026 connect (git-fixes).\n- udp: fix race between close() and udp_abort() (git-fixes).\n- usb-storage: alauda: fix uninit-value in alauda_check_media() (git-fixes).\n- usb: host: xhci: fix potential memory leak in xhci_alloc_stream_info() (git-fixes).\n- usb: serial: cp210x: add kamstrup rf sniffer pids (git-fixes).\n- usb: serial: cp210x: add scalance lpe-9000 device id (git-fixes).\n- usb: serial: option: add lara-r6 01b pids (git-fixes).\n- usb: serial: option: add quectel ec200a module support (git-fixes).\n- usb: serial: option: add quectel ec200u modem (git-fixes).\n- usb: serial: option: add quectel em05cn (sg) modem (git-fixes).\n- usb: serial: option: add quectel em05cn modem (git-fixes).\n- usb: serial: option: add support for vw/skoda \u0027carstick lte\u0027 (git-fixes).\n- usb: serial: option: add u-blox lara-l6 modem (git-fixes).\n- usb: serial: option: support quectel em060k_128 (git-fixes).\n- usb: serial: simple: add kaufmann rks+can vcp (git-fixes).\n- usb: serial: simple: sort driver entries (git-fixes).\n- usb: xhci-mtk: set the dma max_seg_size (git-fixes).\n- usb: xhci: check endpoint is valid before dereferencing it (git-fixes).\n- usb: zaurus: add id for a-300/b-500/c-700 (git-fixes).\n- x86/bugs: reset speculation control settings on init (git-fixes).\n- x86/cpu/amd: disable xsaves on amd family 0x17 (git-fixes).\n- x86/cpu/amd: enable zenbleed fix for amd custom apu 0405 (git-fixes).\n- x86/cpu/kvm: provide untrain_ret_vm (git-fixes).\n- x86/cpu/vmware: fix platform detection vmware_port macro (bsc#1210327).\n- x86/cpu/vmware: use the full form of inl in vmware_hypercall, for clang/llvm (bsc#1210327).\n- x86/cpu/vmware: use the full form of inl in vmware_port (bsc#1210327).\n- x86/cpu: cleanup the untrain mess (git-fixes).\n- x86/cpu: fix __x86_return_thunk symbol type (git-fixes).\n- x86/cpu: fix amd_check_microcode() declaration (git-fixes).\n- x86/cpu: fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).\n- x86/cpu: rename original retbleed methods (git-fixes).\n- x86/cpu: rename srso_(.*)_alias to srso_alias_\\1 (git-fixes).\n- x86/crash: disable virt in core nmi crash handler to avoid double shootdown (git-fixes).\n- x86/ioapic: do not return 0 from arch_dynirq_lower_bound() (git-fixes).\n- x86/microcode/amd: load late on both threads too (git-fixes).\n- x86/mm: do not shuffle cpu entry areas without kaslr (git-fixes).\n- x86/mm: fix use of uninitialized buffer in sme_enable() (git-fixes).\n- x86/reboot: disable svm, not just vmx, when stopping cpus (git-fixes).\n- x86/retpoline,kprobes: fix position of thunk sections with config_lto_clang (git-fixes).\n- x86/retpoline,kprobes: skip optprobe check for indirect jumps with retpolines and ibt (git-fixes).\n- x86/retpoline: do not clobber rflags during srso_safe_ret() (git-fixes).\n- x86/speculation: add cpu_show_gds() prototype (git-fixes).\n- x86/speculation: mark all skylake cpus as vulnerable to gds (git-fixes).\n- x86/srso: correct the mitigation status when smt is disabled (git-fixes).\n- x86/srso: disable the mitigation on unaffected configurations (git-fixes).\n- x86/srso: explain the untraining sequences a bit more (git-fixes).\n- x86/srso: fix build breakage with the llvm linker (git-fixes).\n- x86/virt: force gif=1 prior to disabling svm (for reboot flows) (git-fixes).\n- x86/vmware: add a header file for hypercall definitions (bsc#1210327).\n- x86/vmware: add steal time clock support for vmware guests (bsc#1210327).\n- x86/vmware: enable steal time accounting (bsc#1210327).\n- x86/vmware: update platform detection code for vmcall/vmmcall hypercalls (bsc#1210327).\n- x86: move gds_ucode_mitigated() declaration to header (git-fixes).\n- xfrm: release device reference for invalid state (git-fixes).\n- xhci-pci: set the dma max_seg_size (git-fixes).\n- xhci: Remove device endpoints from bandwidth list when freeing the device (git-fixes).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2023-3601,SUSE-SLE-RT-12-SP5-2023-3601",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_3601-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2023:3601-1",
"url": "https://www.suse.com/support/update/announcement/2023/suse-su-20233601-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2023:3601-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2023-September/031435.html"
},
{
"category": "self",
"summary": "SUSE Bug 1120059",
"url": "https://bugzilla.suse.com/1120059"
},
{
"category": "self",
"summary": "SUSE Bug 1203517",
"url": "https://bugzilla.suse.com/1203517"
},
{
"category": "self",
"summary": "SUSE Bug 1210327",
"url": "https://bugzilla.suse.com/1210327"
},
{
"category": "self",
"summary": "SUSE Bug 1210448",
"url": "https://bugzilla.suse.com/1210448"
},
{
"category": "self",
"summary": "SUSE Bug 1212051",
"url": "https://bugzilla.suse.com/1212051"
},
{
"category": "self",
"summary": "SUSE Bug 1213543",
"url": "https://bugzilla.suse.com/1213543"
},
{
"category": "self",
"summary": "SUSE Bug 1213546",
"url": "https://bugzilla.suse.com/1213546"
},
{
"category": "self",
"summary": "SUSE Bug 1213601",
"url": "https://bugzilla.suse.com/1213601"
},
{
"category": "self",
"summary": "SUSE Bug 1213666",
"url": "https://bugzilla.suse.com/1213666"
},
{
"category": "self",
"summary": "SUSE Bug 1213899",
"url": "https://bugzilla.suse.com/1213899"
},
{
"category": "self",
"summary": "SUSE Bug 1213904",
"url": "https://bugzilla.suse.com/1213904"
},
{
"category": "self",
"summary": "SUSE Bug 1213906",
"url": "https://bugzilla.suse.com/1213906"
},
{
"category": "self",
"summary": "SUSE Bug 1213908",
"url": "https://bugzilla.suse.com/1213908"
},
{
"category": "self",
"summary": "SUSE Bug 1213910",
"url": "https://bugzilla.suse.com/1213910"
},
{
"category": "self",
"summary": "SUSE Bug 1213911",
"url": "https://bugzilla.suse.com/1213911"
},
{
"category": "self",
"summary": "SUSE Bug 1213912",
"url": "https://bugzilla.suse.com/1213912"
},
{
"category": "self",
"summary": "SUSE Bug 1213921",
"url": "https://bugzilla.suse.com/1213921"
},
{
"category": "self",
"summary": "SUSE Bug 1213927",
"url": "https://bugzilla.suse.com/1213927"
},
{
"category": "self",
"summary": "SUSE Bug 1213969",
"url": "https://bugzilla.suse.com/1213969"
},
{
"category": "self",
"summary": "SUSE Bug 1213970",
"url": "https://bugzilla.suse.com/1213970"
},
{
"category": "self",
"summary": "SUSE Bug 1213971",
"url": "https://bugzilla.suse.com/1213971"
},
{
"category": "self",
"summary": "SUSE Bug 1214019",
"url": "https://bugzilla.suse.com/1214019"
},
{
"category": "self",
"summary": "SUSE Bug 1214149",
"url": "https://bugzilla.suse.com/1214149"
},
{
"category": "self",
"summary": "SUSE Bug 1214157",
"url": "https://bugzilla.suse.com/1214157"
},
{
"category": "self",
"summary": "SUSE Bug 1214209",
"url": "https://bugzilla.suse.com/1214209"
},
{
"category": "self",
"summary": "SUSE Bug 1214233",
"url": "https://bugzilla.suse.com/1214233"
},
{
"category": "self",
"summary": "SUSE Bug 1214299",
"url": "https://bugzilla.suse.com/1214299"
},
{
"category": "self",
"summary": "SUSE Bug 1214335",
"url": "https://bugzilla.suse.com/1214335"
},
{
"category": "self",
"summary": "SUSE Bug 1214348",
"url": "https://bugzilla.suse.com/1214348"
},
{
"category": "self",
"summary": "SUSE Bug 1214350",
"url": "https://bugzilla.suse.com/1214350"
},
{
"category": "self",
"summary": "SUSE Bug 1214451",
"url": "https://bugzilla.suse.com/1214451"
},
{
"category": "self",
"summary": "SUSE Bug 1214453",
"url": "https://bugzilla.suse.com/1214453"
},
{
"category": "self",
"summary": "SUSE Bug 1214752",
"url": "https://bugzilla.suse.com/1214752"
},
{
"category": "self",
"summary": "SUSE Bug 1214928",
"url": "https://bugzilla.suse.com/1214928"
},
{
"category": "self",
"summary": "SUSE Bug 1215028",
"url": "https://bugzilla.suse.com/1215028"
},
{
"category": "self",
"summary": "SUSE Bug 1215032",
"url": "https://bugzilla.suse.com/1215032"
},
{
"category": "self",
"summary": "SUSE Bug 1215034",
"url": "https://bugzilla.suse.com/1215034"
},
{
"category": "self",
"summary": "SUSE Bug 1215035",
"url": "https://bugzilla.suse.com/1215035"
},
{
"category": "self",
"summary": "SUSE Bug 1215036",
"url": "https://bugzilla.suse.com/1215036"
},
{
"category": "self",
"summary": "SUSE Bug 1215037",
"url": "https://bugzilla.suse.com/1215037"
},
{
"category": "self",
"summary": "SUSE Bug 1215038",
"url": "https://bugzilla.suse.com/1215038"
},
{
"category": "self",
"summary": "SUSE Bug 1215041",
"url": "https://bugzilla.suse.com/1215041"
},
{
"category": "self",
"summary": "SUSE Bug 1215046",
"url": "https://bugzilla.suse.com/1215046"
},
{
"category": "self",
"summary": "SUSE Bug 1215049",
"url": "https://bugzilla.suse.com/1215049"
},
{
"category": "self",
"summary": "SUSE Bug 1215057",
"url": "https://bugzilla.suse.com/1215057"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-36402 page",
"url": "https://www.suse.com/security/cve/CVE-2022-36402/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2007 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2007/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-20588 page",
"url": "https://www.suse.com/security/cve/CVE-2023-20588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-34319 page",
"url": "https://www.suse.com/security/cve/CVE-2023-34319/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-3772 page",
"url": "https://www.suse.com/security/cve/CVE-2023-3772/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-3812 page",
"url": "https://www.suse.com/security/cve/CVE-2023-3812/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-3863 page",
"url": "https://www.suse.com/security/cve/CVE-2023-3863/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-40283 page",
"url": "https://www.suse.com/security/cve/CVE-2023-40283/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4128 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4128/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4132 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4132/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4133 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4134 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4194 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4194/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4385 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4385/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4387 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4387/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4459 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4459/"
}
],
"title": "Security update for the Linux Kernel",
"tracking": {
"current_release_date": "2023-09-14T10:31:13Z",
"generator": {
"date": "2023-09-14T10:31:13Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2023:3601-1",
"initial_release_date": "2023-09-14T10:31:13Z",
"revision_history": [
{
"date": "2023-09-14T10:31:13Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-rt-4.12.14-10.141.1.noarch",
"product": {
"name": "kernel-devel-rt-4.12.14-10.141.1.noarch",
"product_id": "kernel-devel-rt-4.12.14-10.141.1.noarch"
}
},
{
"category": "product_version",
"name": "kernel-source-rt-4.12.14-10.141.1.noarch",
"product": {
"name": "kernel-source-rt-4.12.14-10.141.1.noarch",
"product_id": "kernel-source-rt-4.12.14-10.141.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"product": {
"name": "cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"product_id": "cluster-md-kmp-rt-4.12.14-10.141.1.x86_64"
}
},
{
"category": "product_version",
"name": "cluster-md-kmp-rt_debug-4.12.14-10.141.1.x86_64",
"product": {
"name": "cluster-md-kmp-rt_debug-4.12.14-10.141.1.x86_64",
"product_id": "cluster-md-kmp-rt_debug-4.12.14-10.141.1.x86_64"
}
},
{
"category": "product_version",
"name": "dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"product": {
"name": "dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"product_id": "dlm-kmp-rt-4.12.14-10.141.1.x86_64"
}
},
{
"category": "product_version",
"name": "dlm-kmp-rt_debug-4.12.14-10.141.1.x86_64",
"product": {
"name": "dlm-kmp-rt_debug-4.12.14-10.141.1.x86_64",
"product_id": "dlm-kmp-rt_debug-4.12.14-10.141.1.x86_64"
}
},
{
"category": "product_version",
"name": "gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"product": {
"name": "gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"product_id": "gfs2-kmp-rt-4.12.14-10.141.1.x86_64"
}
},
{
"category": "product_version",
"name": "gfs2-kmp-rt_debug-4.12.14-10.141.1.x86_64",
"product": {
"name": "gfs2-kmp-rt_debug-4.12.14-10.141.1.x86_64",
"product_id": "gfs2-kmp-rt_debug-4.12.14-10.141.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt-4.12.14-10.141.1.x86_64",
"product": {
"name": "kernel-rt-4.12.14-10.141.1.x86_64",
"product_id": "kernel-rt-4.12.14-10.141.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt-base-4.12.14-10.141.1.x86_64",
"product": {
"name": "kernel-rt-base-4.12.14-10.141.1.x86_64",
"product_id": "kernel-rt-base-4.12.14-10.141.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt-devel-4.12.14-10.141.1.x86_64",
"product": {
"name": "kernel-rt-devel-4.12.14-10.141.1.x86_64",
"product_id": "kernel-rt-devel-4.12.14-10.141.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt-extra-4.12.14-10.141.1.x86_64",
"product": {
"name": "kernel-rt-extra-4.12.14-10.141.1.x86_64",
"product_id": "kernel-rt-extra-4.12.14-10.141.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt-kgraft-devel-4.12.14-10.141.1.x86_64",
"product": {
"name": "kernel-rt-kgraft-devel-4.12.14-10.141.1.x86_64",
"product_id": "kernel-rt-kgraft-devel-4.12.14-10.141.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt_debug-4.12.14-10.141.1.x86_64",
"product": {
"name": "kernel-rt_debug-4.12.14-10.141.1.x86_64",
"product_id": "kernel-rt_debug-4.12.14-10.141.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt_debug-base-4.12.14-10.141.1.x86_64",
"product": {
"name": "kernel-rt_debug-base-4.12.14-10.141.1.x86_64",
"product_id": "kernel-rt_debug-base-4.12.14-10.141.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"product": {
"name": "kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"product_id": "kernel-rt_debug-devel-4.12.14-10.141.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt_debug-extra-4.12.14-10.141.1.x86_64",
"product": {
"name": "kernel-rt_debug-extra-4.12.14-10.141.1.x86_64",
"product_id": "kernel-rt_debug-extra-4.12.14-10.141.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-rt_debug-kgraft-devel-4.12.14-10.141.1.x86_64",
"product": {
"name": "kernel-rt_debug-kgraft-devel-4.12.14-10.141.1.x86_64",
"product_id": "kernel-rt_debug-kgraft-devel-4.12.14-10.141.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-syms-rt-4.12.14-10.141.1.x86_64",
"product": {
"name": "kernel-syms-rt-4.12.14-10.141.1.x86_64",
"product_id": "kernel-syms-rt-4.12.14-10.141.1.x86_64"
}
},
{
"category": "product_version",
"name": "kselftests-kmp-rt-4.12.14-10.141.1.x86_64",
"product": {
"name": "kselftests-kmp-rt-4.12.14-10.141.1.x86_64",
"product_id": "kselftests-kmp-rt-4.12.14-10.141.1.x86_64"
}
},
{
"category": "product_version",
"name": "kselftests-kmp-rt_debug-4.12.14-10.141.1.x86_64",
"product": {
"name": "kselftests-kmp-rt_debug-4.12.14-10.141.1.x86_64",
"product_id": "kselftests-kmp-rt_debug-4.12.14-10.141.1.x86_64"
}
},
{
"category": "product_version",
"name": "ocfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"product": {
"name": "ocfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"product_id": "ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
}
},
{
"category": "product_version",
"name": "ocfs2-kmp-rt_debug-4.12.14-10.141.1.x86_64",
"product": {
"name": "ocfs2-kmp-rt_debug-4.12.14-10.141.1.x86_64",
"product_id": "ocfs2-kmp-rt_debug-4.12.14-10.141.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Real Time 12 SP5",
"product": {
"name": "SUSE Linux Enterprise Real Time 12 SP5",
"product_id": "SUSE Linux Enterprise Real Time 12 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse-linux-enterprise-rt:12:sp5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cluster-md-kmp-rt-4.12.14-10.141.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5",
"product_id": "SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64"
},
"product_reference": "cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dlm-kmp-rt-4.12.14-10.141.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5",
"product_id": "SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64"
},
"product_reference": "dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gfs2-kmp-rt-4.12.14-10.141.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5",
"product_id": "SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64"
},
"product_reference": "gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-rt-4.12.14-10.141.1.noarch as component of SUSE Linux Enterprise Real Time 12 SP5",
"product_id": "SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch"
},
"product_reference": "kernel-devel-rt-4.12.14-10.141.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-4.12.14-10.141.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5",
"product_id": "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64"
},
"product_reference": "kernel-rt-4.12.14-10.141.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-base-4.12.14-10.141.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5",
"product_id": "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64"
},
"product_reference": "kernel-rt-base-4.12.14-10.141.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt-devel-4.12.14-10.141.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5",
"product_id": "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64"
},
"product_reference": "kernel-rt-devel-4.12.14-10.141.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt_debug-4.12.14-10.141.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5",
"product_id": "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64"
},
"product_reference": "kernel-rt_debug-4.12.14-10.141.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-rt_debug-devel-4.12.14-10.141.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5",
"product_id": "SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64"
},
"product_reference": "kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-rt-4.12.14-10.141.1.noarch as component of SUSE Linux Enterprise Real Time 12 SP5",
"product_id": "SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch"
},
"product_reference": "kernel-source-rt-4.12.14-10.141.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-rt-4.12.14-10.141.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5",
"product_id": "SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64"
},
"product_reference": "kernel-syms-rt-4.12.14-10.141.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 12 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocfs2-kmp-rt-4.12.14-10.141.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5",
"product_id": "SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
},
"product_reference": "ocfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Real Time 12 SP5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-36402",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-36402"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file \u0027/dev/dri/renderD128 (or Dxxx)\u0027. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-36402",
"url": "https://www.suse.com/security/cve/CVE-2022-36402"
},
{
"category": "external",
"summary": "SUSE Bug 1203517 for CVE-2022-36402",
"url": "https://bugzilla.suse.com/1203517"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-14T10:31:13Z",
"details": "moderate"
}
],
"title": "CVE-2022-36402"
},
{
"cve": "CVE-2023-2007",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2007"
}
],
"notes": [
{
"category": "general",
"text": "The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2007",
"url": "https://www.suse.com/security/cve/CVE-2023-2007"
},
{
"category": "external",
"summary": "SUSE Bug 1210448 for CVE-2023-2007",
"url": "https://bugzilla.suse.com/1210448"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-14T10:31:13Z",
"details": "moderate"
}
],
"title": "CVE-2023-2007"
},
{
"cve": "CVE-2023-20588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-20588"
}
],
"notes": [
{
"category": "general",
"text": "\nA division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. \n\n\n\n\n\n\n\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-20588",
"url": "https://www.suse.com/security/cve/CVE-2023-20588"
},
{
"category": "external",
"summary": "SUSE Bug 1213927 for CVE-2023-20588",
"url": "https://bugzilla.suse.com/1213927"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-14T10:31:13Z",
"details": "moderate"
}
],
"title": "CVE-2023-20588"
},
{
"cve": "CVE-2023-34319",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-34319"
}
],
"notes": [
{
"category": "general",
"text": "The fix for XSA-423 added logic to Linux\u0027es netback driver to deal with\na frontend splitting a packet in a way such that not all of the headers\nwould come in one piece. Unfortunately the logic introduced there\ndidn\u0027t account for the extreme case of the entire packet being split\ninto as many pieces as permitted by the protocol, yet still being\nsmaller than the area that\u0027s specially dealt with to keep all (possible)\nheaders together. Such an unusual packet would therefore trigger a\nbuffer overrun in the driver.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-34319",
"url": "https://www.suse.com/security/cve/CVE-2023-34319"
},
{
"category": "external",
"summary": "SUSE Bug 1213546 for CVE-2023-34319",
"url": "https://bugzilla.suse.com/1213546"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-14T10:31:13Z",
"details": "moderate"
}
],
"title": "CVE-2023-34319"
},
{
"cve": "CVE-2023-3772",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-3772"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-3772",
"url": "https://www.suse.com/security/cve/CVE-2023-3772"
},
{
"category": "external",
"summary": "SUSE Bug 1213666 for CVE-2023-3772",
"url": "https://bugzilla.suse.com/1213666"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-14T10:31:13Z",
"details": "moderate"
}
],
"title": "CVE-2023-3772"
},
{
"cve": "CVE-2023-3812",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-3812"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds memory access flaw was found in the Linux kernel\u0027s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-3812",
"url": "https://www.suse.com/security/cve/CVE-2023-3812"
},
{
"category": "external",
"summary": "SUSE Bug 1213543 for CVE-2023-3812",
"url": "https://bugzilla.suse.com/1213543"
},
{
"category": "external",
"summary": "SUSE Bug 1213706 for CVE-2023-3812",
"url": "https://bugzilla.suse.com/1213706"
},
{
"category": "external",
"summary": "SUSE Bug 1217444 for CVE-2023-3812",
"url": "https://bugzilla.suse.com/1217444"
},
{
"category": "external",
"summary": "SUSE Bug 1217531 for CVE-2023-3812",
"url": "https://bugzilla.suse.com/1217531"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-14T10:31:13Z",
"details": "important"
}
],
"title": "CVE-2023-3812"
},
{
"cve": "CVE-2023-3863",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-3863"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-3863",
"url": "https://www.suse.com/security/cve/CVE-2023-3863"
},
{
"category": "external",
"summary": "SUSE Bug 1213601 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1213601"
},
{
"category": "external",
"summary": "SUSE Bug 1213603 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1213603"
},
{
"category": "external",
"summary": "SUSE Bug 1217444 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1217444"
},
{
"category": "external",
"summary": "SUSE Bug 1217531 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1217531"
},
{
"category": "external",
"summary": "SUSE Bug 1219704 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1219704"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-14T10:31:13Z",
"details": "moderate"
}
],
"title": "CVE-2023-3863"
},
{
"cve": "CVE-2023-40283",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-40283"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-40283",
"url": "https://www.suse.com/security/cve/CVE-2023-40283"
},
{
"category": "external",
"summary": "SUSE Bug 1214233 for CVE-2023-40283",
"url": "https://bugzilla.suse.com/1214233"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-14T10:31:13Z",
