{
  "GSD": {
    "alias": "CVE-2022-1966",
    "description": "A use-after-free vulnerability was found in the Linux kernel\u0027s Netfilter subsystem in net/netfilter/nf_tables_api.c. This flaw allows a local attacker with user access to cause a privilege escalation issue.",
    "id": "GSD-2022-1966",
    "references": [
      "https://security.archlinux.org/CVE-2022-1966",
      "https://advisories.mageia.org/CVE-2022-1966.html",
      "https://www.suse.com/security/cve/CVE-2022-1966.html",
      "https://access.redhat.com/errata/RHSA-2022:5214",
      "https://access.redhat.com/errata/RHSA-2022:5216",
      "https://access.redhat.com/errata/RHSA-2022:5220",
      "https://access.redhat.com/errata/RHSA-2022:5224",
      "https://access.redhat.com/errata/RHSA-2022:5232",
      "https://access.redhat.com/errata/RHSA-2022:5236",
      "https://access.redhat.com/errata/RHSA-2022:5249",
      "https://access.redhat.com/errata/RHSA-2022:5267",
      "https://access.redhat.com/errata/RHSA-2022:5439",
      "https://access.redhat.com/errata/RHSA-2022:5476",
      "https://alas.aws.amazon.com/cve/html/CVE-2022-1966.html"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-1966"
      ],
      "details": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-32250. Reason: This candidate is a duplicate of CVE-2022-32250. Notes: All CVE users should reference CVE-2022-32250 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.",
      "id": "GSD-2022-1966",
      "modified": "2023-12-13T01:19:27.711357Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2022-1966",
        "STATE": "REJECT"
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-32250. Reason: This candidate is a duplicate of CVE-2022-32250. Notes: All CVE users should reference CVE-2022-32250 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "5.18",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          },
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2022-1966"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "A use-after-free vulnerability was found in the Linux kernel\u0027s Netfilter subsystem in net/netfilter/nf_tables_api.c. This flaw allows a local attacker with user access to cause a privilege escalation issue."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-416"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/net/netfilter?id=520778042ccca019f3ffa136dd0ca565c486cedd",
              "refsource": "MISC",
              "tags": [
                "Mailing List",
                "Patch",
                "Vendor Advisory"
              ],
              "url": "https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/net/netfilter?id=520778042ccca019f3ffa136dd0ca565c486cedd"
            },
            {
              "name": "https://www.openwall.com/lists/oss-security/2022/05/31/1",
              "refsource": "MISC",
              "tags": [
                "Mailing List",
                "Patch",
                "Third Party Advisory"
              ],
              "url": "https://www.openwall.com/lists/oss-security/2022/05/31/1"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=2092427",
              "refsource": "MISC",
              "tags": [
                "Issue Tracking",
                "Third Party Advisory"
              ],
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2092427"
            },
            {
              "name": "FEDORA-2022-8269eaf361",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MO6Y3TC4WUUNKRP7OQA26OVTZTPCS6F2/"
            },
            {
              "name": "FEDORA-2022-80cc9873be",
              "refsource": "FEDORA",
              "tags": [
                "Mailing List",
                "Third Party Advisory"
              ],
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UIZTJOJCVVEJVOQSCHE6IJQKMPISHQ5L/"
            },
            {
              "name": "DSA-5161",
              "refsource": "DEBIAN",
              "tags": [
                "Third Party Advisory"
              ],
              "url": "https://www.debian.org/security/2022/dsa-5161"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 7.2,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 1.8,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2022-06-17T15:20Z",
      "publishedDate": "2022-06-06T18:15Z"
    }
  }
}

{
  "document": {
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Public",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "To determine the support lifecycle for your software, see the Microsoft Support Lifecycle: https://support.microsoft.com/lifecycle",
        "title": "Additional Resources"
      },
      {
        "category": "legal_disclaimer",
        "text": "The information provided in the Microsoft Knowledge Base is provided \\\"as is\\\" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.",
        "title": "Disclaimer"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "secure@microsoft.com",
      "name": "Microsoft Security Response Center",
      "namespace": "https://msrc.microsoft.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "CVE-2022-1966 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-32250. Reason: This candidate is a duplicate of CVE-2022-32250. Notes: All CVE users should reference CVE-2022-32250 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. - VEX",
        "url": "https://msrc.microsoft.com/csaf/vex/2022/msrc_cve-2022-1966.json"
      },
      {
        "category": "external",
        "summary": "Microsoft Support Lifecycle",
        "url": "https://support.microsoft.com/lifecycle"
      },
      {
        "category": "external",
        "summary": "Common Vulnerability Scoring System",
        "url": "https://www.first.org/cvss"
      }
    ],
    "title": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-32250. Reason: This candidate is a duplicate of CVE-2022-32250. Notes: All CVE users should reference CVE-2022-32250 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.",
    "tracking": {
      "current_release_date": "2025-10-01T23:11:14.000Z",
      "generator": {
        "date": "2025-12-27T17:48:16.998Z",
        "engine": {
          "name": "MSRC Generator",
          "version": "1.0"
        }
      },
      "id": "msrc_CVE-2022-1966",
      "initial_release_date": "2022-06-02T00:00:00.000Z",
      "revision_history": [
        {
          "date": "2025-10-01T23:11:14.000Z",
          "legacy_version": "1",
          "number": "1",
          "summary": "Information published."
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "1.0",
                "product": {
                  "name": "CBL Mariner 1.0",
                  "product_id": "16820"
                }
              },
              {
                "category": "product_version",
                "name": "2.0",
                "product": {
                  "name": "CBL Mariner 2.0",
                  "product_id": "17086"
                }
              }
            ],
            "category": "product_name",
            "name": "Azure Linux"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003ccm1 kernel 5.10.123.1-1",
                "product": {
                  "name": "\u003ccm1 kernel 5.10.123.1-1",
                  "product_id": "2"
                }
              },
              {
                "category": "product_version",
                "name": "cm1 kernel 5.10.123.1-1",
                "product": {
                  "name": "cm1 kernel 5.10.123.1-1",
                  "product_id": "18685"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003ccbl2 kernel 5.15.48.1-2",
                "product": {
                  "name": "\u003ccbl2 kernel 5.15.48.1-2",
                  "product_id": "1"
                }
              },
              {
                "category": "product_version",
                "name": "cbl2 kernel 5.15.48.1-2",
                "product": {
                  "name": "cbl2 kernel 5.15.48.1-2",
                  "product_id": "18686"
                }
              }
            ],
            "category": "product_name",
            "name": "kernel"
          }
        ],
        "category": "vendor",
        "name": "Microsoft"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccm1 kernel 5.10.123.1-1 as a component of CBL Mariner 1.0",
          "product_id": "16820-2"
        },
        "product_reference": "2",
        "relates_to_product_reference": "16820"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cm1 kernel 5.10.123.1-1 as a component of CBL Mariner 1.0",
          "product_id": "18685-16820"
        },
        "product_reference": "18685",
        "relates_to_product_reference": "16820"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "\u003ccbl2 kernel 5.15.48.1-2 as a component of CBL Mariner 2.0",
          "product_id": "17086-1"
        },
        "product_reference": "1",
        "relates_to_product_reference": "17086"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "cbl2 kernel 5.15.48.1-2 as a component of CBL Mariner 2.0",
          "product_id": "18686-17086"
        },
        "product_reference": "18686",
        "relates_to_product_reference": "17086"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-1966",
      "notes": [
        {
          "category": "general",
          "text": "redhat",
          "title": "Assigning CNA"
        }
      ],
      "product_status": {
        "fixed": [
          "18685-16820",
          "18686-17086"
        ],
        "known_affected": [
          "16820-2",
          "17086-1"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "CVE-2022-1966 Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-32250. Reason: This candidate is a duplicate of CVE-2022-32250. Notes: All CVE users should reference CVE-2022-32250 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage. - VEX",
          "url": "https://msrc.microsoft.com/csaf/vex/2022/msrc_cve-2022-1966.json"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2025-10-01T23:11:14.000Z",
          "details": "-:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "16820-2"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        },
        {
          "category": "vendor_fix",
          "date": "2025-10-01T23:11:14.000Z",
          "details": "5.15.48.1-2:Security Update:https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade",
          "product_ids": [
            "17086-1"
          ],
          "url": "https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade"
        }
      ],
      "title": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-32250. Reason: This candidate is a duplicate of CVE-2022-32250. Notes: All CVE users should reference CVE-2022-32250 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThe SUSE Linux Enterprise 15 SP3 kernel was updated.\n\nThe following security bugs were fixed:\n\n- CVE-2022-1966: Fixed an use-after-free bug in the netfilter subsystem. This flaw allowed a local attacker with user access to cause a privilege escalation issue. (bnc#1200015)\n- CVE-2022-1975: Fixed a sleep-in-atomic bug that allows attacker to crash linux kernel by simulating nfc device from user-space. (bsc#1200143)\n- CVE-2022-1974: Fixed an use-after-free that could causes kernel crash by simulating an nfc device from user-space. (bsc#1200144)\n- CVE-2020-26541: Enforce the secure boot forbidden signature database (aka dbx) protection mechanism. (bnc#1177282)\n- \nThe following non-security bugs were fixed:\n\n- ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default (git-fixes).\n- ACPI: sysfs: Fix BERT error region memory mapping (git-fixes).\n- ACPI: sysfs: Make sparse happy about address space in use (git-fixes).\n- ALSA: hda/conexant - Fix loopback issue with CX20632 (git-fixes).\n- ALSA: usb-audio: Optimize TEAC clock quirk (git-fixes).\n- ALSA: usb-audio: Set up (implicit) sync for Saffire 6 (git-fixes).\n- ALSA: usb-audio: Skip generic sync EP parse for secondary EP (git-fixes).\n- ALSA: usb-audio: Workaround for clock setup on TEAC devices (git-fixes).\n- ASoC: dapm: Do not fold register value changes into notifications (git-fixes).\n- ASoC: max98357a: remove dependency on GPIOLIB (git-fixes).\n- ASoC: rt5645: Fix errorenous cleanup order (git-fixes).\n- ASoC: tscs454: Add endianness flag in snd_soc_component_driver (git-fixes).\n- ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files (git-fixes).\n- ath9k: fix QCA9561 PA bias level (git-fixes).\n- b43: Fix assigning negative value to unsigned variable (git-fixes).\n- b43legacy: Fix assigning negative value to unsigned variable (git-fixes).\n- blk-mq: fix tag_get wait task can\u0027t be awakened (bsc#1200263).\n- blk-mq: Fix wrong wakeup batch configuration which will cause hang (bsc#1200263).\n- block: fix bio_clone_blkg_association() to associate with proper blkcg_gq (bsc#1200259).\n- btrfs: tree-checker: fix incorrect printk format (bsc#1200249).\n- cfg80211: set custom regdomain after wiphy registration (git-fixes).\n- clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value (git-fixes).\n- clocksource/drivers/sp804: Avoid error on multiple instances (git-fixes).\n- dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace (git-fixes).\n- dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type (git-fixes).\n- drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI controllers (git-fixes).\n- drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() (git-fixes).\n- drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() (git-fixes).\n- drivers: tty: serial: Fix deadlock in sa1100_set_termios() (git-fixes).\n- drivers: usb: host: Fix deadlock in oxu_bus_suspend() (git-fixes).\n- drm: imx: fix compiler warning with gcc-12 (git-fixes).\n- drm: msm: fix error check return value of irq_of_parse_and_map() (git-fixes).\n- drm/amdgpu/cs: make commands with 0 chunks illegal behaviour (git-fixes).\n- drm/amdgpu/smu10: fix SoC/fclk units in auto mode (git-fixes).\n- drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo (git-fixes).\n- drm/atomic: Force bridge self-refresh-exit on CRTC switch (git-fixes).\n- drm/bridge: analogix_dp: Support PSR-exit to disable transition (git-fixes).\n- drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() (git-fixes).\n- drm/i915: fix i915_globals_exit() section mismatch error (git-fixes).\n- drm/komeda: return early if drm_universal_plane_init() fails (git-fixes).\n- drm/msm/dsi: fix address for second DSI PHY on SDM660 (git-fixes).\n- drm/plane: Move range check for format_count earlier (git-fixes).\n- drm/radeon: fix a possible null pointer dereference (git-fixes).\n- drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes (git-fixes).\n- efi: Add missing prototype for efi_capsule_setup_info (git-fixes).\n- efi: Do not import certificates from UEFI Secure Boot for T2 Macs (git-fixes).\n- fbcon: Consistently protect deferred_takeover with console_lock() (git-fixes).\n- ftrace: Clean up hash direct_functions on register failures (git-fixes).\n- HID: bigben: fix slab-out-of-bounds Write in bigben_probe (git-fixes).\n- HID: multitouch: Add support for Google Whiskers Touchpad (git-fixes).\n- hwmon: Make chip parameter for with_info API mandatory (git-fixes).\n- i2c: cadence: Increase timeout per message if necessary (git-fixes).\n- i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging (git-fixes).\n- iio: dummy: iio_simple_dummy: check the return value of kstrdup() (git-fixes).\n- Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag (git-fixes).\n- Input: goodix - fix spurious key release events (git-fixes).\n- ipw2x00: Fix potential NULL dereference in libipw_xmit() (git-fixes).\n- irqchip: irq-xtensa-mx: fix initial IRQ affinity (git-fixes).\n- irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x (git-fixes).\n- irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value (git-fixes).\n- irqchip/exiu: Fix acknowledgment of edge triggered interrupts (git-fixes).\n- iwlwifi: mvm: fix assert 1F04 upon reconfig (git-fixes).\n- KVM: fix wrong exception emulation in check_rdtsc (git-fixes).\n- KVM: nVMX: Invalidate all roots when emulating INVVPID without EPT (git-fixes).\n- KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use (git-fixes).\n- KVM: nVMX: Set LDTR to its architecturally defined value on nested VM-Exit (git-fixes).\n- KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter (git-fixes).\n- KVM: s390: pv: add macros for UVC CC values (git-fixes).\n- KVM: s390: pv: avoid double free of sida page (git-fixes).\n- KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm (git-fixes).\n- KVM: s390: vsie/gmap: reduce gmap_rmap overhead (git-fixes).\n- KVM: VMX: Flush all EPTP/VPID contexts on remote TLB flush (git-fixes).\n- KVM: VMX: Use current VMCS to query WAITPKG support for MSR emulation (git-fixes).