"details": "moderate"
}
],
"title": "CVE-2023-40283"
},
{
"cve": "CVE-2023-4128",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4128"
}
],
"notes": [
{
"category": "general",
"text": "** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Reason: This record is a duplicate of CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Notes: All CVE users should reference CVE-2023-4206, CVE-2023-4207, CVE-2023-4208 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4128",
"url": "https://www.suse.com/security/cve/CVE-2023-4128"
},
{
"category": "external",
"summary": "SUSE Bug 1214149 for CVE-2023-4128",
"url": "https://bugzilla.suse.com/1214149"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-14T10:31:13Z",
"details": "important"
}
],
"title": "CVE-2023-4128"
},
{
"cve": "CVE-2023-4132",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4132"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. The bug occurs during device initialization when the siano device is plugged in. This flaw allows a local user to crash the system, causing a denial of service condition.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4132",
"url": "https://www.suse.com/security/cve/CVE-2023-4132"
},
{
"category": "external",
"summary": "SUSE Bug 1213969 for CVE-2023-4132",
"url": "https://bugzilla.suse.com/1213969"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-14T10:31:13Z",
"details": "moderate"
}
],
"title": "CVE-2023-4132"
},
{
"cve": "CVE-2023-4133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4133"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug occurs when the cxgb4 device is detaching due to a possible rearming of the flower_stats_timer from the work queue. This flaw allows a local user to crash the system, causing a denial of service condition.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4133",
"url": "https://www.suse.com/security/cve/CVE-2023-4133"
},
{
"category": "external",
"summary": "SUSE Bug 1213970 for CVE-2023-4133",
"url": "https://bugzilla.suse.com/1213970"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-14T10:31:13Z",
"details": "moderate"
}
],
"title": "CVE-2023-4133"
},
{
"cve": "CVE-2023-4134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4134"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel. This issue occurs in the device cleanup routine due to a possible rearming of the watchdog_timer from the workqueue. This could allow a local user to crash the system, causing a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4134",
"url": "https://www.suse.com/security/cve/CVE-2023-4134"
},
{
"category": "external",
"summary": "SUSE Bug 1213971 for CVE-2023-4134",
"url": "https://bugzilla.suse.com/1213971"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-14T10:31:13Z",
"details": "moderate"
}
],
"title": "CVE-2023-4134"
},
{
"cve": "CVE-2023-4194",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4194"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 (\"tun: tun_chr_open(): correctly initialize socket uid\"), - 66b2c338adce (\"tap: tap_open(): correctly initialize socket uid\"), pass \"inode-\u003ei_uid\" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4194",
"url": "https://www.suse.com/security/cve/CVE-2023-4194"
},
{
"category": "external",
"summary": "SUSE Bug 1214019 for CVE-2023-4194",
"url": "https://bugzilla.suse.com/1214019"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-14T10:31:13Z",
"details": "moderate"
}
],
"title": "CVE-2023-4194"
},
{
"cve": "CVE-2023-4385",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4385"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference flaw was found in dbFree in fs/jfs/jfs_dmap.c in the journaling file system (JFS) in the Linux Kernel. This issue may allow a local attacker to crash the system due to a missing sanity check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4385",
"url": "https://www.suse.com/security/cve/CVE-2023-4385"
},
{
"category": "external",
"summary": "SUSE Bug 1214348 for CVE-2023-4385",
"url": "https://bugzilla.suse.com/1214348"
},
{
"category": "external",
"summary": "SUSE Bug 1222212 for CVE-2023-4385",
"url": "https://bugzilla.suse.com/1222212"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-14T10:31:13Z",
"details": "moderate"
}
],
"title": "CVE-2023-4385"
},
{
"cve": "CVE-2023-4387",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4387"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware\u0027s vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash the system due to a double-free while cleaning up vmxnet3_rq_cleanup_all, which could also lead to a kernel information leak problem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4387",
"url": "https://www.suse.com/security/cve/CVE-2023-4387"
},
{
"category": "external",
"summary": "SUSE Bug 1214350 for CVE-2023-4387",
"url": "https://bugzilla.suse.com/1214350"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-14T10:31:13Z",
"details": "moderate"
}
],
"title": "CVE-2023-4387"
},
{
"cve": "CVE-2023-4459",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4459"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during cleanup.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4459",
"url": "https://www.suse.com/security/cve/CVE-2023-4459"
},
{
"category": "external",
"summary": "SUSE Bug 1214451 for CVE-2023-4459",
"url": "https://bugzilla.suse.com/1214451"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.141.1.noarch",
"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.141.1.x86_64",
"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.141.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-14T10:31:13Z",
"details": "moderate"
}
],
"title": "CVE-2023-4459"
}
]
}
SUSE-SU-2023:3656-1
Vulnerability from csaf_suse - Published: 2023-09-18 15:36 - Updated: 2023-09-18 15:36Summary
Security update for the Linux Kernel
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel
Description of the patch:
The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
- CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203330).
- CVE-2022-40133: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203329).
- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).
- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).
- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).
- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).
- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).
- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).
- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).
- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).
- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).
- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).
- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).
- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).
- CVE-2023-4563: Fixed use-after-free in nft_verdict_dump due to a race between set GC and transaction (bsc#1214727).
- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).
- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).
- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).
- CVE-2023-37453: Fixed oversight in SuperSpeed initialization (bsc#1213123).
- CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233).
The following non-security bugs were fixed:
- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).
- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (git-fixes).
- ACPI: processor: perflib: Use the 'no limit' frequency QoS (git-fixes).
- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table (git-fixes).
- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).
- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).
- ALSA: hda/realtek - Remodified 3k pull low procedure (git-fixes).
- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED (git-fixes).
- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx (git-fixes).
- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).
- ALSA: hda/realtek: Switch Dell Oasis models to use SPI (git-fixes).
- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (git-fixes).
- ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces (git-fixes).
- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).
- ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (git-fixes).
- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (git-fixes).
- ARM: dts: imx6sll: fixup of operating points (git-fixes).
- ARM: spear: Do not use timer namespace for timer_shutdown() function (bsc#1213970).
- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (git-fixes).
- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ (git-fixes).
- ASoC: lower 'no backend DAIs enabled for ... Port' log severity (git-fixes).
- ASoC: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).
- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).
- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).
- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).
- Bluetooth: Fix potential use-after-free when clear keys (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (git-fixes).
- Bluetooth: Remove unused declaration amp_read_loc_info() (git-fixes).
- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (git-fixes).
- Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
- Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).
- CONFIG_NVME_VERBOSE_ERRORS=y gone with a82baa8083b
- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13 gone with 7e152d55123
- Created new preempt kernel flavor Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT->y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel.
- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).
- Documentation: devices.txt: Remove ttyIOC* (git-fixes).
- Documentation: devices.txt: Remove ttySIOC* (git-fixes).
- Drivers: hv: Do not remap addresses that are above shared_gpa_boundary (bsc#1206453).
- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).
- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).
- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).
- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).
- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).
- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).
- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).
- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)
- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)
- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)
- HID: add quirk for 03f0:464a HP Elite Presenter Mouse (git-fixes).
- HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).
- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (git-fixes).
- HID: multitouch: Correct devm device reference for hidinput input_dev name (git-fixes).
- HID: wacom: remove the battery when the EKR is off (git-fixes).
- HWPOISON: offline support: fix spelling in Documentation/ABI/ (git-fixes).
- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)
- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
- Input: exc3000 - properly stop timer on shutdown (git-fixes).
- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).
- Kbuild: add -Wno-shift-negative-value where -Wextra is used (bsc#1214756).
- Kbuild: move to -std=gnu11 (bsc#1214756).
- PCI/ASPM: Avoid link retraining race (git-fixes).
- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).
- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (git-fixes).
- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).
- PCI: acpiphp: Reassign resources on bridge if necessary (git-fixes).
- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).
- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).
- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).
- PCI: meson: Remove cast between incompatible function type (git-fixes).
- PCI: microchip: Correct the DED and SEC interrupt bit offsets (git-fixes).
- PCI: microchip: Remove cast between incompatible function type (git-fixes).
- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).
- PCI: rockchip: Remove writes to unused registers (git-fixes).
- PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (git-fixes).
- PCI: tegra194: Fix possible array out of bounds access (git-fixes).
- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).
- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)
- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
- RDMA/hns: Fix port active speed (git-fixes)
- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)
- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)
- RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes)
- RDMA/siw: Correct wrong debug message (git-fixes)
- RDMA/umem: Set iova in ODP flow (git-fixes)
- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.
- Revert 'IB/isert: Fix incorrect release of isert connection' (git-fixes)
- Revert 'tracing: Add '(fault)' name injection to kernel probes' (git-fixes).
- Update patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- amba: bus: fix refcount leak (git-fixes).
- arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (git-fixes).
- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).
- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (git-fixes).
- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).
- backlight/bd6107: Compare against struct fb_info.device (git-fixes).
- backlight/gpio_backlight: Compare against struct fb_info.device (git-fixes).
- backlight/lv5207lp: Compare against struct fb_info.device (git-fixes).
- batman-adv: Do not get eth header before batadv_check_management_packet (git-fixes).
- batman-adv: Do not increase MTU when set by user (git-fixes).
- batman-adv: Fix TT global entry leak when client roamed back (git-fixes).
- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).
- batman-adv: Hold rtnl lock during MTU update via netlink (git-fixes).
- batman-adv: Trigger events for auto adjusted MTU (git-fixes).
- bnx2x: fix page fault following EEH recovery (bsc#1214299).
- bpf: Disable preemption in bpf_event_output (git-fixes).
- bpftool: Print newline before '}' for struct with padding only fields (bsc#1211220 jsc#PED-3924).
- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).
- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).
- bus: ti-sysc: Fix cast to enum warning (git-fixes).
- bus: ti-sysc: Flush posted write on enable before reset (git-fixes).
- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (git-fixes).
- ceph: defer stopping mdsc delayed_work (bsc#1214392).
- ceph: do not check for quotas on MDS stray dirs (bsc#1214238).
- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).
- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). gcc7 on SLE 15 does not support this while later gcc does.
- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).
- cifs: allow dumping keys for directories too (bsc#1193629).
- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).
- cifs: if deferred close is disabled then close files immediately (git-fixes).
- cifs: is_network_name_deleted should return a bool (bsc#1193629).
- cifs: update internal module version number for cifs.ko (bsc#1193629).
- clk: Fix slab-out-of-bounds error in devm_clk_release() (git-fixes).
- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes).
- clk: imx8mp: fix sai4 clock (git-fixes).
- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).
- clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz (git-fixes).
- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).
- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).
- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src (git-fixes).
- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).
- clk: sunxi-ng: Modify mismatched function name (git-fixes).
- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).
- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (bsc#1213970).
- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).
- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).
- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).
- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).
- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).
- cpu/SMT: Allow enabling partial SMT states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpu/SMT: Store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- cpufreq: Fix the race condition while updating the transition_task of policy (git-fixes).
- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (bsc#1214659).
- cpufreq: intel_pstate: Enable HWP IO boost for all servers (bsc#1208949 jsc#PED-6003 jsc#PED-6004).
- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- cpufreq: intel_pstate: Read all MSRs on the target CPU (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- cpufreq: intel_pstate: hybrid: Rework HWP calibration (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).
- crypto: caam - fix unchecked return value error (git-fixes).
- crypto: stm32 - Properly handle pm_runtime_get failing (git-fixes).
- define more Hyper-V related constants (bsc#1206453).
- dma-buf/sw_sync: Avoid recursive lock during fence signal (git-fixes).
- dma-buf/sync_file: Fix docs syntax (git-fixes).
- dmaengine: idxd: Modify the dependence of attribute pasid_enabled (git-fixes).
- dmaengine: mcf-edma: Fix a potential un-allocated memory access (git-fixes).
- dmaengine: pl330: Return DMA_PAUSED when transaction is paused (git-fixes).
- dmaengine: ste_dma40: Add missing IRQ check in d40_probe (git-fixes).
- docs/process/howto: Replace C89 with C11 (bsc#1214756).
- docs: kernel-parameters: Refer to the correct bitmap function (git-fixes).
- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).
- docs: printk-formats: Fix hex printing of signed values (git-fixes).
- driver core: test_async: fix an error code (git-fixes).
- drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (git-fixes).
- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).
- drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz (git-fixes).
- drm/amd/display: Disable phantom OTG after enable for plane disable (git-fixes).
- drm/amd/display: Do not set drr on pipe commit (git-fixes).
- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).
- drm/amd/display: Ensure that planes are in the same order (git-fixes).
- drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register (git-fixes).
- drm/amd/display: Retain phantom plane/stream if validation fails (git-fixes).
- drm/amd/display: Skip DPP DTO update if root clock is gated (git-fixes).
- drm/amd/display: Use update plane and stream routine for DCN32x (git-fixes).
- drm/amd/display: check TG is non-null before checking if enabled (git-fixes).
- drm/amd/display: check attr flag before set cursor degamma on DCN3+ (git-fixes).
- drm/amd/display: disable RCO for DCN314 (git-fixes).
- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).
- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set (git-fixes).
- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).
- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).
- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).
- drm/amd/display: trigger timing sync only if TG is running (git-fixes).
- drm/amd/pm/smu7: move variables to where they are used (git-fixes).
- drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation (git-fixes).
- drm/amd/pm: expose swctf threshold setting for legacy powerplay (git-fixes).
- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).
- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings (git-fixes).
- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings (git-fixes).
- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (git-fixes).
- drm/amd: Disable S/G for APUs when 64GB or more host memory (git-fixes).
- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).
- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 (git-fixes).
- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).
- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).
- drm/amdgpu: Remove unnecessary domain argument (git-fixes).
- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).
- drm/amdgpu: add S/G display parameter (git-fixes).
- drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes).
- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).
- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini (git-fixes).
- drm/amdgpu: fix memory leak in mes self test (git-fixes).
- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).
- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).
- drm/amdgpu: keep irq count in amdgpu_irq_disable_all (git-fixes).
- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (git-fixes).
- drm/armada: Fix off-by-one error in armada_overlay_get_property() (git-fixes).
- drm/ast: Fix DRAM init on AST2200 (git-fixes).
- drm/atomic-helper: Update reference to drm_crtc_force_disable_all() (git-fixes).
- drm/bridge: anx7625: Drop device lock before drm_helper_hpd_irq_event() (git-fixes).
- drm/bridge: anx7625: Use common macros for DP power sequencing commands (git-fixes).
- drm/bridge: anx7625: Use common macros for HDCP capabilities (git-fixes).
- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).
- drm/bridge: tc358764: Fix debug print parameter order (git-fixes).
- drm/etnaviv: fix dumping of active MMU context (git-fixes).
- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers (git-fixes).
- drm/i915/sdvo: fix panel_type initialization (git-fixes).
- drm/i915: Fix premature release of request's reusable memory (git-fixes).
- drm/mediatek: Fix dereference before null check (git-fixes).
- drm/mediatek: Fix potential memory leak if vmap() fail (git-fixes).
- drm/mediatek: Remove freeing not dynamic allocated memory (git-fixes).
- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).
- drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).
- drm/msm/mdp5: Do not leak some plane state (git-fixes).
- drm/msm: Update dev core dump to not print backwards (git-fixes).
- drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() (git-fixes).
- drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (git-fixes).
- drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (bsc#1214073).
- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).
- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (git-fixes).
- drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (git-fixes).
- drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (git-fixes).
- drm/qxl: fix UAF on handle creation (git-fixes).
- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).
- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() (git-fixes).
- drm/rockchip: Do not spam logs in atomic check (git-fixes).
- drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap() (git-fixes).
- drm/stm: ltdc: fix late dereference check (git-fixes).
- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (git-fixes).
- drm/ttm: check null pointer before accessing when swapping (git-fixes).
- drm/ttm: never consider pinned BOs for eviction&swap (git-fixes).
- drm/vmwgfx: Fix shader stage validation (git-fixes).
- drm: adv7511: Fix low refresh rate register for ADV7533/5 (git-fixes).
- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).
- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask (git-fixes).
- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).
- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).
- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).
- e1000: Fix typos in comments (jsc#PED-5738).
- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).
- e1000: switch to napi_build_skb() (jsc#PED-5738).
- e1000: switch to napi_consume_skb() (jsc#PED-5738).
- enable TPM in azure (bsc#1214760)
- exfat: fix unexpected EOF while reading dir (bsc#1214000).
- exfat: release s_lock before calling dir_emit() (bsc#1214000).
- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).
- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (git-fixes).
- fbdev: Fix sys_imageblit() for arbitrary image widths (git-fixes).
- fbdev: Improve performance of sys_imageblit() (git-fixes).
- fbdev: Update fbdev source file paths (git-fixes).
- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).
- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).
- file: reinstate f_pos locking optimization for regular files (bsc#1213759).
- firmware: arm_scmi: Drop OF node reference in the transport channel setup (git-fixes).
- firmware: cs_dsp: Fix new control name check (git-fixes).
- firmware: meson_sm: fix to avoid potential NULL pointer dereference (git-fixes).