\n- KVM: x86: clflushopt should be treated as a no-op by emulation (git-fixes).\n- KVM: x86: Do not force set BSP bit when local APIC is managed by userspace (git-fixes).\n- KVM: x86: Fix emulation in writing cr8 (git-fixes).\n- KVM: x86: Fix off-by-one error in kvm_vcpu_ioctl_x86_setup_mce (git-fixes).\n- KVM: x86: Immediately reset the MMU context when the SMM flag is cleared (git-fixes).\n- KVM: x86: Inject #GP if guest attempts to toggle CR4.LA57 in 64-bit mode (git-fixes).\n- KVM: x86: Mark CR4.TSD as being possibly owned by the guest (git-fixes).\n- KVM: x86: Migrate the PIT only if vcpu0 is migrated, not any BSP (git-fixes).\n- KVM: x86: Toggling CR4.PKE does not load PDPTEs in PAE mode (git-fixes).\n- KVM: x86: Toggling CR4.SMAP does not load PDPTEs in PAE mode (git-fixes).\n- KVM: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU (git-fixes).\n- KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() (git-fixes).\n- KVM: x86/pmu: Fix HW_REF_CPU_CYCLES event pseudo-encoding in intel_arch_events[] (git-fixes).\n- mac80211: upgrade passive scan to active scan on DFS channels after beacon rx (git-fixes).\n- md: fix an incorrect NULL check in does_sb_need_changing (git-fixes).\n- md: fix an incorrect NULL check in md_reload_sb (git-fixes).\n- media: cx25821: Fix the warning when removing the module (git-fixes).\n- media: netup_unidvb: Do not leak SPI master in probe error path (git-fixes).\n- media: pci: cx23885: Fix the error handling in cx23885_initdev() (git-fixes).\n- media: venus: hfi: avoid null dereference in deinit (git-fixes).\n- misc: rtsx: set NULL intfdata when probe fails (git-fixes).\n- mmc: block: Fix CQE recovery reset success (git-fixes).\n- mmc: jz4740: Apply DMA engine limits to maximum segment size (git-fixes).\n- modpost: fix removing numeric suffixes (git-fixes).\n- modpost: fix undefined behavior of is_arm_mapping_symbol() (git-fixes).\n- mt76: check return value of mt76_txq_send_burst in mt76_txq_schedule_list (git-fixes).\n- mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue (git-fixes).\n- net: rtlwifi: properly check for alloc_workqueue() failure (git-fixes).\n- nfc: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION (git-fixes).\n- nfc: st21nfca: fix incorrect validating logic in EVT_TRANSACTION (git-fixes).\n- nfc: st21nfca: fix memory leaks in EVT_TRANSACTION handling (git-fixes).\n- NFS: Do not report ENOSPC write errors twice (git-fixes).\n- nfsd: Fix null-ptr-deref in nfsd_fill_super() (git-fixes).\n- PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA topology (bsc#1199365).\n- pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards (git-fixes).\n- pinctrl: sunxi: fix f1c100s uart2 function (git-fixes).\n- platform/chrome: cros_ec_proto: Send command again when timeout occurs (git-fixes).\n- platform/x86: wmi: Fix driver-\u003enotify() vs -\u003eprobe() race (git-fixes).\n- platform/x86: wmi: Replace read_takes_no_args with a flags field (git-fixes).\n- devfreq: rk3399_dmc: Disable edev on remove() (git-fixes).\n- raid5: introduce MD_BROKEN (git-fixes).\n- rtl818x: Prevent using not initialized queues (git-fixes).\n- rtlwifi: Use pr_warn instead of WARN_ONCE (git-fixes).\n- s390: fix detection of vector enhancements facility 1 vs. vector packed decimal facility (git-fixes).\n- s390: fix strrchr() implementation (git-fixes).\n- s390/cio: dont call css_wait_for_slow_path() inside a lock (git-fixes).\n- s390/cio: Fix the \u0027type\u0027 field in s390_cio_tpi tracepoint (git-fixes).\n- s390/crypto: fix scatterwalk_unmap() callers in AES-GCM (git-fixes).\n- s390/ctcm: fix potential memory leak (git-fixes).\n- s390/ctcm: fix variable dereferenced before check (git-fixes).\n- s390/dasd: fix data corruption for ESE devices (bsc#1200207 LTC#198454).\n- s390/dasd: Fix read for ESE with blksize 4k (bsc#1200206 LTC#198455).\n- s390/dasd: Fix read inconsistency for ESE DASD devices (bsc#1200206 LTC#198455).\n- s390/dasd: prevent double format of tracks for ESE devices (bsc#1200207 LTC#198454).\n- s390/ftrace: fix ftrace_update_ftrace_func implementation (git-fixes).\n- s390/lcs: fix variable dereferenced before check (git-fixes).\n- s390/mcck: fix invalid KVM guest condition check (git-fixes).\n- s390/mcck: isolate SIE instruction when setting CIF_MCCK_GUEST flag (git-fixes).\n- s390/nmi: handle guarded storage validity failures for KVM guests (git-fixes).\n- s390/nmi: handle vector validity failures for KVM guests (git-fixes).\n- s390/pv: fix the forcing of the swiotlb (git-fixes).\n- s390/qdio: cancel the ESTABLISH ccw after timeout (git-fixes).\n- s390/qdio: fix roll-back after timeout on ESTABLISH ccw (git-fixes).\n- s390/vfio-ap: fix circular lockdep when setting/clearing crypto masks (git-fixes).\n- serial: msm_serial: disable interrupts in __msm_console_write() (git-fixes).\n- spi: Introduce device-managed SPI controller allocation (git-fixes).\n- spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction (git-fixes).\n- spi: stm32-qspi: Fix wait_cmd timeout in APM mode (git-fixes).\n- staging: rtl8712: fix uninit-value in r871xu_drv_init() (git-fixes).\n- staging: rtl8712: fix uninit-value in usb_read8() and friends (git-fixes).\n- tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator (git-fixes).\n- tty: Fix a possible resource leak in icom_probe (git-fixes).\n- tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() (git-fixes).\n- usb: core: hcd: Add support for deferring roothub registration (git-fixes).\n- usb: dwc2: gadget: do not reset gadget\u0027s driver-\u003ebus (git-fixes).\n- usb: hcd-pci: Fully suspend across freeze/thaw cycle (git-fixes).\n- usb: host: isp116x: check return value after calling platform_get_resource() (git-fixes).\n- usb: new quirk for Dell Gen 2 devices (git-fixes).\n- usb: serial: option: add Quectel BG95 modem (git-fixes).\n- vfio-ccw: Check initialized flag in cp_init() (git-fixes).\n- vfio/ccw: Remove unneeded GFP_DMA (git-fixes).\n- video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() (git-fixes).\n- virtio/s390: implement virtio-ccw revision 2 correctly (git-fixes).\n- vringh: Fix loop descriptors check in the indirect cases (git-fixes).\n- watchdog: wdat_wdt: Stop watchdog when rebooting the system (git-fixes).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Leap-Micro-5.2-2022-2173",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2022_2173-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2022:2173-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CWOILJAA3L3ZOAEUSAUQRV4VH2BJEGVX/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2022:2173-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CWOILJAA3L3ZOAEUSAUQRV4VH2BJEGVX/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177282",
        "url": "https://bugzilla.suse.com/1177282"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1199365",
        "url": "https://bugzilla.suse.com/1199365"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200015",
        "url": "https://bugzilla.suse.com/1200015"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200143",
        "url": "https://bugzilla.suse.com/1200143"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200144",
        "url": "https://bugzilla.suse.com/1200144"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200206",
        "url": "https://bugzilla.suse.com/1200206"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200207",
        "url": "https://bugzilla.suse.com/1200207"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200249",
        "url": "https://bugzilla.suse.com/1200249"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200259",
        "url": "https://bugzilla.suse.com/1200259"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200263",
        "url": "https://bugzilla.suse.com/1200263"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200268",
        "url": "https://bugzilla.suse.com/1200268"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200529",
        "url": "https://bugzilla.suse.com/1200529"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-26541 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-26541/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-1966 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-1966/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-1974 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-1974/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-1975 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-1975/"