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes).
- fprobe: Release rethook after the ftrace_ops is unregistered (git-fixes).
- fprobe: add unlock to match a succeeded ftrace_test_recursion_trylock (git-fixes).
- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).
- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).
- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).
- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).
- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).
- gpio: mvebu: fix irq domain leak (git-fixes).
- gpio: tps68470: Make tps68470_gpio_output() always set the initial value (git-fixes).
- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).
- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (git-fixes).
- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() (git-fixes).
- hwrng: iproc-rng200 - Implement suspend and resume calls (git-fixes).
- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).
- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).
- i2c: Delete error messages for failed memory allocations (git-fixes).
- i2c: Improve size determinations (git-fixes).
- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (git-fixes).
- i2c: designware: Correct length byte validation logic (git-fixes).
- i2c: designware: Handle invalid SMBus block data response length value (git-fixes).
- i2c: hisi: Only handle the interrupt of the driver's transfer (git-fixes).
- i2c: nomadik: Remove a useless call in the remove function (git-fixes).
- i2c: nomadik: Remove unnecessary goto label (git-fixes).
- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).
- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).
- iavf: fix potential races for FDIR filters (git-fixes).
- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).
- ice: Fix crash by keep old cfg when update TCs more than queues (git-fixes).
- ice: Fix max_rate check while configuring TX rate limits (git-fixes).
- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
- iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (git-fixes).
- iio: adc: stx104: Implement and utilize register structures (git-fixes).
- iio: adc: stx104: Utilize iomap interface (git-fixes).
- iio: cros_ec: Fix the allocation size for cros_ec_command (git-fixes).
- intel/e1000:fix repeated words in comments (jsc#PED-5738).
- intel: remove unused macros (jsc#PED-5738).
- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423).
- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423).
- iommu/amd: Add PCI segment support for ivrs_ commands (git-fixes).
- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423).
- iommu/amd: Do not identity map v2 capable device when snp is enabled (git-fixes).
- iommu/amd: Fix compile warning in init code (git-fixes).
- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).
- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).
- iommu/amd: Fix pci device refcount leak in ppr_notifier() (git-fixes).
- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).
- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (git-fixes).
- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).
- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).
- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).
- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).
- iommu/dma: Fix incorrect error return on iommu deferred attach (git-fixes).
- iommu/dma: Fix iova map result check bug (git-fixes).
- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).
- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (git-fixes).
- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (git-fixes).
- iommu/iova: Fix module config properly (git-fixes).
- iommu/mediatek: Add error path for loop of mm_dts_parse (git-fixes).
- iommu/mediatek: Add platform_device_put for recovering the device refcnt (git-fixes).
- iommu/mediatek: Check return value after calling platform_get_resource() (git-fixes).
- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).
- iommu/mediatek: Use component_match_add (git-fixes).
- iommu/mediatek: Validate number of phandles associated with 'mediatek,larbs' (git-fixes).
- iommu/omap: Fix buffer overflow in debugfs (git-fixes).
- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).
- iommu/s390: Fix duplicate domain attachments (git-fixes).
- iommu/sun50i: Consider all fault sources for reset (git-fixes).
- iommu/sun50i: Fix R/W permission check (git-fixes).
- iommu/sun50i: Fix flush size (git-fixes).
- iommu/sun50i: Fix reset release (git-fixes).
- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).
- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).
- iommu/vt-d: Add RPLS to quirk list to skip TE disabling (git-fixes).
- iommu/vt-d: Check correct capability for sagaw determination (git-fixes).
- iommu/vt-d: Clean up si_domain in the init_dmars() error path (git-fixes).
- iommu/vt-d: Correctly calculate sagaw value of IOMMU (git-fixes).
- iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (git-fixes).
- iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (git-fixes).
- iommu/vt-d: Fix kdump kernels boot failure with scalable mode (git-fixes).
- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (git-fixes).
- iommu/vt-d: Set SRE bit only when hardware has SRS cap (git-fixes).
- ipmi:ssif: Add check for kstrdup (git-fixes).
- ipmi:ssif: Fix a memory leak when scanning for an adapter (git-fixes).
- ipmi_si: fix a memleak in try_smi_init() (git-fixes).
- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).
- kabi/severities: Ignore newly added SRSO mitigation functions
- kabi: Allow extra bugsints (bsc#1213927).
- kernel-binary: Common dependencies cleanup Common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.
- kernel-binary: Drop code for kerntypes support Kerntypes was a SUSE-specific feature dropped before SLE 12.
- kunit: make kunit_test_timeout compatible with comment (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false (git-fixes).
- leds: multicolor: Use rounded division when calculating color components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode() (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- lib/test_meminit: allocate pages up to order MAX_ORDER (git-fixes).
- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).
- libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220 jsc#PED-3924).
- libbpf: Fix btf_dump's packed struct determination (bsc#1211220 jsc#PED-3924).
- libbpf: Fix single-line struct definition output in btf_dump (bsc#1211220 jsc#PED-3924).
- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).
- md/raid0: Factor out helper for mapping and submitting a bio (bsc#1213916).
- md/raid0: Fix performance regression for large sequential writes (bsc#1213916).
- media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).
- media: cx24120: Add retval check for cx24120_message_send() (git-fixes).
- media: dib7000p: Fix potential division by zero (git-fixes).
- media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (git-fixes).
- media: go7007: Remove redundant if statement (git-fixes).
- media: i2c: ccs: Check rules is non-NULL (git-fixes).
- media: i2c: rdacm21: Fix uninitialized value (git-fixes).
- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).
- media: ov2680: Add ov2680_fill_format() helper function (git-fixes).
- media: ov2680: Do not take the lock for try_fmt calls (git-fixes).
- media: ov2680: Fix ov2680_bayer_order() (git-fixes).
- media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).
- media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (git-fixes).
- media: ov2680: Fix vflip / hflip set functions (git-fixes).
- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).
- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (git-fixes).
- media: rkvdec: increase max supported height for H.264 (git-fixes).
- media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).
- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).
- media: venus: hfi_venus: Only consider sys_idle_indicator on V1 (git-fixes).
- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts (git-fixes).
- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).
- mkspec: Allow unsupported KMPs (bsc#1214386)
- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).
- mmc: block: Fix in_flight[issue_type] value error (git-fixes).
- mmc: moxart: read scr register without changing byte order (git-fixes).
- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).
- module: avoid allocation if module is already present and ready (bsc#1213921).
- module: extract patient module check into helper (bsc#1213921).
- module: move check_modinfo() early to early_mod_check() (bsc#1213921).
- module: move early sanity checks into a helper (bsc#1213921).
- mtd: rawnand: brcmnand: Fix crash during the panic_write (git-fixes).
- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).
- mtd: rawnand: brcmnand: Fix potential false time out warning (git-fixes).
- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (git-fixes).
- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (git-fixes).
- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).
- mtd: rawnand: omap_elm: Fix incorrect type in assignment (git-fixes).
- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (git-fixes).
- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).
- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).
- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).
- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).
- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).
- net: ieee802154: at86rf230: Stop leaking skb's (git-fixes).
- net: mana: Fix MANA VF unload when hardware is unresponsive (git-fixes).
- net: phy: at803x: remove set/get wol callbacks for AR8032 (git-fixes).
- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).
- net: phy: fix IRQ-based wake-on-lan over hibernate / power off (git-fixes).
- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)
- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (git-fixes).
- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (git-fixes).
- netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).
- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946 bsc#1214404).
- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946).
- netfs: fix parameter of cleanup() (bsc#1214743).
- nfsd: Remove incorrect check in nfsd4_validate_stateid (git-fixes).
- nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (git-fixes).
- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).
- nvme-rdma: fix potential unbalanced freeze & unfreeze (bsc#1208902).
- nvme-tcp: fix potential unbalanced freeze & unfreeze (bsc#1208902).
- objtool/x86: Fix SRSO mess (git-fixes).
- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).
- objtool: Union instruction::{call_dest,jump_table} (git-fixes).
- old-flavors: Drop 2.6 kernels. 2.6 based kernels are EOL, upgrading from them is no longer suported.
- pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (git-fixes).
- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).
- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).
- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).
- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).
- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).
- phy: qcom-snps: Use dev_err_probe() to simplify code (git-fixes).
- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).
- pinctrl: amd: Mask wake bits on probe again (git-fixes).
- pinctrl: amd: Revert 'pinctrl: amd: disable and mask interrupts on probe' (git-fixes).
- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).
- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).
- pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).
- platform/x86: dell-sysman: Fix reference leak (git-fixes).
- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).
- powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (bsc#1212091 ltc#199106).
- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (bsc#1212091 ltc#199106).
- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (bsc#1212091 ltc#199106).
- powerpc/iommu: do not set failed sg dma_address to DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).
- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).
- powerpc/kernel/iommu: Add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).
- powerpc/kexec: Fix build failure from uninitialised variable (bsc#1212091 ltc#199106).
- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059 git-fixes).
- powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).
- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Add of_node_put() before break (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Check if the default window in use before removing it (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Find existing DDW with given property name (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Make use of DDW for indirect mapping (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Replace hard-coded page shift (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).
- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091 ltc#199106).
- powerpc/pseries: Add __init attribute to eligible functions (bsc#1212091 ltc#199106).
- powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- powerpc/pseries: Initialise CPU hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).
- powerpc/rtas: block error injection when locked down (bsc#1023051).
- powerpc/rtas: enture rtas_call is called with MMU enabled (bsc#1023051).
- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).
- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).
- powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (bsc#1188885 ltc#193722 git-fixes).
- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). Update config files.
- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).
- powerpc: fix typos in comments (bsc#1212091 ltc#199106).
- pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).
- pstore/ram: Check start of empty przs during init (git-fixes).
- pwm: Add a stub for devm_pwmchip_add() (git-fixes).
- pwm: meson: Simplify duplicated per-channel tracking (git-fixes).
- pwm: meson: fix handling of period/duty if greater than UINT_MAX (git-fixes).
- qed: Fix scheduling in a tasklet while getting stats (git-fixes).
- regmap: rbtree: Use alloc_flags for memory allocations (git-fixes).
- ring-buffer: Do not swap cpu_buffer during resize process (git-fixes).
- ring-buffer: Fix deadloop issue on reading trace_pipe (git-fixes).
- ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes).
- rpm/mkspec-dtb: support for nested subdirs
- rpmsg: glink: Add check for kstrdup (git-fixes).
- s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (bsc#1214976).
- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).
- s390/zcrypt: fix reply buffer calculations for CCA replies (bsc#1213949).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git fixes).
- sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes).
- sched/psi: use kernfs polling functions for PSI trigger polling (bsc#1209799).
- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes).
- scsi: 53c700: Check that command slot is not NULL (git-fixes).
- scsi: RDMA/srp: Fix residual handling (git-fixes)
- scsi: bsg: Increase number of devices (bsc#1210048).
- scsi: core: Do not wait for quiesce in scsi_device_block() (bsc#1209284).
- scsi: core: Do not wait for quiesce in scsi_stop_queue() (bsc#1209284).
- scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes).
- scsi: core: Fix possible memory leak if device_add() fails (git-fixes).
- scsi: core: Improve warning message in scsi_device_block() (bsc#1209284).
- scsi: core: Merge scsi_internal_device_block() and device_block() (bsc#1209284).
- scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes).
- scsi: qedf: Fix NULL dereference in error handling (git-fixes).
- scsi: qedf: Fix firmware halt over suspend and resume (git-fixes).
- scsi: qedi: Fix firmware halt over suspend and resume (git-fixes).
- scsi: scsi_debug: Remove dead code (git-fixes).
- scsi: sg: Increase number of devices (bsc#1210048).
- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).
- scsi: snic: Fix possible memory leak if device_add() fails (git-fixes).
- scsi: storvsc: Always set no_report_opcodes (git-fixes).
- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (git-fixes).
- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).
- scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (git-fixes).
- scsi: zfcp: Defer fc_rport blocking until after ADISC response (git-fixes bsc#1214371).
- selftests/bpf: Test btf dump for struct with padding only fields (bsc#1211220 jsc#PED-3924).
- selftests/futex: Order calls to futex_lock_pi (git-fixes).
- selftests/harness: Actually report SKIP for signal tests (git-fixes).
- selftests/resctrl: Close perf value read fd on errors (git-fixes).
- selftests/resctrl: Do not leak buffer in fill_cache() (git-fixes).
- selftests/resctrl: Unmount resctrl FS if child fails to run benchmark (git-fixes).
- selftests/rseq: check if libc rseq support is registered (git-fixes).
- selftests: forwarding: Add a helper to skip test when using veth pairs (git-fixes).
- selftests: forwarding: Skip test when no interfaces are specified (git-fixes).
- selftests: forwarding: Switch off timeout (git-fixes).
- selftests: forwarding: ethtool: Skip when using veth pairs (git-fixes).
- selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (git-fixes).
- selftests: forwarding: tc_actions: Use ncat instead of nc (git-fixes).
- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).
- selftests: forwarding: tc_flower: Relax success criterion (git-fixes).
- selftests: mirror_gre_changes: Tighten up the TTL test match (git-fixes).
- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).
- serial: sc16is7xx: fix bug when first setting GPIO direction (git-fixes).
- serial: sprd: Assign sprd_port after initialized to avoid wrong access (git-fixes).
- serial: sprd: Fix DMA buffer leak issue (git-fixes).
- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).
- sfc: fix crash when reading stats while NIC is resetting (git-fixes).
- smb3: Do not send lease break acknowledgment if all file handles have been closed (git-fixes).
- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request (bsc#1193629).
- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).
- smb: client: fix dfs link mount against w2k8 (bsc#1212142).
- smb: client: fix null auth (git-fixes).
- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).
- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).
- soundwire: fix enumeration completion (git-fixes).
- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).
- supported.conf: fix typos for -!optional markers
- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).
- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).
- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).
- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).
- target_core_rbd: remove snapshot existence validation code (bsc#1212857).
- thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).
- timers: Add shutdown mechanism to the internal functions (bsc#1213970).
- timers: Provide timer_shutdown[_sync]() (bsc#1213970).
- timers: Rename del_timer() to timer_delete() (bsc#1213970).
- timers: Rename del_timer_sync() to timer_delete_sync() (bsc#1213970).
- timers: Replace BUG_ON()s (bsc#1213970).
- timers: Silently ignore timers with a NULL function (bsc#1213970).
- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).
- timers: Update kernel-doc for various functions (bsc#1213970).
- timers: Use del_timer_sync() even on UP (bsc#1213970).
- tracing/histograms: Add histograms to hist_vars if they have referenced variables (git-fixes).
- tracing/histograms: Return an error if we fail to add histogram to hist_vars list (git-fixes).
- tracing/probes: Fix not to count error code to total length (git-fixes).
- tracing/probes: Fix to avoid double count of the string length on the array (git-fixes).
- tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).
- tracing/probes: Fix to update dynamic data counter if fetcharg uses it (git-fixes).
- tracing: Fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes).
- tracing: Fix memleak due to race between current_tracer and trace (git-fixes).
- tracing: Fix memory leak of iter->temp when reading trace_pipe (git-fixes).
- tracing: Fix null pointer dereference in tracing_err_log_open() (git-fixes).
- tracing: Fix warning in trace_buffered_event_disable() (git-fixes).
- tty: fix hang on tty device with no_room set (git-fixes).
- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (git-fixes).
- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).
- tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (git-fixes).
- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).
- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (git-fixes).
- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).
- usb-storage: alauda: Fix uninit-value in alauda_check_media() (git-fixes).
- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (git-fixes).
- usb: chipidea: imx: do not request QoS for imx8ulp (git-fixes).
- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).
- usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (git-fixes).
- usb: dwc3: Fix typos in gadget.c (git-fixes).
- usb: dwc3: Properly handle processing of pending events (git-fixes).
- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).
- usb: gadget: Fix the memory leak in raw_gadget driver (git-fixes).
- usb: gadget: f_mass_storage: Fix unused variable warning (git-fixes).
- usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (git-fixes).
- usb: ohci-at91: Fix the unhandle interrupt when resume (git-fixes).
- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).
- usb: quirks: add quirk for Focusrite Scarlett (git-fixes).
- usb: serial: option: add Quectel EC200A module support (git-fixes).
- usb: serial: option: support Quectel EM060K_128 (git-fixes).
- usb: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).
- usb: serial: simple: sort driver entries (git-fixes).
- usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment (git-fixes).
- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).
- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).
- usb: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).
- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (git-fixes).
- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).
- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).
- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).
- wifi: ath9k: protect WMI command response buffer replacement with a lock (git-fixes).
- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).
- wifi: cfg80211: Fix return value in scan logic (git-fixes).
- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (git-fixes).
- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (git-fixes).
- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).
- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).
- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).
- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH (git-fixes).
- wifi: mwifiex: Fix OOB and integer underflow when rx packets (git-fixes).
- wifi: mwifiex: Fix missed return in oob checks failed path (git-fixes).
- wifi: mwifiex: avoid possible NULL skb pointer dereference (git-fixes).
- wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (git-fixes).
- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).
- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute (git-fixes).
- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).
- wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).
- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).
- x86/alternative: Make custom return thunk unconditional (git-fixes).
- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
- x86/cpu: Clean up SRSO return thunk mess (git-fixes).
- x86/cpu: Cleanup the untrain mess (git-fixes).
- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
- x86/cpu: Rename original retbleed methods (git-fixes).
- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).
- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).
- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).
- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).
- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).
- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).
- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).
- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).
- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).
- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes).
- x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes).
- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
- x86/srso: Explain the untraining sequences a bit more (git-fixes).
- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
- x86/srso: Fix return thunks in generated code (git-fixes).
- x86/static_call: Fix __static_call_fixup() (git-fixes).
- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).
- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).
- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).
- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).
- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).
- xfs: fix sb write verify for lazysbcount (bsc#1214661).