      }
    ],
    "title": "Security update for the Linux Kernel",
    "tracking": {
      "current_release_date": "2022-06-24T08:53:23Z",
      "generator": {
        "date": "2022-06-24T08:53:23Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2022:2173-1",
      "initial_release_date": "2022-06-24T08:53:23Z",
      "revision_history": [
        {
          "date": "2022-06-24T08:53:23Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-default-5.3.18-150300.59.76.1.aarch64",
                "product": {
                  "name": "kernel-default-5.3.18-150300.59.76.1.aarch64",
                  "product_id": "kernel-default-5.3.18-150300.59.76.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.aarch64",
                "product": {
                  "name": "kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.aarch64",
                  "product_id": "kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-default-5.3.18-150300.59.76.1.x86_64",
                "product": {
                  "name": "kernel-default-5.3.18-150300.59.76.1.x86_64",
                  "product_id": "kernel-default-5.3.18-150300.59.76.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.x86_64",
                "product": {
                  "name": "kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.x86_64",
                  "product_id": "kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap Micro 5.2",
                "product": {
                  "name": "openSUSE Leap Micro 5.2",
                  "product_id": "openSUSE Leap Micro 5.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap-micro:5.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-5.3.18-150300.59.76.1.aarch64 as component of openSUSE Leap Micro 5.2",
          "product_id": "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.aarch64"
        },
        "product_reference": "kernel-default-5.3.18-150300.59.76.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-5.3.18-150300.59.76.1.x86_64 as component of openSUSE Leap Micro 5.2",
          "product_id": "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.x86_64"
        },
        "product_reference": "kernel-default-5.3.18-150300.59.76.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.aarch64 as component of openSUSE Leap Micro 5.2",
          "product_id": "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.aarch64"
        },
        "product_reference": "kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.aarch64",
        "relates_to_product_reference": "openSUSE Leap Micro 5.2"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.x86_64 as component of openSUSE Leap Micro 5.2",
          "product_id": "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.x86_64"
        },
        "product_reference": "kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.x86_64",
        "relates_to_product_reference": "openSUSE Leap Micro 5.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-26541",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-26541"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.aarch64",
          "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.x86_64",
          "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.aarch64",
          "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-26541",
          "url": "https://www.suse.com/security/cve/CVE-2020-26541"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177282 for CVE-2020-26541",
          "url": "https://bugzilla.suse.com/1177282"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.aarch64",
            "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.x86_64",
            "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.aarch64",
            "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.aarch64",
            "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.x86_64",
            "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.aarch64",
            "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T08:53:23Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-26541"
    },
    {
      "cve": "CVE-2022-1966",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-1966"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-32250. Reason: This candidate is a duplicate of CVE-2022-32250. Notes: All CVE users should reference CVE-2022-32250 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.aarch64",
          "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.x86_64",
          "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.aarch64",
          "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-1966",
          "url": "https://www.suse.com/security/cve/CVE-2022-1966"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200015 for CVE-2022-1966",
          "url": "https://bugzilla.suse.com/1200015"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200268 for CVE-2022-1966",
          "url": "https://bugzilla.suse.com/1200268"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200494 for CVE-2022-1966",
          "url": "https://bugzilla.suse.com/1200494"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200529 for CVE-2022-1966",
          "url": "https://bugzilla.suse.com/1200529"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.aarch64",
            "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.x86_64",
            "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.aarch64",
            "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.aarch64",
            "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.x86_64",
            "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.aarch64",
            "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T08:53:23Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-1966"
    },
    {
      "cve": "CVE-2022-1974",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-1974"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free flaw was found in the Linux kernel\u0027s NFC core functionality due to a race condition between kobject creation and delete. This vulnerability allows a local attacker with CAP_NET_ADMIN privilege to leak kernel information.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.aarch64",
          "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.x86_64",
          "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.aarch64",
          "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-1974",
          "url": "https://www.suse.com/security/cve/CVE-2022-1974"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200144 for CVE-2022-1974",
          "url": "https://bugzilla.suse.com/1200144"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200265 for CVE-2022-1974",
          "url": "https://bugzilla.suse.com/1200265"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.aarch64",
            "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.x86_64",
            "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.aarch64",
            "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.aarch64",
            "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.x86_64",
            "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.aarch64",
            "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T08:53:23Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-1974"
    },
    {
      "cve": "CVE-2022-1975",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-1975"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the Linux kernel by simulating a nfc device from user-space.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.aarch64",
          "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.x86_64",
          "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.aarch64",
          "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-1975",
          "url": "https://www.suse.com/security/cve/CVE-2022-1975"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200143 for CVE-2022-1975",
          "url": "https://bugzilla.suse.com/1200143"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.aarch64",
            "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.x86_64",
            "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.aarch64",