Patchnames: SUSE-2023-3656,SUSE-SLE-Module-Public-Cloud-15-SP5-2023-3656,openSUSE-SLE-15.5-2023-3656
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6 (Medium)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.6 (Medium)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.4 (Medium)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.7 (Medium)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
5.1 (Medium)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.1 (Medium)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.7 (Medium)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.6 (Medium)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
35 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
145 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\nThe SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203330).\n- CVE-2022-40133: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203329).\n- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).\n- CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580).\n- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).\n- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).\n- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).\n- CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970).\n- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).\n- CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968).\n- CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019).\n- CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120).\n- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).\n- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).\n- CVE-2023-4563: Fixed use-after-free in nft_verdict_dump due to a race between set GC and transaction (bsc#1214727).\n- CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729).\n- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).\n- CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546).\n- CVE-2023-37453: Fixed oversight in SuperSpeed initialization (bsc#1213123).\n- CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233).\n\nThe following non-security bugs were fixed:\n\n- ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305).\n- ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (git-fixes).\n- ACPI: processor: perflib: Use the \u0027no limit\u0027 frequency QoS (git-fixes).\n- ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table (git-fixes).\n- ALSA: ac97: Fix possible error value of *rac97 (git-fixes).\n- ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes).\n- ALSA: hda/realtek - Remodified 3k pull low procedure (git-fixes).\n- ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED (git-fixes).\n- ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx (git-fixes).\n- ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes).\n- ALSA: hda/realtek: Switch Dell Oasis models to use SPI (git-fixes).\n- ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (git-fixes).\n- ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces (git-fixes).\n- ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes).\n- ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (git-fixes).\n- ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (git-fixes).\n- ARM: dts: imx6sll: fixup of operating points (git-fixes).\n- ARM: spear: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (git-fixes).\n- ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ (git-fixes).\n- ASoC: lower \u0027no backend DAIs enabled for ... Port\u0027 log severity (git-fixes).\n- ASoC: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes).\n- ASoC: rt5665: add missed regulator_bulk_disable (git-fixes).\n- ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes).\n- ASoC: tegra: Fix SFC conversion for few rates (git-fixes).\n- Bluetooth: Fix potential use-after-free when clear keys (git-fixes).\n- Bluetooth: L2CAP: Fix use-after-free (git-fixes).\n- Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (git-fixes).\n- Bluetooth: Remove unused declaration amp_read_loc_info() (git-fixes).\n- Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (git-fixes).\n- Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (git-fixes).\n- Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes).\n- CONFIG_NVME_VERBOSE_ERRORS=y gone with a82baa8083b\n- CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13 gone with 7e152d55123\n- Created new preempt kernel flavor Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT-\u003ey are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel.\n- Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes).\n- Documentation: devices.txt: Remove ttyIOC* (git-fixes).\n- Documentation: devices.txt: Remove ttySIOC* (git-fixes).\n- Drivers: hv: Do not remap addresses that are above shared_gpa_boundary (bsc#1206453).\n- Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453).\n- Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453).\n- Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453).\n- Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453).\n- Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453).\n- Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453).\n- Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453).\n- Drop cfg80211 lock fix patches that caused a regression (bsc#1213757)\n- Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428)\n- Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759)\n- HID: add quirk for 03f0:464a HP Elite Presenter Mouse (git-fixes).\n- HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes).\n- HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (git-fixes).\n- HID: multitouch: Correct devm device reference for hidinput input_dev name (git-fixes).\n- HID: wacom: remove the battery when the EKR is off (git-fixes).\n- HWPOISON: offline support: fix spelling in Documentation/ABI/ (git-fixes).\n- IB/hfi1: Fix possible panic during hotplug remove (git-fixes)\n- IB/uverbs: Fix an potential error pointer dereference (git-fixes)\n- Input: exc3000 - properly stop timer on shutdown (git-fixes).\n- KVM: s390: fix sthyi error handling (git-fixes bsc#1214370).\n- Kbuild: add -Wno-shift-negative-value where -Wextra is used (bsc#1214756).\n- Kbuild: move to -std=gnu11 (bsc#1214756).\n- PCI/ASPM: Avoid link retraining race (git-fixes).\n- PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes).\n- PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (git-fixes).\n- PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes).\n- PCI: acpiphp: Reassign resources on bridge if necessary (git-fixes).\n- PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes).\n- PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453).\n- PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453).\n- PCI: meson: Remove cast between incompatible function type (git-fixes).\n- PCI: microchip: Correct the DED and SEC interrupt bit offsets (git-fixes).\n- PCI: microchip: Remove cast between incompatible function type (git-fixes).\n- PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes).\n- PCI: rockchip: Remove writes to unused registers (git-fixes).\n- PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (git-fixes).\n- PCI: tegra194: Fix possible array out of bounds access (git-fixes).\n- PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes).\n- RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes)\n- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)\n- RDMA/efa: Fix wrong resources deallocation order (git-fixes)\n- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)\n- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)\n- RDMA/hns: Fix port active speed (git-fixes)\n- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)\n- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)\n- RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes)\n- RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes)\n- RDMA/siw: Balance the reference of cep-\u003ekref in the error path (git-fixes)\n- RDMA/siw: Correct wrong debug message (git-fixes)\n- RDMA/umem: Set iova in ODP flow (git-fixes)\n- README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer.\n- Revert \u0027IB/isert: Fix incorrect release of isert connection\u0027 (git-fixes)\n- Revert \u0027tracing: Add \u0027(fault)\u0027 name injection to kernel probes\u0027 (git-fixes).\n- Update patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- amba: bus: fix refcount leak (git-fixes).\n- arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (git-fixes).\n- arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes).\n- arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (git-fixes).\n- audit: fix possible soft lockup in __audit_inode_child() (git-fixes).\n- backlight/bd6107: Compare against struct fb_info.device (git-fixes).\n- backlight/gpio_backlight: Compare against struct fb_info.device (git-fixes).\n- backlight/lv5207lp: Compare against struct fb_info.device (git-fixes).\n- batman-adv: Do not get eth header before batadv_check_management_packet (git-fixes).\n- batman-adv: Do not increase MTU when set by user (git-fixes).\n- batman-adv: Fix TT global entry leak when client roamed back (git-fixes).\n- batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes).\n- batman-adv: Hold rtnl lock during MTU update via netlink (git-fixes).\n- batman-adv: Trigger events for auto adjusted MTU (git-fixes).\n- bnx2x: fix page fault following EEH recovery (bsc#1214299).\n- bpf: Disable preemption in bpf_event_output (git-fixes).\n- bpftool: Print newline before \u0027}\u0027 for struct with padding only fields (bsc#1211220 jsc#PED-3924).\n- bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes).\n- bus: ti-sysc: Fix build warning for 64-bit build (git-fixes).\n- bus: ti-sysc: Fix cast to enum warning (git-fixes).\n- bus: ti-sysc: Flush posted write on enable before reset (git-fixes).\n- can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (git-fixes).\n- ceph: defer stopping mdsc delayed_work (bsc#1214392).\n- ceph: do not check for quotas on MDS stray dirs (bsc#1214238).\n- ceph: never send metrics if disable_send_metrics is set (bsc#1214180).\n- check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). gcc7 on SLE 15 does not support this while later gcc does.\n- cifs: add missing return value check for cifs_sb_tlink (bsc#1193629).\n- cifs: allow dumping keys for directories too (bsc#1193629).\n- cifs: fix mid leak during reconnection after timeout threshold (git-fixes).\n- cifs: if deferred close is disabled then close files immediately (git-fixes).\n- cifs: is_network_name_deleted should return a bool (bsc#1193629).\n- cifs: update internal module version number for cifs.ko (bsc#1193629).\n- clk: Fix slab-out-of-bounds error in devm_clk_release() (git-fixes).\n- clk: Fix undefined reference to `clk_rate_exclusive_{get,put}\u0027 (git-fixes).\n- clk: imx8mp: fix sai4 clock (git-fixes).\n- clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes).\n- clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz (git-fixes).\n- clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes).\n- clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes).\n- clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes).\n- clk: sunxi-ng: Modify mismatched function name (git-fixes).\n- clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453).\n- clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (bsc#1213970).\n- clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453).\n- clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453).\n- clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453).\n- clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453).\n- clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453).\n- cpu/SMT: Allow enabling partial SMT states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpu/SMT: Store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- cpufreq: Fix the race condition while updating the transition_task of policy (git-fixes).\n- cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (bsc#1214659).\n- cpufreq: intel_pstate: Enable HWP IO boost for all servers (bsc#1208949 jsc#PED-6003 jsc#PED-6004).\n- cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: Read all MSRs on the target CPU (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: hybrid: Rework HWP calibration (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929).\n- crypto: caam - fix unchecked return value error (git-fixes).\n- crypto: stm32 - Properly handle pm_runtime_get failing (git-fixes).\n- define more Hyper-V related constants (bsc#1206453).\n- dma-buf/sw_sync: Avoid recursive lock during fence signal (git-fixes).\n- dma-buf/sync_file: Fix docs syntax (git-fixes).\n- dmaengine: idxd: Modify the dependence of attribute pasid_enabled (git-fixes).\n- dmaengine: mcf-edma: Fix a potential un-allocated memory access (git-fixes).\n- dmaengine: pl330: Return DMA_PAUSED when transaction is paused (git-fixes).\n- dmaengine: ste_dma40: Add missing IRQ check in d40_probe (git-fixes).\n- docs/process/howto: Replace C89 with C11 (bsc#1214756).\n- docs: kernel-parameters: Refer to the correct bitmap function (git-fixes).\n- docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes).\n- docs: printk-formats: Fix hex printing of signed values (git-fixes).\n- driver core: test_async: fix an error code (git-fixes).\n- drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (git-fixes).\n- drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes).\n- drm/amd/display: Apply 60us prefetch for DCFCLK \u0026lt;= 300Mhz (git-fixes).\n- drm/amd/display: Disable phantom OTG after enable for plane disable (git-fixes).\n- drm/amd/display: Do not set drr on pipe commit (git-fixes).\n- drm/amd/display: Enable dcn314 DPP RCO (git-fixes).\n- drm/amd/display: Ensure that planes are in the same order (git-fixes).\n- drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register (git-fixes).\n- drm/amd/display: Retain phantom plane/stream if validation fails (git-fixes).\n- drm/amd/display: Skip DPP DTO update if root clock is gated (git-fixes).\n- drm/amd/display: Use update plane and stream routine for DCN32x (git-fixes).\n- drm/amd/display: check TG is non-null before checking if enabled (git-fixes).\n- drm/amd/display: check attr flag before set cursor degamma on DCN3+ (git-fixes).\n- drm/amd/display: disable RCO for DCN314 (git-fixes).\n- drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes).\n- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).\n- drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set (git-fixes).\n- drm/amd/display: limit DPIA link rate to HBR3 (git-fixes).\n- drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes).\n- drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes).\n- drm/amd/display: trigger timing sync only if TG is running (git-fixes).\n- drm/amd/pm/smu7: move variables to where they are used (git-fixes).\n- drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation (git-fixes).\n- drm/amd/pm: expose swctf threshold setting for legacy powerplay (git-fixes).\n- drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes).\n- drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings (git-fixes).\n- drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings (git-fixes).\n- drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (git-fixes).\n- drm/amd: Disable S/G for APUs when 64GB or more host memory (git-fixes).\n- drm/amd: flush any delayed gfxoff on suspend entry (git-fixes).\n- drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 (git-fixes).\n- drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes).\n- drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes).\n- drm/amdgpu: Remove unnecessary domain argument (git-fixes).\n- drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes).\n- drm/amdgpu: add S/G display parameter (git-fixes).\n- drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes).\n- drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes).\n- drm/amdgpu: fix calltrace warning in amddrm_buddy_fini (git-fixes).\n- drm/amdgpu: fix memory leak in mes self test (git-fixes).\n- drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes).\n- drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes).\n- drm/amdgpu: keep irq count in amdgpu_irq_disable_all (git-fixes).\n- drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (git-fixes).\n- drm/armada: Fix off-by-one error in armada_overlay_get_property() (git-fixes).\n- drm/ast: Fix DRAM init on AST2200 (git-fixes).\n- drm/atomic-helper: Update reference to drm_crtc_force_disable_all() (git-fixes).\n- drm/bridge: anx7625: Drop device lock before drm_helper_hpd_irq_event() (git-fixes).\n- drm/bridge: anx7625: Use common macros for DP power sequencing commands (git-fixes).\n- drm/bridge: anx7625: Use common macros for HDCP capabilities (git-fixes).\n- drm/bridge: fix -Wunused-const-variable= warning (git-fixes).\n- drm/bridge: tc358764: Fix debug print parameter order (git-fixes).\n- drm/etnaviv: fix dumping of active MMU context (git-fixes).\n- drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers (git-fixes).\n- drm/i915/sdvo: fix panel_type initialization (git-fixes).\n- drm/i915: Fix premature release of request\u0027s reusable memory (git-fixes).\n- drm/mediatek: Fix dereference before null check (git-fixes).\n- drm/mediatek: Fix potential memory leak if vmap() fail (git-fixes).\n- drm/mediatek: Remove freeing not dynamic allocated memory (git-fixes).\n- drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes).\n- drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done (git-fixes).\n- drm/msm/mdp5: Do not leak some plane state (git-fixes).\n- drm/msm: Update dev core dump to not print backwards (git-fixes).\n- drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() (git-fixes).\n- drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (git-fixes).\n- drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (bsc#1214073).\n- drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes).\n- drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (git-fixes).\n- drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (git-fixes).\n- drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (git-fixes).\n- drm/qxl: fix UAF on handle creation (git-fixes).\n- drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes).\n- drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() (git-fixes).\n- drm/rockchip: Do not spam logs in atomic check (git-fixes).\n- drm/shmem-helper: Reset vma-\u003evm_ops before calling dma_buf_mmap() (git-fixes).\n- drm/stm: ltdc: fix late dereference check (git-fixes).\n- drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (git-fixes).\n- drm/ttm: check null pointer before accessing when swapping (git-fixes).\n- drm/ttm: never consider pinned BOs for eviction\u0026swap (git-fixes).\n- drm/vmwgfx: Fix shader stage validation (git-fixes).\n- drm: adv7511: Fix low refresh rate register for ADV7533/5 (git-fixes).\n- drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes).\n- drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask (git-fixes).\n- dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes).\n- dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes).\n- dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes).\n- e1000: Fix typos in comments (jsc#PED-5738).\n- e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738).\n- e1000: switch to napi_build_skb() (jsc#PED-5738).\n- e1000: switch to napi_consume_skb() (jsc#PED-5738).\n- enable TPM in azure (bsc#1214760)\n- exfat: fix unexpected EOF while reading dir (bsc#1214000).\n- exfat: release s_lock before calling dir_emit() (bsc#1214000).\n- exfat_iterate(): do not open-code file_inode(file) (bsc#1214000).\n- fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (git-fixes).\n- fbdev: Fix sys_imageblit() for arbitrary image widths (git-fixes).\n- fbdev: Improve performance of sys_imageblit() (git-fixes).\n- fbdev: Update fbdev source file paths (git-fixes).\n- fbdev: fix potential OOB read in fast_imageblit() (git-fixes).\n- fbdev: mmp: fix value check in mmphw_probe() (git-fixes).\n- file: reinstate f_pos locking optimization for regular files (bsc#1213759).\n- firmware: arm_scmi: Drop OF node reference in the transport channel setup (git-fixes).\n- firmware: cs_dsp: Fix new control name check (git-fixes).\n- firmware: meson_sm: fix to avoid potential NULL pointer dereference (git-fixes).\n- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes).\n- fprobe: Release rethook after the ftrace_ops is unregistered (git-fixes).\n- fprobe: add unlock to match a succeeded ftrace_test_recursion_trylock (git-fixes).\n- fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes).\n- fsi: aspeed: Reset master errors after CFAM reset (git-fixes).\n- fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes).\n- ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes).\n- gpio: mvebu: Make use of devm_pwmchip_add (git-fixes).\n- gpio: mvebu: fix irq domain leak (git-fixes).\n- gpio: tps68470: Make tps68470_gpio_output() always set the initial value (git-fixes).\n- hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453).\n- hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (git-fixes).\n- hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() (git-fixes).\n- hwrng: iproc-rng200 - Implement suspend and resume calls (git-fixes).\n- hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes).\n- hwrng: pic32 - use devm_clk_get_enabled (git-fixes).\n- i2c: Delete error messages for failed memory allocations (git-fixes).\n- i2c: Improve size determinations (git-fixes).\n- i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (git-fixes).\n- i2c: designware: Correct length byte validation logic (git-fixes).\n- i2c: designware: Handle invalid SMBus block data response length value (git-fixes).\n- i2c: hisi: Only handle the interrupt of the driver\u0027s transfer (git-fixes).\n- i2c: nomadik: Remove a useless call in the remove function (git-fixes).\n- i2c: nomadik: Remove unnecessary goto label (git-fixes).\n- i2c: nomadik: Use devm_clk_get_enabled() (git-fixes).\n- i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes).\n- iavf: fix potential races for FDIR filters (git-fixes).\n- ice: Fix RDMA VSI removal during queue rebuild (git-fixes).\n- ice: Fix crash by keep old cfg when update TCs more than queues (git-fixes).\n- ice: Fix max_rate check while configuring TX rate limits (git-fixes).\n- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).\n- iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (git-fixes).\n- iio: adc: stx104: Implement and utilize register structures (git-fixes).\n- iio: adc: stx104: Utilize iomap interface (git-fixes).\n- iio: cros_ec: Fix the allocation size for cros_ec_command (git-fixes).\n- intel/e1000:fix repeated words in comments (jsc#PED-5738).\n- intel: remove unused macros (jsc#PED-5738).\n- iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423).\n- iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423).\n- iommu/amd: Add PCI segment support for ivrs_ commands (git-fixes).\n- iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423).\n- iommu/amd: Do not identity map v2 capable device when snp is enabled (git-fixes).\n- iommu/amd: Fix compile warning in init code (git-fixes).\n- iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes).\n- iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes).\n- iommu/amd: Fix pci device refcount leak in ppr_notifier() (git-fixes).\n- iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes).\n- iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (git-fixes).\n- iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes).\n- iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes).\n- iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes).\n- iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes).\n- iommu/dma: Fix incorrect error return on iommu deferred attach (git-fixes).\n- iommu/dma: Fix iova map result check bug (git-fixes).\n- iommu/dma: return error code from iommu_dma_map_sg() (git-fixes).\n- iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (git-fixes).\n- iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (git-fixes).\n- iommu/iova: Fix module config properly (git-fixes).\n- iommu/mediatek: Add error path for loop of mm_dts_parse (git-fixes).\n- iommu/mediatek: Add platform_device_put for recovering the device refcnt (git-fixes).\n- iommu/mediatek: Check return value after calling platform_get_resource() (git-fixes).\n- iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes).\n- iommu/mediatek: Use component_match_add (git-fixes).\n- iommu/mediatek: Validate number of phandles associated with \u0027mediatek,larbs\u0027 (git-fixes).\n- iommu/omap: Fix buffer overflow in debugfs (git-fixes).\n- iommu/rockchip: fix permission bits in page table entries v2 (git-fixes).\n- iommu/s390: Fix duplicate domain attachments (git-fixes).\n- iommu/sun50i: Consider all fault sources for reset (git-fixes).\n- iommu/sun50i: Fix R/W permission check (git-fixes).\n- iommu/sun50i: Fix flush size (git-fixes).\n- iommu/sun50i: Fix reset release (git-fixes).\n- iommu/sun50i: Implement .iotlb_sync_map (git-fixes).\n- iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes).\n- iommu/vt-d: Add RPLS to quirk list to skip TE disabling (git-fixes).\n- iommu/vt-d: Check correct capability for sagaw determination (git-fixes).\n- iommu/vt-d: Clean up si_domain in the init_dmars() error path (git-fixes).\n- iommu/vt-d: Correctly calculate sagaw value of IOMMU (git-fixes).\n- iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (git-fixes).\n- iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (git-fixes).\n- iommu/vt-d: Fix kdump kernels boot failure with scalable mode (git-fixes).\n- iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (git-fixes).\n- iommu/vt-d: Set SRE bit only when hardware has SRS cap (git-fixes).\n- ipmi:ssif: Add check for kstrdup (git-fixes).\n- ipmi:ssif: Fix a memory leak when scanning for an adapter (git-fixes).\n- ipmi_si: fix a memleak in try_smi_init() (git-fixes).\n- jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes).\n- kabi/severities: Ignore newly added SRSO mitigation functions\n- kabi: Allow extra bugsints (bsc#1213927).\n- kernel-binary: Common dependencies cleanup Common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there.\n- kernel-binary: Drop code for kerntypes support Kerntypes was a SUSE-specific feature dropped before SLE 12.\n- kunit: make kunit_test_timeout compatible with comment (git-fixes).\n- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false (git-fixes).\n- leds: multicolor: Use rounded division when calculating color components (git-fixes).\n- leds: pwm: Fix error code in led_pwm_create_fwnode() (git-fixes).\n- leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (git-fixes).\n- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).\n- lib/test_meminit: allocate pages up to order MAX_ORDER (git-fixes).\n- lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes).\n- libbpf: Fix BTF-to-C converter\u0027s padding logic (bsc#1211220 jsc#PED-3924).\n- libbpf: Fix btf_dump\u0027s packed struct determination (bsc#1211220 jsc#PED-3924).\n- libbpf: Fix single-line struct definition output in btf_dump (bsc#1211220 jsc#PED-3924).\n- libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393).\n- md/raid0: Factor out helper for mapping and submitting a bio (bsc#1213916).\n- md/raid0: Fix performance regression for large sequential writes (bsc#1213916).\n- media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes).\n- media: cx24120: Add retval check for cx24120_message_send() (git-fixes).\n- media: dib7000p: Fix potential division by zero (git-fixes).\n- media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (git-fixes).