            "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.aarch64",
            "openSUSE Leap Micro 5.2:kernel-default-5.3.18-150300.59.76.1.x86_64",
            "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.aarch64",
            "openSUSE Leap Micro 5.2:kernel-default-base-5.3.18-150300.59.76.1.150300.18.45.2.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T08:53:23Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-1975"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for the Linux Kernel",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThe SUSE Linux Enterprise 15 SP3 kernel was updated.\n\nThe following security bugs were fixed:\n\n- CVE-2022-1972: Fixed a buffer overflow in nftable that could lead to privilege escalation. (bsc#1200019)\n- CVE-2019-19377: Fixed an user-after-free that could be triggered when an attacker mounts a crafted btrfs filesystem image. (bnc#1158266)\n- CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507).\n- CVE-2022-1184: Fixed an use-after-free and memory errors in ext4 when mounting and operating on a corrupted image. (bsc#1198577)\n- CVE-2022-1652: Fixed a statically allocated error counter inside the floppy kernel module (bsc#1199063).\n- CVE-2022-20008: Fixed bug that allows to read kernel heap memory due to uninitialized data in mmc_blk_read_single of block.c. (bnc#1199564)\n- CVE-2022-30594: Fixed restriction bypass on setting the PT_SUSPEND_SECCOMP flag (bnc#1199505).\n- CVE-2022-0168: Fixed a NULL pointer dereference in smb2_ioctl_query_info. (bsc#1197472)\n- CVE-2021-33061: Fixed insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters that may have allowed an authenticated user to potentially enable denial of service via local access (bnc#1196426).\n- CVE-2022-20141: Fixwed an use after free due to improper locking. This bug could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. (bnc#1200604)\n- CVE-2022-21123: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)\n- CVE-2022-21125: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)\n- CVE-2022-21180: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)\n- CVE-2022-21166: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)\n- CVE-2022-21127: Fixed a stale MMIO data transient which can be exploited to speculatively/transiently disclose information via spectre like attacks. (bsc#1199650)\n- CVE-2022-1975: Fixed a sleep-in-atomic bug that allows attacker to crash linux kernel by simulating nfc device from user-space. (bsc#1200143)\n- CVE-2022-1974: Fixed an use-after-free that could causes kernel crash by simulating an nfc device from user-space. (bsc#1200144)\n- CVE-2020-26541: Enforce the secure boot forbidden signature database (aka dbx) protection mechanism. (bnc#1177282)\n- CVE-2022-32250: Fixed an use-after-free bug in the netfilter subsystem. This flaw allowed a local attacker with user access to cause a privilege escalation issue. (bnc#1200015)\n\nThe following non-security bugs were fixed:\n\n- ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default (git-fixes).\n- ACPI: property: Release subnode properties with data nodes (git-fixes).\n- ACPI: sysfs: Fix BERT error region memory mapping (git-fixes).\n- ACPI: sysfs: Make sparse happy about address space in use (git-fixes).\n- ALSA: ctxfi: Add SB046x PCI ID (git-fixes).\n- ALSA: fireworks: fix wrong return count shorter than expected by 4 bytes (git-fixes).\n- ALSA: hda - fix unused Realtek function when PM is not enabled (git-fixes).\n- ALSA: hda/conexant - Fix loopback issue with CX20632 (git-fixes).\n- ALSA: hda/realtek - Add new type for ALC245 (git-fixes).\n- ALSA: hda/realtek - Fix microphone noise on ASUS TUF B550M-PLUS (git-fixes).\n- ALSA: hda/realtek: Enable 4-speaker output for Dell XPS 15 9520 laptop (git-fixes).\n- ALSA: hda/realtek: Enable headset mic on Lenovo P360 (git-fixes).\n- ALSA: pcm: Check for null pointer of pointer substream before dereferencing it (git-fixes).\n- ALSA: usb-audio: Add missing ep_idx in fixed EP quirks (git-fixes).\n- ALSA: usb-audio: Clear MIDI port active flag after draining (git-fixes).\n- ALSA: usb-audio: Configure sync endpoints before data (git-fixes).\n- ALSA: usb-audio: Fix undefined behavior due to shift overflowing the constant (git-fixes).\n- ALSA: usb-audio: Optimize TEAC clock quirk (git-fixes).\n- ALSA: usb-audio: Restore Rane SL-1 quirk (git-fixes).\n- ALSA: usb-audio: Set up (implicit) sync for Saffire 6 (git-fixes).\n- ALSA: usb-audio: Skip generic sync EP parse for secondary EP (git-fixes).\n- ALSA: usb-audio: Workaround for clock setup on TEAC devices (git-fixes).\n- ALSA: wavefront: Proper check of get_user() error (git-fixes).\n- ARM: 9169/1: entry: fix Thumb2 bug in iWMMXt exception handling (git-fixes)\n- ARM: 9170/1: fix panic when kasan and kprobe are enabled (git-fixes)\n- ARM: 9187/1: JIVE: fix return value of __setup handler (git-fixes)\n- ARM: config: u8500: Re-enable AB8500 battery charging (git-fixes)\n- ARM: davinci: da850-evm: Avoid NULL pointer dereference (git-fixes)\n- ARM: dts: am3517-evm: Fix misc pinmuxing (git-fixes)\n- ARM: dts: armada-38x: Add generic compatible to UART nodes (git-fixes)\n- ARM: dts: at91: fix pinctrl phandles (git-fixes)\n- ARM: dts: at91: Map MCLK for wm8731 on at91sam9g20ek (git-fixes)\n- ARM: dts: at91: sama5d2: Fix PMERRLOC resource size (git-fixes)\n- ARM: dts: at91: sama5d4_xplained: fix pinctrl phandle name (git-fixes)\n- ARM: dts: bcm2835-rpi-b: Fix GPIO line names (git-fixes)\n- ARM: dts: bcm2835-rpi-zero-w: Fix GPIO line name for Wifi/BT (git-fixes)\n- ARM: dts: bcm2837-rpi-3-b-plus: Fix GPIO line name of power LED (git-fixes)\n- ARM: dts: bcm2837-rpi-cm3-io3: Fix GPIO line names for SMPS I2C (git-fixes)\n- ARM: dts: exynos: fix UART3 pins configuration in Exynos5250 (git-fixes)\n- ARM: dts: Fix OpenBMC flash layout label addresses (git-fixes)\n- ARM: dts: imx: Add missing LVDS decoder on M53Menlo (git-fixes)\n- ARM: dts: imx23-evk: Remove MX23_PAD_SSP1_DETECT from hog group (git-fixes)\n- ARM: dts: imx6qdl-apalis: Fix sgtl5000 detection issue (git-fixes)\n- ARM: dts: imx6qdl-udoo: Properly describe the SD card detect (git-fixes)\n- ARM: dts: imx6ull-colibri: fix vqmmc regulator (git-fixes)\n- ARM: dts: imx6ull-pinfunc: Fix CSI_DATA07__ESAI_TX0 pad name (git-fixes)\n- ARM: dts: logicpd-som-lv: Fix wrong pinmuxing on OMAP35 (git-fixes)\n- ARM: dts: meson: Fix the UART compatible strings (git-fixes)\n- ARM: dts: meson8: Fix the UART device-tree schema validation (git-fixes)\n- ARM: dts: meson8b: Fix the UART device-tree schema validation (git-fixes)\n- ARM: dts: qcom: ipq4019: fix sleep clock (git-fixes)\n- ARM: dts: qcom: msm8974: Drop flags for mdss irqs (git-fixes)\n- ARM: dts: suniv: F1C100: fix watchdog compatible (git-fixes)\n- ARM: ftrace: ensure that ADR takes the Thumb bit into account (git-fixes)\n- ARM: mediatek: select arch timer for mt7629 (git-fixes)\n- ARM: omap: remove debug-leds driver (git-fixes)\n- ARM: OMAP2+: Fix refcount leak in omap_gic_of_init (git-fixes)\n- ARM: socfpga: dts: fix qspi node compatible (git-fixes)\n- ARM: socfpga: fix missing RESET_CONTROLLER (git-fixes)\n- ARM: tegra: Move panels to AUX bus (git-fixes)\n- arm64: avoid fixmap race condition when create pud mapping (git-fixes)\n- arm64: dts: broadcom: Fix sata nodename (git-fixes)\n- arm64: dts: ns2: Fix spi-cpol and spi-cpha property (git-fixes)\n- arm64: dts: rockchip: Fix SDIO regulator supply properties on (git-fixes)\n- arm64: paravirt: Use RCU read locks to guard stolen_time (git-fixes).\n- arm64: pgtable: make __pte_to_phys/__phys_to_pte_val inline functions (git-fixes)\n- ASoC: atmel-classd: Remove endianness flag on class d component (git-fixes).\n- ASoC: atmel-pdmic: Remove endianness flag on pdmic component (git-fixes).\n- ASoC: da7219: Fix change notifications for tone generator frequency (git-fixes).\n- ASoC: dapm: Do not fold register value changes into notifications (git-fixes).\n- ASoC: dmaengine: Restore NULL prepare_slave_config() callback (git-fixes).\n- ASoC: fsl_sai: Fix FSL_SAI_xDR/xFR definition (git-fixes).\n- ASoC: max98090: Generate notifications on changes for custom control (git-fixes).\n- ASoC: max98090: Move check for invalid values before casting in max98090_put_enab_tlv() (git-fixes).\n- ASoC: max98090: Reject invalid values in custom control put() (git-fixes).\n- ASoC: max98357a: remove dependency on GPIOLIB (git-fixes).\n- ASoC: mediatek: Fix error handling in mt8173_max98090_dev_probe (git-fixes).\n- ASoC: mediatek: Fix missing of_node_put in mt2701_wm8960_machine_probe (git-fixes).\n- ASoC: meson: Fix event generation for G12A tohdmi mux (git-fixes).\n- ASoC: mxs-saif: Fix refcount leak in mxs_saif_probe (git-fixes).\n- ASoC: ops: Validate input values in snd_soc_put_volsw_range() (git-fixes).\n- ASoC: rk3328: fix disabling mclk on pclk probe failure (git-fixes).\n- ASoC: rt5514: Fix event generation for \u0027DSP Voice Wake Up\u0027 control (git-fixes).\n- ASoC: rt5645: Fix errorenous cleanup order (git-fixes).\n- ASoC: ti: j721e-evm: Fix refcount leak in j721e_soc_probe_* (git-fixes).\n- ASoC: tscs454: Add endianness flag in snd_soc_component_driver (git-fixes).\n- ASoC: wm2000: fix missing clk_disable_unprepare() on error in wm2000_anc_transition() (git-fixes).\n- ASoC: wm8958: Fix change notifications for DSP controls (git-fixes).\n- assoc_array: Fix BUG_ON during garbage collect (git-fixes).\n- ata: libata-transport: fix {dma|pio|xfer}_mode sysfs files (git-fixes).\n- ata: pata_hpt37x: fix PCI clock detection (git-fixes).\n- ata: pata_marvell: Check the \u0027bmdma_addr\u0027 beforing reading (git-fixes).\n- ath9k_htc: fix potential out of bounds access with invalid rxstatus-\u003ers_keyix (git-fixes).\n- ath9k: fix ar9003_get_eepmisc (git-fixes).\n- ath9k: fix QCA9561 PA bias level (git-fixes).\n- b43: Fix assigning negative value to unsigned variable (git-fixes).\n- b43legacy: Fix assigning negative value to unsigned variable (git-fixes).\n- batman-adv: Do not skb_split skbuffs with frag_list (git-fixes).\n- blk-cgroup: move blkcg_{get,set}_fc_appid out of line (bsc#1200045).\n- blk-mq: fix tag_get wait task can\u0027t be awakened (bsc#1200263).\n- blk-mq: Fix wrong wakeup batch configuration which will cause hang (bsc#1200263).\n- block: fix bio_clone_blkg_association() to associate with proper blkcg_gq (bsc#1200259).\n- Bluetooth: call hci_le_conn_failed with hdev lock in hci_le_conn_failed (git-fixes).\n- Bluetooth: fix dangling sco_conn and use-after-free in sco_sock_timeout (git-fixes).\n- Bluetooth: Fix the creation of hdev-\u003ename (git-fixes).\n- Bluetooth: hci_qca: Use del_timer_sync() before freeing (git-fixes).\n- bnxt_en: Fix possible bnxt_open() failure caused by wrong RFS flag (jsc#SLE-8371 bsc#1153274).\n- bnxt_en: Fix unnecessary dropping of RX packets (jsc#SLE-15075).\n- brcmfmac: sdio: Fix undefined behavior due to shift overflowing the constant (git-fixes).\n- btrfs: tree-checker: fix incorrect printk format (bsc#1200249).\n- bus: sunxi-rsb: Fix the return value of sunxi_rsb_device_create() (git-fixes).\n- bus: ti-sysc: Fix warnings for unbind for serial (git-fixes).\n- can: grcan: grcan_close(): fix deadlock (git-fixes).\n- can: grcan: use ofdev-\u003edev when allocating DMA memory (git-fixes).\n- carl9170: tx: fix an incorrect use of list iterator (git-fixes).\n- ceph: fix setting of xattrs on async created inodes (bsc#1200192).\n- cfg80211: set custom regdomain after wiphy registration (git-fixes).\n- cgroup/cpuset: Remove cpus_allowed/mems_allowed setup in cpuset_init_smp() (bsc#1199839).\n- clk: at91: generated: consider range when calculating best rate (git-fixes).\n- clk: bcm2835: fix bcm2835_clock_choose_div (git-fixes).\n- clk: imx8mp: fix usb_root_clk parent (git-fixes).\n- clk: renesas: r9a06g032: Fix the RTC hclock description (git-fixes).\n- clk: sunxi: sun9i-mmc: check return value after calling platform_get_resource() (git-fixes).\n- clocksource/drivers/oxnas-rps: Fix irq_of_parse_and_map() return value (git-fixes).\n- clocksource/drivers/sp804: Avoid error on multiple instances (git-fixes).\n- copy_process(): Move fd_install() out of sighand-\u003esiglock critical section (bsc#1199626).\n- crypto: caam - fix i.MX6SX entropy delay value (git-fixes).\n- crypto: ecrdsa - Fix incorrect use of vli_cmp (git-fixes).\n- crypto: stm32 - fix reference leak in stm32_crc_remove (git-fixes).\n- crypto: x86 - eliminate anonymous module_init and module_exit (git-fixes).\n- crypto: x86/chacha20 - Avoid spurious jumps to other functions (git-fixes).\n- dim: initialize all struct fields (git-fixes).\n- dma-buf: fix use of DMA_BUF_SET_NAME_{A,B} in userspace (git-fixes).\n- dmaengine: idxd: Fix the error handling path in idxd_cdev_register() (git-fixes).\n- dmaengine: stm32-mdma: remove GISR1 register (git-fixes).\n- dmaengine: zynqmp_dma: In struct zynqmp_dma_chan fix desc_size data type (git-fixes).\n- docs: powerpc: Fix misspellings and grammar errors (bsc#1055117 ltc#159753).\n- docs: submitting-patches: Fix crossref to \u0027The canonical patch format\u0027 (git-fixes).\n- drbd: fix an invalid memory access caused by incorrect use of list iterator (git-fixes).\n- drbd: fix duplicate array initializer (git-fixes).\n- drbd: Fix five use after free bugs in get_initial_state (git-fixes).\n- drbd: remove assign_p_sizes_qlim (git-fixes).\n- drbd: use bdev based limit helpers in drbd_send_sizes (git-fixes).\n- drbd: use bdev_alignment_offset instead of queue_alignment_offset (git-fixes).\n- driver core: fix deadlock in __device_attach (git-fixes).\n- driver: base: fix UAF when driver_attach failed (git-fixes).\n- drivers: base: cacheinfo: Get rid of DEFINE_SMP_CALL_CACHE_FUNCTION() (git-fixes)\n- drivers: i2c: thunderx: Allow driver to work with ACPI defined TWSI controllers (git-fixes).\n- drivers: staging: rtl8192e: Fix deadlock in rtllib_beacons_stop() (git-fixes).\n- drivers: staging: rtl8192u: Fix deadlock in ieee80211_beacons_stop() (git-fixes).\n- drivers: tty: serial: Fix deadlock in sa1100_set_termios() (git-fixes).\n- drivers: usb: host: Fix deadlock in oxu_bus_suspend() (git-fixes).\n- drivers/base/memory: fix an unlikely reference counting issue in __add_memory_block() (git-fixes).\n- drivers/base/node.c: fix compaction sysfs file leak (git-fixes).\n- drm: imx: fix compiler warning with gcc-12 (git-fixes).\n- drm: mali-dp: potential dereference of null pointer (git-fixes).\n- drm: msm: fix error check return value of irq_of_parse_and_map() (git-fixes).\n- drm: msm: fix possible memory leak in mdp5_crtc_cursor_set() (git-fixes).\n- drm: sti: do not use kernel-doc markers (git-fixes).\n- drm/amd/display/dc/gpio/gpio_service: Pass around correct dce_{version, environment} types (git-fixes).\n- drm/amdgpu/cs: make commands with 0 chunks illegal behaviour (git-fixes).\n- drm/amdgpu/smu10: fix SoC/fclk units in auto mode (git-fixes).\n- drm/amdgpu/ucode: Remove firmware load type check in amdgpu_ucode_free_bo (git-fixes).\n- drm/amdkfd: Fix GWS queue count (git-fixes).\n- drm/atomic: Force bridge self-refresh-exit on CRTC switch (git-fixes).\n- drm/blend: fix typo in the comment (git-fixes).\n- drm/bridge: adv7511: clean up CEC adapter when probe fails (git-fixes).\n- drm/bridge: analogix_dp: Grab runtime PM reference for DP-AUX (git-fixes).\n- drm/bridge: analogix_dp: Support PSR-exit to disable transition (git-fixes).\n- drm/bridge: Fix error handling in analogix_dp_probe (git-fixes).\n- drm/edid: fix invalid EDID extension block filtering (git-fixes).\n- drm/i915: Fix -Wstringop-overflow warning in call to intel_read_wm_latency() (git-fixes).\n- drm/i915: Fix CFI violation with show_dynamic_id() (git-fixes).\n- drm/i915: fix i915_globals_exit() section mismatch error (git-fixes).\n- drm/i915: Fix SEL_FETCH_PLANE_*(PIPE_B+) register addresses (git-fixes).\n- drm/komeda: Fix an undefined behavior bug in komeda_plane_add() (git-fixes).\n- drm/komeda: return early if drm_universal_plane_init() fails (git-fixes).\n- drm/mediatek: Fix mtk_cec_mask() (git-fixes).\n- drm/msm: return an error pointer in msm_gem_prime_get_sg_table() (git-fixes).\n- drm/msm/a6xx: Fix refcount leak in a6xx_gpu_init (git-fixes).\n- drm/msm/disp/dpu1: set vbif hw config to NULL to avoid use after memory free during pm runtime resume (git-fixes).\n- drm/msm/dpu: adjust display_v_end for eDP and DP (git-fixes).\n- drm/msm/dsi: fix address for second DSI PHY on SDM660 (git-fixes).\n- drm/msm/dsi: fix error checks and return values for DSI xmit functions (git-fixes).\n- drm/msm/hdmi: check return value after calling platform_get_resource_byname() (git-fixes).\n- drm/msm/hdmi: fix error check return value of irq_of_parse_and_map() (git-fixes).\n- drm/msm/mdp5: check the return of kzalloc() (git-fixes).\n- drm/msm/mdp5: Return error code in mdp5_mixer_release when deadlock is detected (git-fixes).