\n- media: go7007: Remove redundant if statement (git-fixes).\n- media: i2c: ccs: Check rules is non-NULL (git-fixes).\n- media: i2c: rdacm21: Fix uninitialized value (git-fixes).\n- media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes).\n- media: ov2680: Add ov2680_fill_format() helper function (git-fixes).\n- media: ov2680: Do not take the lock for try_fmt calls (git-fixes).\n- media: ov2680: Fix ov2680_bayer_order() (git-fixes).\n- media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working (git-fixes).\n- media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (git-fixes).\n- media: ov2680: Fix vflip / hflip set functions (git-fixes).\n- media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes).\n- media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (git-fixes).\n- media: rkvdec: increase max supported height for H.264 (git-fixes).\n- media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes).\n- media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes).\n- media: venus: hfi_venus: Only consider sys_idle_indicator on V1 (git-fixes).\n- media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts (git-fixes).\n- misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes).\n- mkspec: Allow unsupported KMPs (bsc#1214386)\n- mlxsw: pci: Add shutdown method in PCI driver (git-fixes).\n- mmc: block: Fix in_flight[issue_type] value error (git-fixes).\n- mmc: moxart: read scr register without changing byte order (git-fixes).\n- mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes).\n- module: avoid allocation if module is already present and ready (bsc#1213921).\n- module: extract patient module check into helper (bsc#1213921).\n- module: move check_modinfo() early to early_mod_check() (bsc#1213921).\n- module: move early sanity checks into a helper (bsc#1213921).\n- mtd: rawnand: brcmnand: Fix crash during the panic_write (git-fixes).\n- mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes).\n- mtd: rawnand: brcmnand: Fix potential false time out warning (git-fixes).\n- mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (git-fixes).\n- mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (git-fixes).\n- mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes).\n- mtd: rawnand: omap_elm: Fix incorrect type in assignment (git-fixes).\n- mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (git-fixes).\n- mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes).\n- mtd: spi-nor: Check bus width while setting QE bit (git-fixes).\n- mtd: spinand: toshiba: Fix ecc_get_status (git-fixes).\n- n_tty: Rename tail to old_tail in n_tty_read() (git-fixes).\n- net: hns3: fix wrong bw weight of disabled tc issue (git-fixes).\n- net: ieee802154: at86rf230: Stop leaking skb\u0027s (git-fixes).\n- net: mana: Fix MANA VF unload when hardware is unresponsive (git-fixes).\n- net: phy: at803x: remove set/get wol callbacks for AR8032 (git-fixes).\n- net: phy: broadcom: stub c45 read/write for 54810 (git-fixes).\n- net: phy: fix IRQ-based wake-on-lan over hibernate / power off (git-fixes).\n- net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733)\n- net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (git-fixes).\n- net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (git-fixes).\n- netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742).\n- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946 bsc#1214404).\n- netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946).\n- netfs: fix parameter of cleanup() (bsc#1214743).\n- nfsd: Remove incorrect check in nfsd4_validate_stateid (git-fixes).\n- nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (git-fixes).\n- nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes).\n- nvme-rdma: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- nvme-tcp: fix potential unbalanced freeze \u0026 unfreeze (bsc#1208902).\n- objtool/x86: Fix SRSO mess (git-fixes).\n- objtool/x86: Fixup frame-pointer vs rethunk (git-fixes).\n- objtool: Union instruction::{call_dest,jump_table} (git-fixes).\n- old-flavors: Drop 2.6 kernels. 2.6 based kernels are EOL, upgrading from them is no longer suported.\n- pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (git-fixes).\n- phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes).\n- phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes).\n- phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes).\n- phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes).\n- phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes).\n- phy: qcom-snps: Use dev_err_probe() to simplify code (git-fixes).\n- phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes).\n- pinctrl: amd: Mask wake bits on probe again (git-fixes).\n- pinctrl: amd: Revert \u0027pinctrl: amd: disable and mask interrupts on probe\u0027 (git-fixes).\n- pinctrl: cherryview: fix address_space_handler() argument (git-fixes).\n- pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes).\n- pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes).\n- platform/x86: dell-sysman: Fix reference leak (git-fixes).\n- powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106).\n- powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (bsc#1212091 ltc#199106).\n- powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (bsc#1212091 ltc#199106).\n- powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (bsc#1212091 ltc#199106).\n- powerpc/iommu: do not set failed sg dma_address to DMA_MAPPING_ERROR (bsc#1212091 ltc#199106).\n- powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106).\n- powerpc/kernel/iommu: Add new iommu_table_in_use() helper (bsc#1212091 ltc#199106).\n- powerpc/kexec: Fix build failure from uninitialised variable (bsc#1212091 ltc#199106).\n- powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059 git-fixes).\n- powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106).\n- powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add ddw_list_new_entry() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Add of_node_put() before break (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Check if the default window in use before removing it (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Find existing DDW with given property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Make use of DDW for indirect mapping (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Rename \u0027direct window\u0027 to \u0027dma window\u0027 (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Replace hard-coded page shift (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Update remove_dma_window() to accept property name (bsc#1212091 ltc#199106).\n- powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091 ltc#199106).\n- powerpc/pseries: Add __init attribute to eligible functions (bsc#1212091 ltc#199106).\n- powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/pseries: Initialise CPU hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588).\n- powerpc/rtas: block error injection when locked down (bsc#1023051).\n- powerpc/rtas: enture rtas_call is called with MMU enabled (bsc#1023051).\n- powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051).\n- powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869).\n- powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (bsc#1188885 ltc#193722 git-fixes).\n- powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). Update config files.\n- powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503).\n- powerpc: fix typos in comments (bsc#1212091 ltc#199106).\n- pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503).\n- pstore/ram: Check start of empty przs during init (git-fixes).\n- pwm: Add a stub for devm_pwmchip_add() (git-fixes).\n- pwm: meson: Simplify duplicated per-channel tracking (git-fixes).\n- pwm: meson: fix handling of period/duty if greater than UINT_MAX (git-fixes).\n- qed: Fix scheduling in a tasklet while getting stats (git-fixes).\n- regmap: rbtree: Use alloc_flags for memory allocations (git-fixes).\n- ring-buffer: Do not swap cpu_buffer during resize process (git-fixes).\n- ring-buffer: Fix deadloop issue on reading trace_pipe (git-fixes).\n- ring-buffer: Fix wrong stat of cpu_buffer-\u003eread (git-fixes).\n- rpm/mkspec-dtb: support for nested subdirs\n- rpmsg: glink: Add check for kstrdup (git-fixes).\n- s390/ipl: add missing secure/has_secure file to ipl type \u0027unknown\u0027 (bsc#1214976).\n- s390/purgatory: disable branch profiling (git-fixes bsc#1214372).\n- s390/zcrypt: fix reply buffer calculations for CCA replies (bsc#1213949).\n- sched/fair: Fix inaccurate tally of ttwu_move_affine (git fixes).\n- sched/fair: Use recent_used_cpu to test p-\u003ecpus_ptr (git fixes).\n- sched/psi: use kernfs polling functions for PSI trigger polling (bsc#1209799).\n- scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes).\n- scsi: 53c700: Check that command slot is not NULL (git-fixes).\n- scsi: RDMA/srp: Fix residual handling (git-fixes)\n- scsi: bsg: Increase number of devices (bsc#1210048).\n- scsi: core: Do not wait for quiesce in scsi_device_block() (bsc#1209284).\n- scsi: core: Do not wait for quiesce in scsi_stop_queue() (bsc#1209284).\n- scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes).\n- scsi: core: Fix possible memory leak if device_add() fails (git-fixes).\n- scsi: core: Improve warning message in scsi_device_block() (bsc#1209284).\n- scsi: core: Merge scsi_internal_device_block() and device_block() (bsc#1209284).\n- scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes).\n- scsi: qedf: Fix NULL dereference in error handling (git-fixes).\n- scsi: qedf: Fix firmware halt over suspend and resume (git-fixes).\n- scsi: qedi: Fix firmware halt over suspend and resume (git-fixes).\n- scsi: scsi_debug: Remove dead code (git-fixes).\n- scsi: sg: Increase number of devices (bsc#1210048).\n- scsi: snic: Fix double free in snic_tgt_create() (git-fixes).\n- scsi: snic: Fix possible memory leak if device_add() fails (git-fixes).\n- scsi: storvsc: Always set no_report_opcodes (git-fixes).\n- scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (git-fixes).\n- scsi: storvsc: Handle SRB status value 0x30 (git-fixes).\n- scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (git-fixes).\n- scsi: zfcp: Defer fc_rport blocking until after ADISC response (git-fixes bsc#1214371).\n- selftests/bpf: Test btf dump for struct with padding only fields (bsc#1211220 jsc#PED-3924).\n- selftests/futex: Order calls to futex_lock_pi (git-fixes).\n- selftests/harness: Actually report SKIP for signal tests (git-fixes).\n- selftests/resctrl: Close perf value read fd on errors (git-fixes).\n- selftests/resctrl: Do not leak buffer in fill_cache() (git-fixes).\n- selftests/resctrl: Unmount resctrl FS if child fails to run benchmark (git-fixes).\n- selftests/rseq: check if libc rseq support is registered (git-fixes).\n- selftests: forwarding: Add a helper to skip test when using veth pairs (git-fixes).\n- selftests: forwarding: Skip test when no interfaces are specified (git-fixes).\n- selftests: forwarding: Switch off timeout (git-fixes).\n- selftests: forwarding: ethtool: Skip when using veth pairs (git-fixes).\n- selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (git-fixes).\n- selftests: forwarding: tc_actions: Use ncat instead of nc (git-fixes).\n- selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes).\n- selftests: forwarding: tc_flower: Relax success criterion (git-fixes).\n- selftests: mirror_gre_changes: Tighten up the TTL test match (git-fixes).\n- serial: sc16is7xx: fix broken port 0 uart init (git-fixes).\n- serial: sc16is7xx: fix bug when first setting GPIO direction (git-fixes).\n- serial: sprd: Assign sprd_port after initialized to avoid wrong access (git-fixes).\n- serial: sprd: Fix DMA buffer leak issue (git-fixes).\n- serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes).\n- sfc: fix crash when reading stats while NIC is resetting (git-fixes).\n- smb3: Do not send lease break acknowledgment if all file handles have been closed (git-fixes).\n- smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request (bsc#1193629).\n- smb: client: Fix -Wstringop-overflow issues (bsc#1193629).\n- smb: client: fix dfs link mount against w2k8 (bsc#1212142).\n- smb: client: fix null auth (git-fixes).\n- soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes).\n- soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes).\n- soundwire: fix enumeration completion (git-fixes).\n- spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes).\n- supported.conf: fix typos for -!optional markers\n- swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453).\n- target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026).\n- target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873).\n- target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857).\n- target_core_rbd: remove snapshot existence validation code (bsc#1212857).\n- thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes).\n- timers: Add shutdown mechanism to the internal functions (bsc#1213970).\n- timers: Provide timer_shutdown[_sync]() (bsc#1213970).\n- timers: Rename del_timer() to timer_delete() (bsc#1213970).\n- timers: Rename del_timer_sync() to timer_delete_sync() (bsc#1213970).\n- timers: Replace BUG_ON()s (bsc#1213970).\n- timers: Silently ignore timers with a NULL function (bsc#1213970).\n- timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970).\n- timers: Update kernel-doc for various functions (bsc#1213970).\n- timers: Use del_timer_sync() even on UP (bsc#1213970).\n- tracing/histograms: Add histograms to hist_vars if they have referenced variables (git-fixes).\n- tracing/histograms: Return an error if we fail to add histogram to hist_vars list (git-fixes).\n- tracing/probes: Fix not to count error code to total length (git-fixes).\n- tracing/probes: Fix to avoid double count of the string length on the array (git-fixes).\n- tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes).\n- tracing/probes: Fix to update dynamic data counter if fetcharg uses it (git-fixes).\n- tracing: Fix cpu buffers unavailable due to \u0027record_disabled\u0027 missed (git-fixes).\n- tracing: Fix memleak due to race between current_tracer and trace (git-fixes).\n- tracing: Fix memory leak of iter-\u003etemp when reading trace_pipe (git-fixes).\n- tracing: Fix null pointer dereference in tracing_err_log_open() (git-fixes).\n- tracing: Fix warning in trace_buffered_event_disable() (git-fixes).\n- tty: fix hang on tty device with no_room set (git-fixes).\n- tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (git-fixes).\n- tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes).\n- tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (git-fixes).\n- tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes).\n- tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (git-fixes).\n- ubifs: Fix memleak when insert_old_idx() failed (git-fixes).\n- usb-storage: alauda: Fix uninit-value in alauda_check_media() (git-fixes).\n- usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (git-fixes).\n- usb: chipidea: imx: do not request QoS for imx8ulp (git-fixes).\n- usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes).\n- usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (git-fixes).\n- usb: dwc3: Fix typos in gadget.c (git-fixes).\n- usb: dwc3: Properly handle processing of pending events (git-fixes).\n- usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes).\n- usb: gadget: Fix the memory leak in raw_gadget driver (git-fixes).\n- usb: gadget: f_mass_storage: Fix unused variable warning (git-fixes).\n- usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (git-fixes).\n- usb: ohci-at91: Fix the unhandle interrupt when resume (git-fixes).\n- usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes).\n- usb: quirks: add quirk for Focusrite Scarlett (git-fixes).\n- usb: serial: option: add Quectel EC200A module support (git-fixes).\n- usb: serial: option: support Quectel EM060K_128 (git-fixes).\n- usb: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes).\n- usb: serial: simple: sort driver entries (git-fixes).\n- usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment (git-fixes).\n- usb: typec: tcpm: Fix response to vsafe0V event (git-fixes).\n- usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes).\n- usb: zaurus: Add ID for A-300/B-500/C-700 (git-fixes).\n- watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (git-fixes).\n- wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes).\n- wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes).\n- wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes).\n- wifi: ath9k: protect WMI command response buffer replacement with a lock (git-fixes).\n- wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes).\n- wifi: cfg80211: Fix return value in scan logic (git-fixes).\n- wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (git-fixes).\n- wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (git-fixes).\n- wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes).\n- wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes).\n- wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes).\n- wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH (git-fixes).\n- wifi: mwifiex: Fix OOB and integer underflow when rx packets (git-fixes).\n- wifi: mwifiex: Fix missed return in oob checks failed path (git-fixes).\n- wifi: mwifiex: avoid possible NULL skb pointer dereference (git-fixes).\n- wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (git-fixes).\n- wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes).\n- wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute (git-fixes).\n- wifi: radiotap: fix kernel-doc notation warnings (git-fixes).\n- wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes).\n- x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes).\n- x86/alternative: Make custom return thunk unconditional (git-fixes).\n- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).\n- x86/cpu: Clean up SRSO return thunk mess (git-fixes).\n- x86/cpu: Cleanup the untrain mess (git-fixes).\n- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).\n- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).\n- x86/cpu: Rename original retbleed methods (git-fixes).\n- x86/cpu: Rename srso_(.*)_alias to srso_alias_\\1 (git-fixes).\n- x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453).\n- x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453).\n- x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453).\n- x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453).\n- x86/hyperv: Reorder code to facilitate future work (bsc#1206453).\n- x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453).\n- x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453).\n- x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes).\n- x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453).\n- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).\n- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes).\n- x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes).\n- x86/speculation: Add cpu_show_gds() prototype (git-fixes).\n- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).\n- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).\n- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).\n- x86/srso: Explain the untraining sequences a bit more (git-fixes).\n- x86/srso: Fix build breakage with the LLVM linker (git-fixes).\n- x86/srso: Fix return thunks in generated code (git-fixes).\n- x86/static_call: Fix __static_call_fixup() (git-fixes).\n- x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453).\n- x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453).\n- x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453).\n- x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453).\n- x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453).\n- xfs: fix sb write verify for lazysbcount (bsc#1214661).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2023-3656,SUSE-SLE-Module-Public-Cloud-15-SP5-2023-3656,openSUSE-SLE-15.5-2023-3656",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_3656-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2023:3656-1",
"url": "https://www.suse.com/support/update/announcement/2023/suse-su-20233656-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2023:3656-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2023-September/031498.html"
},
{
"category": "self",
"summary": "SUSE Bug 1023051",
"url": "https://bugzilla.suse.com/1023051"
},
{
"category": "self",
"summary": "SUSE Bug 1120059",
"url": "https://bugzilla.suse.com/1120059"
},
{
"category": "self",
"summary": "SUSE Bug 1177719",
"url": "https://bugzilla.suse.com/1177719"
},
{
"category": "self",
"summary": "SUSE Bug 1188885",
"url": "https://bugzilla.suse.com/1188885"
},
{
"category": "self",
"summary": "SUSE Bug 1193629",
"url": "https://bugzilla.suse.com/1193629"
},
{
"category": "self",
"summary": "SUSE Bug 1194869",
"url": "https://bugzilla.suse.com/1194869"
},
{
"category": "self",
"summary": "SUSE Bug 1203329",
"url": "https://bugzilla.suse.com/1203329"
},
{
"category": "self",
"summary": "SUSE Bug 1203330",
"url": "https://bugzilla.suse.com/1203330"
},
{
"category": "self",
"summary": "SUSE Bug 1205462",
"url": "https://bugzilla.suse.com/1205462"
},
{
"category": "self",
"summary": "SUSE Bug 1206453",
"url": "https://bugzilla.suse.com/1206453"
},
{
"category": "self",
"summary": "SUSE Bug 1208902",
"url": "https://bugzilla.suse.com/1208902"
},
{
"category": "self",
"summary": "SUSE Bug 1208949",
"url": "https://bugzilla.suse.com/1208949"
},
{
"category": "self",
"summary": "SUSE Bug 1209284",
"url": "https://bugzilla.suse.com/1209284"
},
{
"category": "self",
"summary": "SUSE Bug 1209799",
"url": "https://bugzilla.suse.com/1209799"
},
{
"category": "self",
"summary": "SUSE Bug 1210048",
"url": "https://bugzilla.suse.com/1210048"
},
{
"category": "self",
"summary": "SUSE Bug 1210448",
"url": "https://bugzilla.suse.com/1210448"
},
{
"category": "self",
"summary": "SUSE Bug 1211220",
"url": "https://bugzilla.suse.com/1211220"
},
{
"category": "self",
"summary": "SUSE Bug 1212091",
"url": "https://bugzilla.suse.com/1212091"
},
{
"category": "self",
"summary": "SUSE Bug 1212142",
"url": "https://bugzilla.suse.com/1212142"
},
{
"category": "self",
"summary": "SUSE Bug 1212423",
"url": "https://bugzilla.suse.com/1212423"
},
{
"category": "self",
"summary": "SUSE Bug 1212526",
"url": "https://bugzilla.suse.com/1212526"
},
{
"category": "self",
"summary": "SUSE Bug 1212857",
"url": "https://bugzilla.suse.com/1212857"
},
{
"category": "self",
"summary": "SUSE Bug 1212873",
"url": "https://bugzilla.suse.com/1212873"
},
{
"category": "self",
"summary": "SUSE Bug 1213026",
"url": "https://bugzilla.suse.com/1213026"
},
{
"category": "self",
"summary": "SUSE Bug 1213123",
"url": "https://bugzilla.suse.com/1213123"
},
{
"category": "self",
"summary": "SUSE Bug 1213546",
"url": "https://bugzilla.suse.com/1213546"
},
{
"category": "self",
"summary": "SUSE Bug 1213580",
"url": "https://bugzilla.suse.com/1213580"
},
{
"category": "self",
"summary": "SUSE Bug 1213601",
"url": "https://bugzilla.suse.com/1213601"
},
{
"category": "self",
"summary": "SUSE Bug 1213666",
"url": "https://bugzilla.suse.com/1213666"
},
{
"category": "self",
"summary": "SUSE Bug 1213733",
"url": "https://bugzilla.suse.com/1213733"
},
{
"category": "self",
"summary": "SUSE Bug 1213757",
"url": "https://bugzilla.suse.com/1213757"
},
{
"category": "self",
"summary": "SUSE Bug 1213759",
"url": "https://bugzilla.suse.com/1213759"
},
{
"category": "self",
"summary": "SUSE Bug 1213916",
"url": "https://bugzilla.suse.com/1213916"
},
{
"category": "self",
"summary": "SUSE Bug 1213921",
"url": "https://bugzilla.suse.com/1213921"
},
{
"category": "self",
"summary": "SUSE Bug 1213927",
"url": "https://bugzilla.suse.com/1213927"
},
{
"category": "self",
"summary": "SUSE Bug 1213946",
"url": "https://bugzilla.suse.com/1213946"
},
{
"category": "self",
"summary": "SUSE Bug 1213949",
"url": "https://bugzilla.suse.com/1213949"
},
{
"category": "self",
"summary": "SUSE Bug 1213968",
"url": "https://bugzilla.suse.com/1213968"
},
{
"category": "self",
"summary": "SUSE Bug 1213970",
"url": "https://bugzilla.suse.com/1213970"
},
{
"category": "self",
"summary": "SUSE Bug 1213971",
"url": "https://bugzilla.suse.com/1213971"
},
{
"category": "self",
"summary": "SUSE Bug 1214000",
"url": "https://bugzilla.suse.com/1214000"
},
{
"category": "self",
"summary": "SUSE Bug 1214019",
"url": "https://bugzilla.suse.com/1214019"
},
{
"category": "self",
"summary": "SUSE Bug 1214073",
"url": "https://bugzilla.suse.com/1214073"
},
{
"category": "self",
"summary": "SUSE Bug 1214120",
"url": "https://bugzilla.suse.com/1214120"
},
{
"category": "self",
"summary": "SUSE Bug 1214149",
"url": "https://bugzilla.suse.com/1214149"
},
{
"category": "self",
"summary": "SUSE Bug 1214180",
"url": "https://bugzilla.suse.com/1214180"
},
{
"category": "self",
"summary": "SUSE Bug 1214233",
"url": "https://bugzilla.suse.com/1214233"
},
{
"category": "self",
"summary": "SUSE Bug 1214238",
"url": "https://bugzilla.suse.com/1214238"
},
{
"category": "self",
"summary": "SUSE Bug 1214285",
"url": "https://bugzilla.suse.com/1214285"
},
{
"category": "self",
"summary": "SUSE Bug 1214297",
"url": "https://bugzilla.suse.com/1214297"
},
{
"category": "self",
"summary": "SUSE Bug 1214299",
"url": "https://bugzilla.suse.com/1214299"
},
{
"category": "self",
"summary": "SUSE Bug 1214305",
"url": "https://bugzilla.suse.com/1214305"
},
{
"category": "self",
"summary": "SUSE Bug 1214350",
"url": "https://bugzilla.suse.com/1214350"
},
{
"category": "self",
"summary": "SUSE Bug 1214368",
"url": "https://bugzilla.suse.com/1214368"
},
{
"category": "self",
"summary": "SUSE Bug 1214370",
"url": "https://bugzilla.suse.com/1214370"
},
{
"category": "self",
"summary": "SUSE Bug 1214371",
"url": "https://bugzilla.suse.com/1214371"
},
{
"category": "self",
"summary": "SUSE Bug 1214372",
"url": "https://bugzilla.suse.com/1214372"
},
{
"category": "self",
"summary": "SUSE Bug 1214380",
"url": "https://bugzilla.suse.com/1214380"
},
{
"category": "self",
"summary": "SUSE Bug 1214386",
"url": "https://bugzilla.suse.com/1214386"
},
{
"category": "self",
"summary": "SUSE Bug 1214392",
"url": "https://bugzilla.suse.com/1214392"
},
{
"category": "self",
"summary": "SUSE Bug 1214393",
"url": "https://bugzilla.suse.com/1214393"
},
{
"category": "self",
"summary": "SUSE Bug 1214397",
"url": "https://bugzilla.suse.com/1214397"
},
{
"category": "self",
"summary": "SUSE Bug 1214404",
"url": "https://bugzilla.suse.com/1214404"
},
{
"category": "self",
"summary": "SUSE Bug 1214428",
"url": "https://bugzilla.suse.com/1214428"
},
{
"category": "self",
"summary": "SUSE Bug 1214451",
"url": "https://bugzilla.suse.com/1214451"
},
{
"category": "self",
"summary": "SUSE Bug 1214659",
"url": "https://bugzilla.suse.com/1214659"
},
{
"category": "self",
"summary": "SUSE Bug 1214661",
"url": "https://bugzilla.suse.com/1214661"
},
{
"category": "self",
"summary": "SUSE Bug 1214727",
"url": "https://bugzilla.suse.com/1214727"
},
{
"category": "self",
"summary": "SUSE Bug 1214729",
"url": "https://bugzilla.suse.com/1214729"
},
{
"category": "self",
"summary": "SUSE Bug 1214742",
"url": "https://bugzilla.suse.com/1214742"
},
{
"category": "self",
"summary": "SUSE Bug 1214743",
"url": "https://bugzilla.suse.com/1214743"
},
{
"category": "self",
"summary": "SUSE Bug 1214756",
"url": "https://bugzilla.suse.com/1214756"
},
{
"category": "self",
"summary": "SUSE Bug 1214760",
"url": "https://bugzilla.suse.com/1214760"
},
{
"category": "self",
"summary": "SUSE Bug 1214976",
"url": "https://bugzilla.suse.com/1214976"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-38457 page",