\n- drm/msm/mdp5: Return error code in mdp5_pipe_release when deadlock is detected (git-fixes).\n- drm/nouveau: Fix a potential theorical leak in nouveau_get_backlight_name() (git-fixes).\n- drm/nouveau/clk: Fix an incorrect NULL check on list iterator (git-fixes).\n- drm/nouveau/kms/nv50-: atom: fix an incorrect NULL check on list iterator (git-fixes).\n- drm/nouveau/tegra: Stop using iommu_present() (git-fixes).\n- drm/panel: simple: Add missing bus flags for Innolux G070Y2-L01 (git-fixes).\n- drm/plane: Move range check for format_count earlier (git-fixes).\n- drm/radeon: fix a possible null pointer dereference (git-fixes).\n- drm/rockchip: vop: fix possible null-ptr-deref in vop_bind() (git-fixes).\n- drm/vc4: hvs: Reset muxes at probe time (git-fixes).\n- drm/vc4: txp: Do not set TXP_VSTART_AT_EOF (git-fixes).\n- drm/vc4: txp: Force alpha to be 0xff if it\u0027s disabled (git-fixes).\n- drm/virtio: fix NULL pointer dereference in virtio_gpu_conn_get_modes (git-fixes).\n- drm/vmwgfx: Initialize drm_mode_fb_cmd2 (git-fixes).\n- EDAC/synopsys: Read the error count from the correct register (bsc#1178134).\n- efi: Add missing prototype for efi_capsule_setup_info (git-fixes).\n- efi: Do not import certificates from UEFI Secure Boot for T2 Macs (git-fixes).\n- fbcon: Consistently protect deferred_takeover with console_lock() (git-fixes).\n- firewire: core: extend card-\u003elock in fw_core_handle_bus_reset (git-fixes).\n- firewire: fix potential uaf in outbound_phy_packet_callback() (git-fixes).\n- firewire: remove check of list iterator against head past the loop body (git-fixes).\n- firmware: arm_scmi: Fix list protocols enumeration in the base protocol (git-fixes).\n- firmware: arm_scmi: Validate BASE_DISCOVER_LIST_PROTOCOLS response (git-fixes).\n- firmware: dmi-sysfs: Fix memory leak in dmi_sysfs_register_handle (git-fixes).\n- firmware: stratix10-svc: fix a missing check on list iterator (git-fixes).\n- ftrace: Clean up hash direct_functions on register failures (git-fixes).\n- genirq: Fix reference leaks on irq affinity notifiers (git-fixes)\n- genirq: Let GENERIC_IRQ_IPI select IRQ_DOMAIN_HIERARCHY (git-fixes)\n- genirq/affinity: Consider that CPUs on nodes can be (git-fixes)\n- genirq/affinity: Handle affinity setting on inactive (git-fixes)\n- genirq/msi: Ensure deactivation on teardown (git-fixes)\n- genirq/proc: Reject invalid affinity masks (again) (git-fixes)\n- genirq/timings: Fix error return code in (git-fixes)\n- genirq/timings: Prevent potential array overflow in (git-fixes)\n- gma500: fix an incorrect NULL check on list iterator (git-fixes).\n- gpio: adp5588: Remove support for platform setup and teardown callbacks (git-fixes).\n- gpio: gpio-vf610: do not touch other bits when set the target bit (git-fixes).\n- gpio: mvebu/pwm: Refuse requests with inverted polarity (git-fixes).\n- gpio: pca953x: fix irq_stat not updated when irq is disabled (irq_mask not set) (git-fixes).\n- gpio: pca953x: use the correct register address to do regcache sync (git-fixes).\n- gpiolib: of: fix bounds check for \u0027gpio-reserved-ranges\u0027 (git-fixes).\n- hex2bin: fix access beyond string end (git-fixes).\n- HID: bigben: fix slab-out-of-bounds Write in bigben_probe (git-fixes).\n- HID: elan: Fix potential double free in elan_input_configured (git-fixes).\n- HID: hid-led: fix maximum brightness for Dream Cheeky (git-fixes).\n- HID: multitouch: Add support for Google Whiskers Touchpad (git-fixes).\n- hinic: fix bug of wq out of bound access (bsc#1176447).\n- hwmon: (f71882fg) Fix negative temperature (git-fixes).\n- hwmon: (ltq-cputemp) restrict it to SOC_XWAY (git-fixes).\n- hwmon: (tmp401) Add OF device ID table (git-fixes).\n- hwmon: Make chip parameter for with_info API mandatory (git-fixes).\n- i2c: at91: Initialize dma_buf in at91_twi_xfer() (git-fixes).\n- i2c: at91: use dma safe buffers (git-fixes).\n- i2c: cadence: Increase timeout per message if necessary (git-fixes).\n- i2c: ismt: Provide a DMA buffer for Interrupt Cause Logging (git-fixes).\n- i2c: mt7621: fix missing clk_disable_unprepare() on error in mtk_i2c_probe() (git-fixes).\n- i40e: stop disabling VFs due to PF error responses (git-fixes).\n- ice: arfs: fix use-after-free when freeing @rx_cpu_rmap (jsc#SLE-12878).\n- ice: Clear default forwarding VSI during VSI release (jsc#SLE-12878).\n- ice: Do not skip not enabled queues in ice_vc_dis_qs_msg (jsc#SLE-7926).\n- ice: Fix race conditions between virtchnl handling and VF ndo ops (git-fixes).\n- ice: synchronize_rcu() when terminating rings (jsc#SLE-7926).\n- iio: adc: ad7124: Remove shift from scan_type (git-fixes).\n- iio: adc: sc27xx: Fine tune the scale calibration values (git-fixes).\n- iio: adc: sc27xx: fix read big scale voltage not right (git-fixes).\n- iio: adc: stmpe-adc: Fix wait_for_completion_timeout return value check (git-fixes).\n- iio: dac: ad5446: Fix read_raw not returning set value (git-fixes).\n- iio: dac: ad5592r: Fix the missing return value (git-fixes).\n- iio: dummy: iio_simple_dummy: check the return value of kstrdup() (git-fixes).\n- iio: magnetometer: ak8975: Fix the error handling in ak8975_power_on() (git-fixes).\n- Input: add bounds checking to input_set_capability() (git-fixes).\n- Input: bcm5974 - set missing URB_NO_TRANSFER_DMA_MAP urb flag (git-fixes).\n- Input: goodix - fix spurious key release events (git-fixes).\n- Input: ili210x - fix reset timing (git-fixes).\n- Input: sparcspkr - fix refcount leak in bbc_beep_probe (git-fixes).\n- Input: stmfts - do not leave device disabled in stmfts_input_open (git-fixes).\n- Input: stmfts - fix reference leak in stmfts_input_open (git-fixes).\n- iommu/amd: Increase timeout waiting for GA log enablement (bsc#1199052).\n- ionic: avoid races in ionic_heartbeat_check (bsc#1167773).\n- ionic: Cleanups in the Tx hotpath code (bsc#1167773).\n- ionic: disable napi when ionic_lif_init() fails (bsc#1167773).\n- ionic: Do not send reset commands if FW isn\u0027t running (bsc#1167773).\n- ionic: fix missing pci_release_regions() on error in ionic_probe() (bsc#1167773).\n- ionic: fix type complaint in ionic_dev_cmd_clean() (jsc#SLE-16649).\n- ionic: monitor fw status generation (bsc#1167773).\n- ionic: remove the dbid_inuse bitmap (bsc#1167773).\n- ionic: start watchdog after all is setup (bsc#1167773).\n- ipw2x00: Fix potential NULL dereference in libipw_xmit() (git-fixes).\n- irqchip: irq-xtensa-mx: fix initial IRQ affinity (git-fixes).\n- irqchip/armada-370-xp: Do not touch Performance Counter Overflow on A375, A38x, A39x (git-fixes).\n- irqchip/aspeed-i2c-ic: Fix irq_of_parse_and_map() return value (git-fixes).\n- irqchip/exiu: Fix acknowledgment of edge triggered interrupts (git-fixes).\n- ivtv: fix incorrect device_caps for ivtvfb (git-fixes).\n- iwlwifi: iwl-dbg: Use del_timer_sync() before freeing (git-fixes).\n- iwlwifi: mvm: fix assert 1F04 upon reconfig (git-fixes).\n- iwlwifi: mvm: fix the return type for DSM functions 1 and 2 (git-fixes).\n- jbd2: Fake symbols defined under CONFIG_JBD2_DEBUG (bsc#1198971).\n- kABI: ivtv: restore caps member (git-fixes).\n- Kconfig.debug: drop selecting non-existing HARDLOCKUP_DETECTOR_ARCH (git-fixes).\n- KVM: fix wrong exception emulation in check_rdtsc (git-fixes).\n- KVM: nVMX: Invalidate all roots when emulating INVVPID without EPT (git-fixes).\n- KVM: nVMX: Query current VMCS when determining if MSR bitmaps are in use (git-fixes).\n- KVM: nVMX: Set LDTR to its architecturally defined value on nested VM-Exit (git-fixes).\n- KVM: nVMX: Unconditionally clear nested.pi_pending on nested VM-Enter (git-fixes).\n- KVM: PPC: Fix TCE handling for VFIO (bsc#1061840 git-fixes).\n- KVM: s390: pv: add macros for UVC CC values (git-fixes).\n- KVM: s390: pv: avoid double free of sida page (git-fixes).\n- KVM: s390: pv: avoid stalls for kvm_s390_pv_init_vm (git-fixes).\n- KVM: s390: vsie/gmap: reduce gmap_rmap overhead (git-fixes).\n- KVM: VMX: Fix stale docs for kvm-intel.emulate_invalid_guest_state (git-fixes).\n- KVM: VMX: Flush all EPTP/VPID contexts on remote TLB flush (git-fixes).\n- KVM: VMX: Use current VMCS to query WAITPKG support for MSR emulation (git-fixes).\n- KVM: x86: clflushopt should be treated as a no-op by emulation (git-fixes).\n- KVM: x86: Do not force set BSP bit when local APIC is managed by userspace (git-fixes).\n- KVM: x86: Fix emulation in writing cr8 (git-fixes).\n- KVM: x86: Fix off-by-one error in kvm_vcpu_ioctl_x86_setup_mce (git-fixes).