"url": "https://www.suse.com/security/cve/CVE-2022-38457/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-40133 page",
"url": "https://www.suse.com/security/cve/CVE-2022-40133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2007 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2007/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-20588 page",
"url": "https://www.suse.com/security/cve/CVE-2023-20588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-34319 page",
"url": "https://www.suse.com/security/cve/CVE-2023-34319/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-3610 page",
"url": "https://www.suse.com/security/cve/CVE-2023-3610/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-37453 page",
"url": "https://www.suse.com/security/cve/CVE-2023-37453/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-3772 page",
"url": "https://www.suse.com/security/cve/CVE-2023-3772/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-3863 page",
"url": "https://www.suse.com/security/cve/CVE-2023-3863/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-40283 page",
"url": "https://www.suse.com/security/cve/CVE-2023-40283/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4128 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4128/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4133 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4133/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4134 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4147 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4147/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4194 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4194/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4273 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4273/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4387 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4387/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4459 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4459/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4563 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4563/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4569 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4569/"
}
],
"title": "Security update for the Linux Kernel",
"tracking": {
"current_release_date": "2023-09-18T15:36:40Z",
"generator": {
"date": "2023-09-18T15:36:40Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2023:3656-1",
"initial_release_date": "2023-09-18T15:36:40Z",
"revision_history": [
{
"date": "2023-09-18T15:36:40Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"product": {
"name": "cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"product_id": "cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64"
}
},
{
"category": "product_version",
"name": "dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"product": {
"name": "dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"product_id": "dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64"
}
},
{
"category": "product_version",
"name": "gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"product": {
"name": "gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"product_id": "gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-azure-5.14.21-150500.33.17.1.aarch64",
"product": {
"name": "kernel-azure-5.14.21-150500.33.17.1.aarch64",
"product_id": "kernel-azure-5.14.21-150500.33.17.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"product": {
"name": "kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"product_id": "kernel-azure-devel-5.14.21-150500.33.17.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"product": {
"name": "kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"product_id": "kernel-azure-extra-5.14.21-150500.33.17.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"product": {
"name": "kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"product_id": "kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"product": {
"name": "kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"product_id": "kernel-azure-optional-5.14.21-150500.33.17.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"product": {
"name": "kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"product_id": "kernel-syms-azure-5.14.21-150500.33.17.1.aarch64"
}
},
{
"category": "product_version",
"name": "kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"product": {
"name": "kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"product_id": "kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64"
}
},
{
"category": "product_version",
"name": "ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"product": {
"name": "ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"product_id": "ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64"
}
},
{
"category": "product_version",
"name": "reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"product": {
"name": "reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"product_id": "reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"product": {
"name": "kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"product_id": "kernel-devel-azure-5.14.21-150500.33.17.1.noarch"
}
},
{
"category": "product_version",
"name": "kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"product": {
"name": "kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"product_id": "kernel-source-azure-5.14.21-150500.33.17.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"product": {
"name": "cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"product_id": "cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64"
}
},
{
"category": "product_version",
"name": "dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"product": {
"name": "dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"product_id": "dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64"
}
},
{
"category": "product_version",
"name": "gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"product": {
"name": "gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"product_id": "gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-azure-5.14.21-150500.33.17.1.x86_64",
"product": {
"name": "kernel-azure-5.14.21-150500.33.17.1.x86_64",
"product_id": "kernel-azure-5.14.21-150500.33.17.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"product": {
"name": "kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"product_id": "kernel-azure-devel-5.14.21-150500.33.17.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"product": {
"name": "kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"product_id": "kernel-azure-extra-5.14.21-150500.33.17.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"product": {
"name": "kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"product_id": "kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"product": {
"name": "kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"product_id": "kernel-azure-optional-5.14.21-150500.33.17.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"product": {
"name": "kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"product_id": "kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"product": {
"name": "kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"product_id": "kernel-syms-azure-5.14.21-150500.33.17.1.x86_64"
}
},
{
"category": "product_version",
"name": "kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"product": {
"name": "kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"product_id": "kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64"
}
},
{
"category": "product_version",
"name": "ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"product": {
"name": "ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"product_id": "ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64"
}
},
{
"category": "product_version",
"name": "reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"product": {
"name": "reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"product_id": "reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Public Cloud 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Module for Public Cloud 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-public-cloud:15:sp5"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.5",
"product": {
"name": "openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-5.14.21-150500.33.17.1.aarch64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64"
},
"product_reference": "kernel-azure-5.14.21-150500.33.17.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-5.14.21-150500.33.17.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64"
},
"product_reference": "kernel-azure-5.14.21-150500.33.17.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64"
},
"product_reference": "kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64"
},
"product_reference": "kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-azure-5.14.21-150500.33.17.1.noarch as component of SUSE Linux Enterprise Module for Public Cloud 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch"
},
"product_reference": "kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-azure-5.14.21-150500.33.17.1.noarch as component of SUSE Linux Enterprise Module for Public Cloud 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch"
},
"product_reference": "kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64"
},
"product_reference": "kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP5",
"product_id": "SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64"
},
"product_reference": "kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Public Cloud 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64"
},
"product_reference": "cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64"
},
"product_reference": "cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64"
},
"product_reference": "dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64"
},
"product_reference": "dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64"
},
"product_reference": "gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64"
},
"product_reference": "gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-5.14.21-150500.33.17.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64"
},
"product_reference": "kernel-azure-5.14.21-150500.33.17.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-5.14.21-150500.33.17.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64"
},
"product_reference": "kernel-azure-5.14.21-150500.33.17.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-devel-5.14.21-150500.33.17.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64"
},
"product_reference": "kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-devel-5.14.21-150500.33.17.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64"
},
"product_reference": "kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-extra-5.14.21-150500.33.17.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64"
},
"product_reference": "kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-extra-5.14.21-150500.33.17.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64"
},
"product_reference": "kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64"
},
"product_reference": "kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64"
},
"product_reference": "kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-optional-5.14.21-150500.33.17.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64"
},
"product_reference": "kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-optional-5.14.21-150500.33.17.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64"
},
"product_reference": "kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64"
},
"product_reference": "kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-azure-5.14.21-150500.33.17.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch"
},
"product_reference": "kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-azure-5.14.21-150500.33.17.1.noarch as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch"
},
"product_reference": "kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-azure-5.14.21-150500.33.17.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64"
},
"product_reference": "kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-azure-5.14.21-150500.33.17.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64"
},
"product_reference": "kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64"
},
"product_reference": "kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64"
},
"product_reference": "kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64"
},
"product_reference": "ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64"
},
"product_reference": "ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64"
},
"product_reference": "reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
},
"product_reference": "reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-38457",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-38457"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free(UAF) vulnerability was found in function \u0027vmw_cmd_res_check\u0027 in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel\u0027s vmwgfx driver with device file \u0027/dev/dri/renderD128 (or Dxxx)\u0027. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-38457",
"url": "https://www.suse.com/security/cve/CVE-2022-38457"
},
{
"category": "external",
"summary": "SUSE Bug 1203330 for CVE-2022-38457",
"url": "https://bugzilla.suse.com/1203330"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-18T15:36:40Z",
"details": "moderate"
}
],
"title": "CVE-2022-38457"
},
{
"cve": "CVE-2022-40133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-40133"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free(UAF) vulnerability was found in function \u0027vmw_execbuf_tie_context\u0027 in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in Linux kernel\u0027s vmwgfx driver with device file \u0027/dev/dri/renderD128 (or Dxxx)\u0027. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-40133",
"url": "https://www.suse.com/security/cve/CVE-2022-40133"
},
{
"category": "external",
"summary": "SUSE Bug 1203329 for CVE-2022-40133",
"url": "https://bugzilla.suse.com/1203329"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-18T15:36:40Z",
"details": "moderate"
}
],
"title": "CVE-2022-40133"
},
{
"cve": "CVE-2023-2007",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2007"
}
],
"notes": [
{
"category": "general",
"text": "The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2007",
"url": "https://www.suse.com/security/cve/CVE-2023-2007"
},
{
"category": "external",
"summary": "SUSE Bug 1210448 for CVE-2023-2007",
"url": "https://bugzilla.suse.com/1210448"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-18T15:36:40Z",
"details": "moderate"
}
],
"title": "CVE-2023-2007"
},
{
"cve": "CVE-2023-20588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-20588"
}
],
"notes": [
{
"category": "general",
"text": "\nA division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. \n\n\n\n\n\n\n\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-20588",
"url": "https://www.suse.com/security/cve/CVE-2023-20588"
},
{
"category": "external",
"summary": "SUSE Bug 1213927 for CVE-2023-20588",
"url": "https://bugzilla.suse.com/1213927"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-18T15:36:40Z",
"details": "moderate"
}
],
"title": "CVE-2023-20588"
},
{
"cve": "CVE-2023-34319",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-34319"
}
],
"notes": [
{
"category": "general",
"text": "The fix for XSA-423 added logic to Linux\u0027es netback driver to deal with\na frontend splitting a packet in a way such that not all of the headers\nwould come in one piece. Unfortunately the logic introduced there\ndidn\u0027t account for the extreme case of the entire packet being split\ninto as many pieces as permitted by the protocol, yet still being\nsmaller than the area that\u0027s specially dealt with to keep all (possible)\nheaders together. Such an unusual packet would therefore trigger a\nbuffer overrun in the driver.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-34319",
"url": "https://www.suse.com/security/cve/CVE-2023-34319"
},
{
"category": "external",
"summary": "SUSE Bug 1213546 for CVE-2023-34319",
"url": "https://bugzilla.suse.com/1213546"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-18T15:36:40Z",
"details": "moderate"
}
],
"title": "CVE-2023-34319"
},
{
"cve": "CVE-2023-3610",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-3610"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability in the Linux kernel\u0027s netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\nFlaw in the error handling of bound chains causes a use-after-free in the abort path of NFT_MSG_NEWRULE. The vulnerability requires CAP_NET_ADMIN to be triggered.\n\nWe recommend upgrading past commit 4bedf9eee016286c835e3d8fa981ddece5338795.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-3610",
"url": "https://www.suse.com/security/cve/CVE-2023-3610"
},
{
"category": "external",
"summary": "SUSE Bug 1213580 for CVE-2023-3610",
"url": "https://bugzilla.suse.com/1213580"
},
{
"category": "external",
"summary": "SUSE Bug 1213584 for CVE-2023-3610",
"url": "https://bugzilla.suse.com/1213584"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-18T15:36:40Z",
"details": "important"
}
],
"title": "CVE-2023-3610"
},
{
"cve": "CVE-2023-37453",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-37453"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-37453",
"url": "https://www.suse.com/security/cve/CVE-2023-37453"
},
{
"category": "external",
"summary": "SUSE Bug 1213123 for CVE-2023-37453",
"url": "https://bugzilla.suse.com/1213123"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-18T15:36:40Z",
"details": "moderate"
}
],
"title": "CVE-2023-37453"
},
{
"cve": "CVE-2023-3772",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-3772"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-3772",
"url": "https://www.suse.com/security/cve/CVE-2023-3772"
},
{
"category": "external",
"summary": "SUSE Bug 1213666 for CVE-2023-3772",
"url": "https://bugzilla.suse.com/1213666"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-18T15:36:40Z",
"details": "moderate"
}
],
"title": "CVE-2023-3772"
},
{
"cve": "CVE-2023-3863",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-3863"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-3863",
"url": "https://www.suse.com/security/cve/CVE-2023-3863"
},
{
"category": "external",
"summary": "SUSE Bug 1213601 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1213601"
},
{
"category": "external",
"summary": "SUSE Bug 1213603 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1213603"
},
{
"category": "external",
"summary": "SUSE Bug 1217444 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1217444"
},
{
"category": "external",
"summary": "SUSE Bug 1217531 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1217531"
},
{
"category": "external",
"summary": "SUSE Bug 1219704 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1219704"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-18T15:36:40Z",
"details": "moderate"
}
],
"title": "CVE-2023-3863"
},
{
"cve": "CVE-2023-40283",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-40283"
}
],
"notes": [
{
"category": "general",
"text": "An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children of an sk are mishandled.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-40283",
"url": "https://www.suse.com/security/cve/CVE-2023-40283"
},
{
"category": "external",
"summary": "SUSE Bug 1214233 for CVE-2023-40283",
"url": "https://bugzilla.suse.com/1214233"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-18T15:36:40Z",
"details": "moderate"
}
],
"title": "CVE-2023-40283"
},
{
"cve": "CVE-2023-4128",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4128"
}
],
"notes": [
{
"category": "general",
"text": "** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Reason: This record is a duplicate of CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Notes: All CVE users should reference CVE-2023-4206, CVE-2023-4207, CVE-2023-4208 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4128",
"url": "https://www.suse.com/security/cve/CVE-2023-4128"
},
{
"category": "external",
"summary": "SUSE Bug 1214149 for CVE-2023-4128",
"url": "https://bugzilla.suse.com/1214149"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-18T15:36:40Z",
"details": "important"
}
],
"title": "CVE-2023-4128"
},
{
"cve": "CVE-2023-4133",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4133"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability was found in the cxgb4 driver in the Linux kernel. The bug occurs when the cxgb4 device is detaching due to a possible rearming of the flower_stats_timer from the work queue. This flaw allows a local user to crash the system, causing a denial of service condition.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4133",
"url": "https://www.suse.com/security/cve/CVE-2023-4133"
},
{
"category": "external",
"summary": "SUSE Bug 1213970 for CVE-2023-4133",
"url": "https://bugzilla.suse.com/1213970"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-18T15:36:40Z",
"details": "moderate"
}
],
"title": "CVE-2023-4133"
},
{
"cve": "CVE-2023-4134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4134"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel. This issue occurs in the device cleanup routine due to a possible rearming of the watchdog_timer from the workqueue. This could allow a local user to crash the system, causing a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4134",
"url": "https://www.suse.com/security/cve/CVE-2023-4134"
},
{
"category": "external",
"summary": "SUSE Bug 1213971 for CVE-2023-4134",
"url": "https://bugzilla.suse.com/1213971"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-18T15:36:40Z",
"details": "moderate"
}
],
"title": "CVE-2023-4134"
},
{
"cve": "CVE-2023-4147",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4147"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free flaw was found in the Linux kernel\u0027s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to crash or escalate their privileges on the system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4147",
"url": "https://www.suse.com/security/cve/CVE-2023-4147"
},
{
"category": "external",
"summary": "SUSE Bug 1213968 for CVE-2023-4147",
"url": "https://bugzilla.suse.com/1213968"
},
{
"category": "external",
"summary": "SUSE Bug 1215118 for CVE-2023-4147",
"url": "https://bugzilla.suse.com/1215118"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-18T15:36:40Z",
"details": "important"
}
],
"title": "CVE-2023-4147"
},
{
"cve": "CVE-2023-4194",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4194"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits - a096ccca6e50 (\"tun: tun_chr_open(): correctly initialize socket uid\"), - 66b2c338adce (\"tap: tap_open(): correctly initialize socket uid\"), pass \"inode-\u003ei_uid\" to sock_init_data_uid() as the last parameter and that turns out to not be accurate.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4194",
"url": "https://www.suse.com/security/cve/CVE-2023-4194"
},
{
"category": "external",
"summary": "SUSE Bug 1214019 for CVE-2023-4194",
"url": "https://bugzilla.suse.com/1214019"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-18T15:36:40Z",
"details": "moderate"
}
],
"title": "CVE-2023-4194"
},
{
"cve": "CVE-2023-4273",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4273"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the exFAT driver of the Linux kernel. The vulnerability exists in the implementation of the file name reconstruction function, which is responsible for reading file name entries from a directory index and merging file name parts belonging to one file into a single long file name. Since the file name characters are copied into a stack variable, a local privileged attacker could use this flaw to overflow the kernel stack.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4273",
"url": "https://www.suse.com/security/cve/CVE-2023-4273"
},
{
"category": "external",
"summary": "SUSE Bug 1214120 for CVE-2023-4273",
"url": "https://bugzilla.suse.com/1214120"
},
{
"category": "external",
"summary": "SUSE Bug 1214123 for CVE-2023-4273",
"url": "https://bugzilla.suse.com/1214123"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-18T15:36:40Z",
"details": "important"
}
],
"title": "CVE-2023-4273"
},
{
"cve": "CVE-2023-4387",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4387"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware\u0027s vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash the system due to a double-free while cleaning up vmxnet3_rq_cleanup_all, which could also lead to a kernel information leak problem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4387",
"url": "https://www.suse.com/security/cve/CVE-2023-4387"
},
{
"category": "external",
"summary": "SUSE Bug 1214350 for CVE-2023-4387",
"url": "https://bugzilla.suse.com/1214350"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-18T15:36:40Z",
"details": "moderate"
}
],
"title": "CVE-2023-4387"
},
{
"cve": "CVE-2023-4459",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4459"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during cleanup.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4459",
"url": "https://www.suse.com/security/cve/CVE-2023-4459"
},
{
"category": "external",
"summary": "SUSE Bug 1214451 for CVE-2023-4459",
"url": "https://bugzilla.suse.com/1214451"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-18T15:36:40Z",
"details": "moderate"
}
],
"title": "CVE-2023-4459"
},
{
"cve": "CVE-2023-4563",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4563"
}
],
"notes": [
{
"category": "general",
"text": "This was assigned as a duplicate of CVE-2023-4244.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4563",
"url": "https://www.suse.com/security/cve/CVE-2023-4563"
},
{
"category": "external",
"summary": "SUSE Bug 1214727 for CVE-2023-4563",
"url": "https://bugzilla.suse.com/1214727"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 0,
"baseSeverity": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-18T15:36:40Z",
"details": "moderate"
}
],
"title": "CVE-2023-4563"
},
{
"cve": "CVE-2023-4569",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4569"
}
],
"notes": [
{
"category": "general",
"text": "A memory leak flaw was found in nft_set_catchall_flush in net/netfilter/nf_tables_api.c in the Linux Kernel. This issue may allow a local attacker to cause double-deactivations of catchall elements, which can result in a memory leak.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4569",
"url": "https://www.suse.com/security/cve/CVE-2023-4569"
},
{
"category": "external",
"summary": "SUSE Bug 1214729 for CVE-2023-4569",
"url": "https://bugzilla.suse.com/1214729"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.17.1.noarch",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.17.1.x86_64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.aarch64",
"openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.17.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-18T15:36:40Z",
"details": "important"
}
],
"title": "CVE-2023-4569"
}
]
}
SUSE-SU-2023:3680-1
Vulnerability from csaf_suse - Published: 2023-09-19 15:00 - Updated: 2023-09-19 15:00Summary
Security update for the Linux Kernel
Severity
Important
Notes
Title of the patch: Security update for the Linux Kernel
Description of the patch:
The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
- CVE-2022-36402: Fixed an integer overflow vulnerability in vmwgfx driver in that allowed a local attacker with a user account on the system to gain privilege, causing a denial of service (bsc#1203517).
- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).
- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).
- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).
- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).
- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).
- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).
- CVE-2023-4132: Fixed use-after-free vulnerability was found in the siano smsusb module that allowed a local user to crash the system, causing a denial of service condition (bsc#1213969).
- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).
- CVE-2023-4385: Fixed a NULL pointer dereference flaw in dbFree that may have allowed a local attacker to crash the system due to a missing sanity check (bsc#1214348).
- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).
- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).
The following non-security bugs were fixed:
- kabi/severities: Ignore newly added SRSO mitigation functions
- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).
- x86/cpu: Cleanup the untrain mess (git-fixes).
- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).
- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).
- x86/cpu: Rename original retbleed methods (git-fixes).
- x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes).
- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).
- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes).
- x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes).
- x86/speculation: Add cpu_show_gds() prototype (git-fixes).
- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).
- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).
- x86/srso: Explain the untraining sequences a bit more (git-fixes).
- x86/srso: Fix build breakage with the LLVM linker (git-fixes).
- x86: Move gds_ucode_mitigated() declaration to header (git-fixes).
Patchnames: SUSE-2023-3680,SUSE-SLE-Module-Live-Patching-15-SP1-2023-3680,SUSE-SLE-Product-HA-15-SP1-2023-3680,SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-3680,SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-3680,SUSE-SLE-Product-SLES_SAP-15-SP1-2023-3680,openSUSE-SLE-15.4-2023-3680,openSUSE-SLE-15.5-2023-3680
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
5.5 (Medium)
Affected products
Recommended
118 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.4 (Medium)
Affected products
Recommended
118 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6 (Medium)
Affected products
Recommended
118 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
118 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
118 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.4 (Medium)
Affected products
Recommended
118 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
118 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.2 (Medium)
Affected products
Recommended
118 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
4.1 (Medium)
Affected products
Recommended
118 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.5 (Medium)
Affected products
Recommended
118 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.6 (Medium)
Affected products
Recommended
118 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
118 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
60 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for the Linux Kernel",
"title": "Title of the patch"
},
{
"category": "description",
"text": "\n\nThe SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2022-36402: Fixed an integer overflow vulnerability in vmwgfx driver in that allowed a local attacker with a user account on the system to gain privilege, causing a denial of service (bsc#1203517).\n- CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448).\n- CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927).\n- CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666).\n- CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).\n- CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601).\n- CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149).\n- CVE-2023-4132: Fixed use-after-free vulnerability was found in the siano smsusb module that allowed a local user to crash the system, causing a denial of service condition (bsc#1213969).\n- CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971).\n- CVE-2023-4385: Fixed a NULL pointer dereference flaw in dbFree that may have allowed a local attacker to crash the system due to a missing sanity check (bsc#1214348).\n- CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350).\n- CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451).\n\nThe following non-security bugs were fixed:\n\n- kabi/severities: Ignore newly added SRSO mitigation functions\n- x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes).\n- x86/cpu: Cleanup the untrain mess (git-fixes).\n- x86/cpu: Fix __x86_return_thunk symbol type (git-fixes).\n- x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes).\n- x86/cpu: Rename original retbleed methods (git-fixes).\n- x86/cpu: Rename srso_(.*)_alias to srso_alias_\\1 (git-fixes).\n- x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes).\n- x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes).\n- x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes).\n- x86/speculation: Add cpu_show_gds() prototype (git-fixes).\n- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).\n- x86/srso: Correct the mitigation status when SMT is disabled (git-fixes).\n- x86/srso: Disable the mitigation on unaffected configurations (git-fixes).\n- x86/srso: Explain the untraining sequences a bit more (git-fixes).\n- x86/srso: Fix build breakage with the LLVM linker (git-fixes).\n- x86: Move gds_ucode_mitigated() declaration to header (git-fixes).\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2023-3680,SUSE-SLE-Module-Live-Patching-15-SP1-2023-3680,SUSE-SLE-Product-HA-15-SP1-2023-3680,SUSE-SLE-Product-HPC-15-SP1-LTSS-2023-3680,SUSE-SLE-Product-SLES-15-SP1-LTSS-2023-3680,SUSE-SLE-Product-SLES_SAP-15-SP1-2023-3680,openSUSE-SLE-15.4-2023-3680,openSUSE-SLE-15.5-2023-3680",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_3680-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2023:3680-1",
"url": "https://www.suse.com/support/update/announcement/2023/suse-su-20233680-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2023:3680-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-September/016208.html"
},
{
"category": "self",
"summary": "SUSE Bug 1203517",
"url": "https://bugzilla.suse.com/1203517"
},
{
"category": "self",
"summary": "SUSE Bug 1210448",
"url": "https://bugzilla.suse.com/1210448"
},
{
"category": "self",
"summary": "SUSE Bug 1213543",
"url": "https://bugzilla.suse.com/1213543"
},
{
"category": "self",
"summary": "SUSE Bug 1213601",
"url": "https://bugzilla.suse.com/1213601"
},
{
"category": "self",
"summary": "SUSE Bug 1213666",
"url": "https://bugzilla.suse.com/1213666"
},
{
"category": "self",
"summary": "SUSE Bug 1213927",
"url": "https://bugzilla.suse.com/1213927"
},
{
"category": "self",
"summary": "SUSE Bug 1213969",
"url": "https://bugzilla.suse.com/1213969"
},
{
"category": "self",
"summary": "SUSE Bug 1213971",
"url": "https://bugzilla.suse.com/1213971"
},
{
"category": "self",
"summary": "SUSE Bug 1214149",
"url": "https://bugzilla.suse.com/1214149"
},
{
"category": "self",
"summary": "SUSE Bug 1214348",
"url": "https://bugzilla.suse.com/1214348"
},
{
"category": "self",
"summary": "SUSE Bug 1214350",
"url": "https://bugzilla.suse.com/1214350"
},
{
"category": "self",
"summary": "SUSE Bug 1214451",
"url": "https://bugzilla.suse.com/1214451"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2022-36402 page",
"url": "https://www.suse.com/security/cve/CVE-2022-36402/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2007 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2007/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-20588 page",
"url": "https://www.suse.com/security/cve/CVE-2023-20588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-3772 page",
"url": "https://www.suse.com/security/cve/CVE-2023-3772/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-3812 page",
"url": "https://www.suse.com/security/cve/CVE-2023-3812/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-3863 page",
"url": "https://www.suse.com/security/cve/CVE-2023-3863/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4128 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4128/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4132 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4132/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4134 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4134/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4385 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4385/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4387 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4387/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4459 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4459/"
}
],
"title": "Security update for the Linux Kernel",
"tracking": {
"current_release_date": "2023-09-19T15:00:28Z",
"generator": {
"date": "2023-09-19T15:00:28Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2023:3680-1",
"initial_release_date": "2023-09-19T15:00:28Z",
"revision_history": [
{
"date": "2023-09-19T15:00:28Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"product": {
"name": "cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"product_id": "cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64"
}
},
{
"category": "product_version",
"name": "dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"product": {
"name": "dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"product_id": "dlm-kmp-default-4.12.14-150100.197.157.1.aarch64"
}
},
{
"category": "product_version",
"name": "gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"product": {
"name": "gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"product_id": "gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-default-4.12.14-150100.197.157.1.aarch64",
"product": {
"name": "kernel-default-4.12.14-150100.197.157.1.aarch64",
"product_id": "kernel-default-4.12.14-150100.197.157.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"product": {
"name": "kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"product_id": "kernel-default-base-4.12.14-150100.197.157.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"product": {
"name": "kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"product_id": "kernel-default-devel-4.12.14-150100.197.157.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-default-extra-4.12.14-150100.197.157.1.aarch64",
"product": {
"name": "kernel-default-extra-4.12.14-150100.197.157.1.aarch64",
"product_id": "kernel-default-extra-4.12.14-150100.197.157.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-default-livepatch-4.12.14-150100.197.157.1.aarch64",
"product": {
"name": "kernel-default-livepatch-4.12.14-150100.197.157.1.aarch64",
"product_id": "kernel-default-livepatch-4.12.14-150100.197.157.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-default-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"product": {
"name": "kernel-default-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"product_id": "kernel-default-livepatch-devel-4.12.14-150100.197.157.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"product": {
"name": "kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"product_id": "kernel-obs-build-4.12.14-150100.197.157.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-obs-qa-4.12.14-150100.197.157.1.aarch64",
"product": {
"name": "kernel-obs-qa-4.12.14-150100.197.157.1.aarch64",
"product_id": "kernel-obs-qa-4.12.14-150100.197.157.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-syms-4.12.14-150100.197.157.1.aarch64",
"product": {
"name": "kernel-syms-4.12.14-150100.197.157.1.aarch64",
"product_id": "kernel-syms-4.12.14-150100.197.157.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"product": {
"name": "kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"product_id": "kernel-vanilla-4.12.14-150100.197.157.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"product": {
"name": "kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"product_id": "kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"product": {
"name": "kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"product_id": "kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"product": {
"name": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"product_id": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64"
}
},
{
"category": "product_version",
"name": "kselftests-kmp-default-4.12.14-150100.197.157.1.aarch64",
"product": {
"name": "kselftests-kmp-default-4.12.14-150100.197.157.1.aarch64",
"product_id": "kselftests-kmp-default-4.12.14-150100.197.157.1.aarch64"
}
},
{
"category": "product_version",
"name": "ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"product": {
"name": "ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"product_id": "ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64"
}
},
{
"category": "product_version",
"name": "reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"product": {
"name": "reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"product_id": "reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "kernel-devel-4.12.14-150100.197.157.1.noarch",
"product": {
"name": "kernel-devel-4.12.14-150100.197.157.1.noarch",
"product_id": "kernel-devel-4.12.14-150100.197.157.1.noarch"
}
},
{
"category": "product_version",
"name": "kernel-docs-4.12.14-150100.197.157.1.noarch",
"product": {
"name": "kernel-docs-4.12.14-150100.197.157.1.noarch",
"product_id": "kernel-docs-4.12.14-150100.197.157.1.noarch"
}
},
{
"category": "product_version",
"name": "kernel-docs-html-4.12.14-150100.197.157.1.noarch",
"product": {
"name": "kernel-docs-html-4.12.14-150100.197.157.1.noarch",
"product_id": "kernel-docs-html-4.12.14-150100.197.157.1.noarch"
}
},
{
"category": "product_version",
"name": "kernel-macros-4.12.14-150100.197.157.1.noarch",
"product": {
"name": "kernel-macros-4.12.14-150100.197.157.1.noarch",
"product_id": "kernel-macros-4.12.14-150100.197.157.1.noarch"
}
},
{
"category": "product_version",
"name": "kernel-source-4.12.14-150100.197.157.1.noarch",
"product": {
"name": "kernel-source-4.12.14-150100.197.157.1.noarch",
"product_id": "kernel-source-4.12.14-150100.197.157.1.noarch"
}
},
{
"category": "product_version",
"name": "kernel-source-vanilla-4.12.14-150100.197.157.1.noarch",
"product": {
"name": "kernel-source-vanilla-4.12.14-150100.197.157.1.noarch",
"product_id": "kernel-source-vanilla-4.12.14-150100.197.157.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"product": {
"name": "cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"product_id": "cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le"
}
},
{
"category": "product_version",
"name": "dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"product": {
"name": "dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"product_id": "dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le"
}
},
{
"category": "product_version",
"name": "gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"product": {
"name": "gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"product_id": "gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-debug-4.12.14-150100.197.157.1.ppc64le",
"product": {
"name": "kernel-debug-4.12.14-150100.197.157.1.ppc64le",
"product_id": "kernel-debug-4.12.14-150100.197.157.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"product": {
"name": "kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"product_id": "kernel-debug-base-4.12.14-150100.197.157.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-4.12.14-150100.197.157.1.ppc64le",
"product": {
"name": "kernel-debug-devel-4.12.14-150100.197.157.1.ppc64le",
"product_id": "kernel-debug-devel-4.12.14-150100.197.157.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-debug-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"product": {
"name": "kernel-debug-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"product_id": "kernel-debug-livepatch-devel-4.12.14-150100.197.157.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-default-4.12.14-150100.197.157.1.ppc64le",
"product": {
"name": "kernel-default-4.12.14-150100.197.157.1.ppc64le",
"product_id": "kernel-default-4.12.14-150100.197.157.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"product": {
"name": "kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"product_id": "kernel-default-base-4.12.14-150100.197.157.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"product": {
"name": "kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"product_id": "kernel-default-devel-4.12.14-150100.197.157.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-default-extra-4.12.14-150100.197.157.1.ppc64le",
"product": {
"name": "kernel-default-extra-4.12.14-150100.197.157.1.ppc64le",
"product_id": "kernel-default-extra-4.12.14-150100.197.157.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"product": {
"name": "kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"product_id": "kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"product": {
"name": "kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"product_id": "kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"product": {
"name": "kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"product_id": "kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"product": {
"name": "kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"product_id": "kernel-obs-build-4.12.14-150100.197.157.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-obs-qa-4.12.14-150100.197.157.1.ppc64le",
"product": {
"name": "kernel-obs-qa-4.12.14-150100.197.157.1.ppc64le",
"product_id": "kernel-obs-qa-4.12.14-150100.197.157.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"product": {
"name": "kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"product_id": "kernel-syms-4.12.14-150100.197.157.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"product": {
"name": "kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"product_id": "kernel-vanilla-4.12.14-150100.197.157.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"product": {
"name": "kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"product_id": "kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"product": {
"name": "kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"product_id": "kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"product": {
"name": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"product_id": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le"
}
},
{
"category": "product_version",
"name": "kselftests-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"product": {
"name": "kselftests-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"product_id": "kselftests-kmp-default-4.12.14-150100.197.157.1.ppc64le"
}
},
{
"category": "product_version",
"name": "ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"product": {
"name": "ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"product_id": "ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le"
}
},
{
"category": "product_version",
"name": "reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"product": {
"name": "reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"product_id": "reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"product": {
"name": "cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"product_id": "cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x"
}
},
{
"category": "product_version",
"name": "dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"product": {
"name": "dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"product_id": "dlm-kmp-default-4.12.14-150100.197.157.1.s390x"
}
},
{
"category": "product_version",
"name": "gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"product": {
"name": "gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"product_id": "gfs2-kmp-default-4.12.14-150100.197.157.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-default-4.12.14-150100.197.157.1.s390x",
"product": {
"name": "kernel-default-4.12.14-150100.197.157.1.s390x",
"product_id": "kernel-default-4.12.14-150100.197.157.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-default-base-4.12.14-150100.197.157.1.s390x",
"product": {
"name": "kernel-default-base-4.12.14-150100.197.157.1.s390x",
"product_id": "kernel-default-base-4.12.14-150100.197.157.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"product": {
"name": "kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"product_id": "kernel-default-devel-4.12.14-150100.197.157.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-default-extra-4.12.14-150100.197.157.1.s390x",
"product": {
"name": "kernel-default-extra-4.12.14-150100.197.157.1.s390x",
"product_id": "kernel-default-extra-4.12.14-150100.197.157.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-default-livepatch-4.12.14-150100.197.157.1.s390x",
"product": {
"name": "kernel-default-livepatch-4.12.14-150100.197.157.1.s390x",
"product_id": "kernel-default-livepatch-4.12.14-150100.197.157.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-default-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"product": {
"name": "kernel-default-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"product_id": "kernel-default-livepatch-devel-4.12.14-150100.197.157.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-default-man-4.12.14-150100.197.157.1.s390x",
"product": {
"name": "kernel-default-man-4.12.14-150100.197.157.1.s390x",
"product_id": "kernel-default-man-4.12.14-150100.197.157.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"product": {
"name": "kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"product_id": "kernel-obs-build-4.12.14-150100.197.157.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-obs-qa-4.12.14-150100.197.157.1.s390x",
"product": {
"name": "kernel-obs-qa-4.12.14-150100.197.157.1.s390x",
"product_id": "kernel-obs-qa-4.12.14-150100.197.157.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-syms-4.12.14-150100.197.157.1.s390x",
"product": {
"name": "kernel-syms-4.12.14-150100.197.157.1.s390x",
"product_id": "kernel-syms-4.12.14-150100.197.157.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"product": {
"name": "kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"product_id": "kernel-vanilla-4.12.14-150100.197.157.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"product": {
"name": "kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"product_id": "kernel-vanilla-base-4.12.14-150100.197.157.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"product": {
"name": "kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"product_id": "kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"product": {
"name": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"product_id": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-zfcpdump-4.12.14-150100.197.157.1.s390x",
"product": {
"name": "kernel-zfcpdump-4.12.14-150100.197.157.1.s390x",
"product_id": "kernel-zfcpdump-4.12.14-150100.197.157.1.s390x"
}
},
{
"category": "product_version",
"name": "kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"product": {
"name": "kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"product_id": "kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x"
}
},
{
"category": "product_version",
"name": "kselftests-kmp-default-4.12.14-150100.197.157.1.s390x",
"product": {
"name": "kselftests-kmp-default-4.12.14-150100.197.157.1.s390x",
"product_id": "kselftests-kmp-default-4.12.14-150100.197.157.1.s390x"
}
},
{
"category": "product_version",
"name": "ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"product": {
"name": "ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"product_id": "ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x"
}
},
{
"category": "product_version",
"name": "reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"product": {
"name": "reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"product_id": "reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"product_id": "cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"product_id": "dlm-kmp-default-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"product_id": "gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-debug-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "kernel-debug-4.12.14-150100.197.157.1.x86_64",
"product_id": "kernel-debug-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"product_id": "kernel-debug-base-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-debug-devel-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "kernel-debug-devel-4.12.14-150100.197.157.1.x86_64",
"product_id": "kernel-debug-devel-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-debug-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "kernel-debug-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"product_id": "kernel-debug-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-default-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "kernel-default-4.12.14-150100.197.157.1.x86_64",
"product_id": "kernel-default-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"product_id": "kernel-default-base-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"product_id": "kernel-default-devel-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-default-extra-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "kernel-default-extra-4.12.14-150100.197.157.1.x86_64",
"product_id": "kernel-default-extra-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"product_id": "kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"product_id": "kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-kvmsmall-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "kernel-kvmsmall-4.12.14-150100.197.157.1.x86_64",
"product_id": "kernel-kvmsmall-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"product_id": "kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-kvmsmall-devel-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "kernel-kvmsmall-devel-4.12.14-150100.197.157.1.x86_64",
"product_id": "kernel-kvmsmall-devel-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-kvmsmall-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "kernel-kvmsmall-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"product_id": "kernel-kvmsmall-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"product": {
"name": "kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"product_id": "kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"product_id": "kernel-obs-build-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-obs-qa-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "kernel-obs-qa-4.12.14-150100.197.157.1.x86_64",
"product_id": "kernel-obs-qa-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-syms-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "kernel-syms-4.12.14-150100.197.157.1.x86_64",
"product_id": "kernel-syms-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"product_id": "kernel-vanilla-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"product_id": "kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"product_id": "kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"product_id": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "kselftests-kmp-default-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "kselftests-kmp-default-4.12.14-150100.197.157.1.x86_64",
"product_id": "kselftests-kmp-default-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"product_id": "ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64"
}
},
{
"category": "product_version",
"name": "reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"product": {
"name": "reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"product_id": "reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Live Patching 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Live Patching 15 SP1",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-live-patching:15:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Availability Extension 15 SP1",
"product": {
"name": "SUSE Linux Enterprise High Availability Extension 15 SP1",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-ha:15:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP1-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp1"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.4",
"product": {
"name": "openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.4"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.5",
"product": {
"name": "openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.5"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le as component of SUSE Linux Enterprise Live Patching 15 SP1",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP1",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le as component of SUSE Linux Enterprise Live Patching 15 SP1",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP1",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le as component of SUSE Linux Enterprise Live Patching 15 SP1",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le"
},
"product_reference": "kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64 as component of SUSE Linux Enterprise Live Patching 15 SP1",
"product_id": "SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64"
},
"product_reference": "kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Live Patching 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64 as component of SUSE Linux Enterprise High Availability Extension 15 SP1",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64"
},
"product_reference": "cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le as component of SUSE Linux Enterprise High Availability Extension 15 SP1",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x as component of SUSE Linux Enterprise High Availability Extension 15 SP1",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x"
},
"product_reference": "cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 15 SP1",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dlm-kmp-default-4.12.14-150100.197.157.1.aarch64 as component of SUSE Linux Enterprise High Availability Extension 15 SP1",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64"
},
"product_reference": "dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le as component of SUSE Linux Enterprise High Availability Extension 15 SP1",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dlm-kmp-default-4.12.14-150100.197.157.1.s390x as component of SUSE Linux Enterprise High Availability Extension 15 SP1",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x"
},
"product_reference": "dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "dlm-kmp-default-4.12.14-150100.197.157.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 15 SP1",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 as component of SUSE Linux Enterprise High Availability Extension 15 SP1",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64"
},
"product_reference": "gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le as component of SUSE Linux Enterprise High Availability Extension 15 SP1",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gfs2-kmp-default-4.12.14-150100.197.157.1.s390x as component of SUSE Linux Enterprise High Availability Extension 15 SP1",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x"
},
"product_reference": "gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 15 SP1",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64 as component of SUSE Linux Enterprise High Availability Extension 15 SP1",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64"
},
"product_reference": "ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le as component of SUSE Linux Enterprise High Availability Extension 15 SP1",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x as component of SUSE Linux Enterprise High Availability Extension 15 SP1",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x"
},
"product_reference": "ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64 as component of SUSE Linux Enterprise High Availability Extension 15 SP1",
"product_id": "SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Availability Extension 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-4.12.14-150100.197.157.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64"
},
"product_reference": "kernel-default-4.12.14-150100.197.157.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-4.12.14-150100.197.157.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-default-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-base-4.12.14-150100.197.157.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64"
},
"product_reference": "kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-base-4.12.14-150100.197.157.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-devel-4.12.14-150100.197.157.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64"
},
"product_reference": "kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-devel-4.12.14-150100.197.157.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-4.12.14-150100.197.157.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch"
},
"product_reference": "kernel-devel-4.12.14-150100.197.157.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-docs-4.12.14-150100.197.157.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch"
},
"product_reference": "kernel-docs-4.12.14-150100.197.157.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-4.12.14-150100.197.157.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch"
},
"product_reference": "kernel-macros-4.12.14-150100.197.157.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-obs-build-4.12.14-150100.197.157.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64"
},
"product_reference": "kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-obs-build-4.12.14-150100.197.157.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-4.12.14-150100.197.157.1.noarch as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch"
},
"product_reference": "kernel-source-4.12.14-150100.197.157.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-4.12.14-150100.197.157.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64"
},
"product_reference": "kernel-syms-4.12.14-150100.197.157.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-4.12.14-150100.197.157.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-syms-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-4.12.14-150100.197.157.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64"
},
"product_reference": "kernel-default-4.12.14-150100.197.157.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-4.12.14-150100.197.157.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "kernel-default-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-4.12.14-150100.197.157.1.s390x as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x"
},
"product_reference": "kernel-default-4.12.14-150100.197.157.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-4.12.14-150100.197.157.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-default-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-base-4.12.14-150100.197.157.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64"
},
"product_reference": "kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-base-4.12.14-150100.197.157.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-base-4.12.14-150100.197.157.1.s390x as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x"
},
"product_reference": "kernel-default-base-4.12.14-150100.197.157.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-base-4.12.14-150100.197.157.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-devel-4.12.14-150100.197.157.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64"
},
"product_reference": "kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-devel-4.12.14-150100.197.157.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-devel-4.12.14-150100.197.157.1.s390x as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x"
},
"product_reference": "kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-devel-4.12.14-150100.197.157.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-man-4.12.14-150100.197.157.1.s390x as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x"
},
"product_reference": "kernel-default-man-4.12.14-150100.197.157.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-4.12.14-150100.197.157.1.noarch as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch"
},
"product_reference": "kernel-devel-4.12.14-150100.197.157.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-docs-4.12.14-150100.197.157.1.noarch as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch"
},
"product_reference": "kernel-docs-4.12.14-150100.197.157.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-4.12.14-150100.197.157.1.noarch as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch"
},
"product_reference": "kernel-macros-4.12.14-150100.197.157.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-obs-build-4.12.14-150100.197.157.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64"
},
"product_reference": "kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-obs-build-4.12.14-150100.197.157.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-obs-build-4.12.14-150100.197.157.1.s390x as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x"
},
"product_reference": "kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-obs-build-4.12.14-150100.197.157.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-4.12.14-150100.197.157.1.noarch as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch"
},
"product_reference": "kernel-source-4.12.14-150100.197.157.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-4.12.14-150100.197.157.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64"
},
"product_reference": "kernel-syms-4.12.14-150100.197.157.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-4.12.14-150100.197.157.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-4.12.14-150100.197.157.1.s390x as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x"
},
"product_reference": "kernel-syms-4.12.14-150100.197.157.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-4.12.14-150100.197.157.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-syms-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64"
},
"product_reference": "reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x"
},
"product_reference": "reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP1-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP1-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-4.12.14-150100.197.157.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "kernel-default-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-4.12.14-150100.197.157.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-default-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-base-4.12.14-150100.197.157.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-base-4.12.14-150100.197.157.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-devel-4.12.14-150100.197.157.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-devel-4.12.14-150100.197.157.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-devel-4.12.14-150100.197.157.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch"
},
"product_reference": "kernel-devel-4.12.14-150100.197.157.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-docs-4.12.14-150100.197.157.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch"
},
"product_reference": "kernel-docs-4.12.14-150100.197.157.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-macros-4.12.14-150100.197.157.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch"
},
"product_reference": "kernel-macros-4.12.14-150100.197.157.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-obs-build-4.12.14-150100.197.157.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-obs-build-4.12.14-150100.197.157.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-source-4.12.14-150100.197.157.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch"
},
"product_reference": "kernel-source-4.12.14-150100.197.157.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-4.12.14-150100.197.157.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-syms-4.12.14-150100.197.157.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-syms-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-base-4.12.14-150100.197.157.1.ppc64le as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-debug-base-4.12.14-150100.197.157.1.x86_64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-default-man-4.12.14-150100.197.157.1.s390x as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x"
},
"product_reference": "kernel-default-man-4.12.14-150100.197.157.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-4.12.14-150100.197.157.1.aarch64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64"
},
"product_reference": "kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-4.12.14-150100.197.157.1.ppc64le as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-4.12.14-150100.197.157.1.s390x as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x"
},
"product_reference": "kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-4.12.14-150100.197.157.1.x86_64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64"
},
"product_reference": "kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-base-4.12.14-150100.197.157.1.s390x as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x"
},
"product_reference": "kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64"
},
"product_reference": "kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x"
},
"product_reference": "kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64"
},
"product_reference": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x"
},
"product_reference": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x"
},
"product_reference": "kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-4.12.14-150100.197.157.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64"
},
"product_reference": "kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-4.12.14-150100.197.157.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-4.12.14-150100.197.157.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x"
},
"product_reference": "kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-4.12.14-150100.197.157.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64"
},
"product_reference": "kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-base-4.12.14-150100.197.157.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x"
},
"product_reference": "kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64"
},
"product_reference": "kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x"
},
"product_reference": "kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64"
},
"product_reference": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le"
},
"product_reference": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x"
},
"product_reference": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"relates_to_product_reference": "openSUSE Leap 15.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64 as component of openSUSE Leap 15.5",
"product_id": "openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
},
"product_reference": "kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2022-36402",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2022-36402"
}
],
"notes": [
{
"category": "general",
"text": "An integer overflow vulnerability was found in vmwgfx driver in drivers/gpu/vmxgfx/vmxgfx_execbuf.c in GPU component of Linux kernel with device file \u0027/dev/dri/renderD128 (or Dxxx)\u0027. This flaw allows a local attacker with a user account on the system to gain privilege, causing a denial of service(DoS).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2022-36402",
"url": "https://www.suse.com/security/cve/CVE-2022-36402"
},
{
"category": "external",
"summary": "SUSE Bug 1203517 for CVE-2022-36402",
"url": "https://bugzilla.suse.com/1203517"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-19T15:00:28Z",
"details": "moderate"
}
],
"title": "CVE-2022-36402"
},
{
"cve": "CVE-2023-2007",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2007"
}
],
"notes": [
{
"category": "general",
"text": "The specific flaw exists within the DPT I2O Controller driver. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the kernel.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2007",
"url": "https://www.suse.com/security/cve/CVE-2023-2007"
},
{
"category": "external",
"summary": "SUSE Bug 1210448 for CVE-2023-2007",
"url": "https://bugzilla.suse.com/1210448"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-19T15:00:28Z",
"details": "moderate"
}
],
"title": "CVE-2023-2007"
},
{
"cve": "CVE-2023-20588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-20588"
}
],
"notes": [
{
"category": "general",
"text": "\nA division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. \n\n\n\n\n\n\n\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-20588",
"url": "https://www.suse.com/security/cve/CVE-2023-20588"
},
{
"category": "external",
"summary": "SUSE Bug 1213927 for CVE-2023-20588",
"url": "https://bugzilla.suse.com/1213927"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-19T15:00:28Z",
"details": "moderate"
}
],
"title": "CVE-2023-20588"
},
{
"cve": "CVE-2023-3772",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-3772"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in the Linux kernel\u0027s IP framework for transforming packets (XFRM subsystem). This issue may allow a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer in xfrm_update_ae_params(), leading to a possible kernel crash and denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-3772",
"url": "https://www.suse.com/security/cve/CVE-2023-3772"
},
{
"category": "external",
"summary": "SUSE Bug 1213666 for CVE-2023-3772",
"url": "https://bugzilla.suse.com/1213666"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-19T15:00:28Z",
"details": "moderate"
}
],
"title": "CVE-2023-3772"
},
{
"cve": "CVE-2023-3812",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-3812"
}
],
"notes": [
{
"category": "general",
"text": "An out-of-bounds memory access flaw was found in the Linux kernel\u0027s TUN/TAP device driver functionality in how a user generates a malicious (too big) networking packet when napi frags is enabled. This flaw allows a local user to crash or potentially escalate their privileges on the system.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-3812",
"url": "https://www.suse.com/security/cve/CVE-2023-3812"
},
{
"category": "external",
"summary": "SUSE Bug 1213543 for CVE-2023-3812",
"url": "https://bugzilla.suse.com/1213543"
},
{
"category": "external",
"summary": "SUSE Bug 1213706 for CVE-2023-3812",
"url": "https://bugzilla.suse.com/1213706"
},
{
"category": "external",
"summary": "SUSE Bug 1217444 for CVE-2023-3812",
"url": "https://bugzilla.suse.com/1217444"
},
{
"category": "external",
"summary": "SUSE Bug 1217531 for CVE-2023-3812",
"url": "https://bugzilla.suse.com/1217531"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-19T15:00:28Z",
"details": "important"
}
],
"title": "CVE-2023-3812"
},
{
"cve": "CVE-2023-3863",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-3863"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges to impact a kernel information leak issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-3863",
"url": "https://www.suse.com/security/cve/CVE-2023-3863"
},
{
"category": "external",
"summary": "SUSE Bug 1213601 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1213601"
},
{
"category": "external",
"summary": "SUSE Bug 1213603 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1213603"
},
{
"category": "external",
"summary": "SUSE Bug 1217444 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1217444"
},
{
"category": "external",
"summary": "SUSE Bug 1217531 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1217531"
},
{
"category": "external",
"summary": "SUSE Bug 1219704 for CVE-2023-3863",
"url": "https://bugzilla.suse.com/1219704"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-19T15:00:28Z",
"details": "moderate"
}
],
"title": "CVE-2023-3863"
},
{
"cve": "CVE-2023-4128",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4128"
}
],
"notes": [
{
"category": "general",
"text": "** REJECT ** DO NOT USE THIS CVE RECORD. ConsultIDs: CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Reason: This record is a duplicate of CVE-2023-4206, CVE-2023-4207, CVE-2023-4208. Notes: All CVE users should reference CVE-2023-4206, CVE-2023-4207, CVE-2023-4208 instead of this record. All references and descriptions in this record have been removed to prevent accidental usage.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4128",
"url": "https://www.suse.com/security/cve/CVE-2023-4128"
},
{
"category": "external",
"summary": "SUSE Bug 1214149 for CVE-2023-4128",
"url": "https://bugzilla.suse.com/1214149"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-19T15:00:28Z",
"details": "important"
}
],
"title": "CVE-2023-4128"
},
{
"cve": "CVE-2023-4132",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4132"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. The bug occurs during device initialization when the siano device is plugged in. This flaw allows a local user to crash the system, causing a denial of service condition.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4132",
"url": "https://www.suse.com/security/cve/CVE-2023-4132"
},
{
"category": "external",
"summary": "SUSE Bug 1213969 for CVE-2023-4132",
"url": "https://bugzilla.suse.com/1213969"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-19T15:00:28Z",
"details": "moderate"
}
],
"title": "CVE-2023-4132"
},
{
"cve": "CVE-2023-4134",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4134"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel. This issue occurs in the device cleanup routine due to a possible rearming of the watchdog_timer from the workqueue. This could allow a local user to crash the system, causing a denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4134",
"url": "https://www.suse.com/security/cve/CVE-2023-4134"
},
{
"category": "external",
"summary": "SUSE Bug 1213971 for CVE-2023-4134",
"url": "https://bugzilla.suse.com/1213971"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-19T15:00:28Z",
"details": "moderate"
}
],
"title": "CVE-2023-4134"
},
{
"cve": "CVE-2023-4385",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4385"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference flaw was found in dbFree in fs/jfs/jfs_dmap.c in the journaling file system (JFS) in the Linux Kernel. This issue may allow a local attacker to crash the system due to a missing sanity check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4385",
"url": "https://www.suse.com/security/cve/CVE-2023-4385"
},
{
"category": "external",
"summary": "SUSE Bug 1214348 for CVE-2023-4385",
"url": "https://bugzilla.suse.com/1214348"
},
{
"category": "external",
"summary": "SUSE Bug 1222212 for CVE-2023-4385",
"url": "https://bugzilla.suse.com/1222212"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-19T15:00:28Z",
"details": "moderate"
}
],
"title": "CVE-2023-4385"
},
{
"cve": "CVE-2023-4387",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4387"
}
],
"notes": [
{
"category": "general",
"text": "A use-after-free flaw was found in vmxnet3_rq_alloc_rx_buf in drivers/net/vmxnet3/vmxnet3_drv.c in VMware\u0027s vmxnet3 ethernet NIC driver in the Linux Kernel. This issue could allow a local attacker to crash the system due to a double-free while cleaning up vmxnet3_rq_cleanup_all, which could also lead to a kernel information leak problem.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4387",
"url": "https://www.suse.com/security/cve/CVE-2023-4387"
},
{
"category": "external",
"summary": "SUSE Bug 1214350 for CVE-2023-4387",
"url": "https://bugzilla.suse.com/1214350"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-19T15:00:28Z",
"details": "moderate"
}
],
"title": "CVE-2023-4387"
},
{
"cve": "CVE-2023-4459",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4459"
}
],
"notes": [
{
"category": "general",
"text": "A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnet3 in the Linux Kernel. This issue may allow a local attacker with normal user privilege to cause a denial of service due to a missing sanity check during cleanup.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4459",
"url": "https://www.suse.com/security/cve/CVE-2023-4459"
},
{
"category": "external",
"summary": "SUSE Bug 1214451 for CVE-2023-4459",
"url": "https://bugzilla.suse.com/1214451"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:cluster-md-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:dlm-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:gfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise High Availability Extension 15 SP1:ocfs2-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-default-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.ppc64le",
"SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-150100_197_157-default-1-150100.3.3.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.aarch64",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.s390x",
"SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-base-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-default-devel-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-devel-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-docs-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-macros-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-obs-build-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-source-4.12.14-150100.197.157.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:kernel-syms-4.12.14-150100.197.157.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP1:reiserfs-kmp-default-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-debug-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-default-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-kvmsmall-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.4:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.4:kernel-zfcpdump-man-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-base-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-devel-4.12.14-150100.197.157.1.x86_64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.aarch64",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.ppc64le",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.s390x",
"openSUSE Leap 15.5:kernel-vanilla-livepatch-devel-4.12.14-150100.197.157.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-09-19T15:00:28Z",
"details": "moderate"
}
],
"title": "CVE-2023-4459"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…