\n- KVM: x86: Immediately reset the MMU context when the SMM flag is cleared (git-fixes).\n- KVM: x86: Inject #GP if guest attempts to toggle CR4.LA57 in 64-bit mode (git-fixes).\n- KVM: x86: Mark CR4.TSD as being possibly owned by the guest (git-fixes).\n- KVM: x86: Migrate the PIT only if vcpu0 is migrated, not any BSP (git-fixes).\n- KVM: x86: Toggling CR4.PKE does not load PDPTEs in PAE mode (git-fixes).\n- KVM: x86: Toggling CR4.SMAP does not load PDPTEs in PAE mode (git-fixes).\n- KVM: x86/cpuid: Only provide CPUID leaf 0xA if host has architectural PMU (git-fixes).\n- KVM: x86/emulator: Defer not-present segment check in __load_segment_descriptor() (git-fixes).\n- KVM: x86/pmu: Fix HW_REF_CPU_CYCLES event pseudo-encoding in intel_arch_events[] (git-fixes).\n- lan743x: fix rx_napi_poll/interrupt ping-pong (git-fixes).\n- lan743x: remove redundant assignment to variable rx_process_result (git-fixes).\n- lib/raid6/test: fix multiple definition linking error (git-fixes).\n- lpfc: Readd update to version 14.2.0.1 (bsc#1197675 bsc#1196478 bsc#1198989) The update was reverted due to some regression on older hardware. These have been fixed in the meantime, thus update the driver.\n- mac80211_hwsim: call ieee80211_tx_prepare_skb under RCU protection (git-fixes).\n- mac80211: fix rx reordering with non explicit / psmp ack policy (git-fixes).\n- mac80211: Reset MBSSID parameters upon connection (git-fixes).\n- mac80211: upgrade passive scan to active scan on DFS channels after beacon rx (git-fixes).\n- md: fix an incorrect NULL check in does_sb_need_changing (git-fixes).\n- md: fix an incorrect NULL check in md_reload_sb (git-fixes).\n- media: cx25821: Fix the warning when removing the module (git-fixes).\n- media: davinci: Make use of the helper function devm_platform_ioremap_resource() (git-fixes).\n- media: davinci: vpif: fix unbalanced runtime PM enable (git-fixes).\n- media: davinci: vpif: fix use-after-free on driver unbind (git-fixes).\n- media: media-entity.h: Fix documentation for media_create_intf_link (git-fixes).\n- media: netup_unidvb: Do not leak SPI master in probe error path (git-fixes).\n- media: ov7670: remove ov7670_power_off from ov7670_remove (git-fixes).\n- media: pci: cx23885: Fix the error handling in cx23885_initdev() (git-fixes).\n- media: platform: add missing put_device() call in mtk_jpeg_probe() and mtk_jpeg_remove() (git-fixes).\n- media: pvrusb2: fix array-index-out-of-bounds in pvr2_i2c_core_init (git-fixes).\n- media: saa7134: fix incorrect use to determine if list is empty (git-fixes).\n- media: uvcvideo: Fix missing check to determine if element is found in list (git-fixes).\n- media: venus: hfi: avoid null dereference in deinit (git-fixes).\n- media: videobuf2: Fix the size printk format (git-fixes).\n- media: vim2m: Register video device after setting up internals (git-fixes).\n- mfd: ipaq-micro: Fix error check return value of platform_get_irq() (git-fixes).\n- misc: ocxl: fix possible double free in ocxl_file_register_afu (git-fixes).\n- misc: rtsx: set NULL intfdata when probe fails (git-fixes).\n- mm, page_alloc: fix build_zonerefs_node() (git-fixes).\n- mm/mmu_notifier.c: fix race in mmu_interval_notifier_remove() (jsc#SLE-15176, jsc#SLE-16387).\n- mmc: block: Fix CQE recovery reset success (git-fixes).\n- mmc: block: Use generic_cmd6_time when modifying INAND_CMD38_ARG_EXT_CSD (git-fixes).\n- mmc: core: Specify timeouts for BKOPS and CACHE_FLUSH for eMMC (git-fixes).\n- mmc: jz4740: Apply DMA engine limits to maximum segment size (git-fixes).\n- modpost: fix removing numeric suffixes (git-fixes).\n- modpost: fix undefined behavior of is_arm_mapping_symbol() (git-fixes).\n- mt76: check return value of mt76_txq_send_burst in mt76_txq_schedule_list (git-fixes).\n- mt76: Fix undefined behavior due to shift overflowing the constant (git-fixes).\n- mt76: mt7663s: fix rx buffer refcounting (git-fixes).\n- mtd: rawnand: fix ecc parameters for mt7622 (git-fixes).\n- mtd: rawnand: Fix return value check of wait_for_completion_timeout (git-fixes).\n- mtd: spi-nor: core: Check written SR value in spi_nor_write_16bit_sr_and_check() (git-fixes).\n- mwifiex: add mutex lock for call in mwifiex_dfs_chan_sw_work_queue (git-fixes).\n- net: bcmgenet: Fix a resource leak in an error handling path in the probe functin (git-fixes).\n- net: dsa: lantiq_gswip: Enable GSWIP_MII_CFG_EN also for internal PHYs (git-fixes).\n- net: dsa: lantiq_gswip: Fix GSWIP_MII_CFG(p) register access (git-fixes).\n- net: ethernet: Fix memleak in ethoc_probe (git-fixes).\n- net: ethernet: ti: cpts: fix ethtool output when no ptp_clock registered (git-fixes).\n- net: hdlc_ppp: Fix issues when mod_timer is called while timer is running (git-fixes).\n- net: hns3: add a check for index in hclge_get_rss_key() (git-fixes).\n- net: hns3: clear inited state and stop client after failed to register netdev (bsc#1154353).\n- net: hns3: fix bug when PF set the duplicate MAC address for VFs (jsc#SLE-14777).\n- net: hns3: fix kernel crash when unload VF while it is being reset (git-fixes).\n- net: korina: fix return value (git-fixes).\n- net: rtlwifi: properly check for alloc_workqueue() failure (git-fixes).\n- net: sched: fixed barrier to prevent skbuff sticking in qdisc backlog (bsc#1183405).\n- net: stmmac: dwmac-sun8i: Balance internal PHY power (git-fixes).\n- net: stmmac: dwmac-sun8i: Balance internal PHY resource references (git-fixes).\n- net: stmmac: dwmac-sun8i: Balance syscon (de)initialization (git-fixes).\n- net: stmmac: dwmac-sun8i: Fix probe error handling (git-fixes).\n- net/mlx5: Fix a race on command flush flow (jsc#SLE-15172).\n- net/mlx5e: Fix the calling of update_buffer_lossy() API (jsc#SLE-15172).\n- netdevice: demote the type of some dev_addr_set() helpers (bsc#1200216).\n- netfilter: conntrack: connection timeout after re-register (bsc#1199035).\n- netfilter: conntrack: move synack init code to helper (bsc#1199035).\n- netfilter: conntrack: re-init state for retransmitted syn-ack (bsc#1199035).\n- netfilter: nf_conntrack_tcp: preserve liberal flag in tcp options (bsc#1199035).\n- netfilter: nf_conntrack_tcp: re-init for syn packets only (bsc#1199035).\n- netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion (bsc#1176447).\n- NFC: hci: fix sleep in atomic context bugs in nfc_hci_hcp_message_tx (git-fixes).\n- NFC: nci: fix sleep in atomic context bugs caused by nci_skb_alloc (git-fixes).\n- NFC: netlink: fix sleep in atomic bug when firmware download timeout (git-fixes).\n- NFC: nfcmrvl: main: reorder destructive operations in nfcmrvl_nci_unregister_dev to avoid bugs (git-fixes).\n- NFC: NULL out the dev-\u003erfkill to prevent UAF (git-fixes).\n- NFC: st21nfca: fix incorrect sizing calculations in EVT_TRANSACTION (git-fixes).\n- NFC: st21nfca: fix incorrect validating logic in EVT_TRANSACTION (git-fixes).\n- NFC: st21nfca: fix memory leaks in EVT_TRANSACTION handling (git-fixes).\n- NFS: Do not report ENOSPC write errors twice (git-fixes).\n- NFS: limit use of ACCESS cache for negative responses (bsc#1196570).\n- nfsd: Fix null-ptr-deref in nfsd_fill_super() (git-fixes).\n- NFSv4: Do not invalidate inode attributes on delegation return (git-fixes).\n- nl80211: show SSID for P2P_GO interfaces (git-fixes).\n- nvdimm/region: always show the \u0027align\u0027 attribute (bsc#1199114).\n- nvme-tcp: allow selecting the network interface for connections (bsc#1199670).\n- nvme-tcp: use __dev_get_by_name instead dev_get_by_name for OPT_HOST_IFACE (bsc#1199670).\n- objtool: Fix type of reloc::addend (git-fixes).\n- PCI: aardvark: Clear all MSIs at setup (git-fixes).\n- PCI: cadence: Fix find_first_zero_bit() limit (git-fixes).\n- PCI: Do not enable AtomicOps on VFs (git-fixes).\n- PCI: dwc: Fix setting error return on MSI DMA mapping failure (git-fixes).\n- PCI: hv: Do not set PCI_COMMAND_MEMORY to reduce VM boot time (bsc#1199314).\n- PCI: hv: Fix NUMA node assignment when kernel boots with custom NUMA topology (bsc#1199365).\n- PCI: imx6: Fix PERST# start-up sequence (git-fixes).\n- PCI: iproc: Set affinity mask on MSI interrupts (git-fixes).\n- PCI: qcom: Fix runtime PM imbalance on probe errors (git-fixes).\n- PCI: qcom: Fix unbalanced PHY init on probe errors (git-fixes).\n- PCI: rockchip: Fix find_first_zero_bit() limit (git-fixes).\n- PCI/AER: Clear MULTI_ERR_COR/UNCOR_RCV bits (git-fixes).\n- PCI/PM: Power up all devices during runtime resume (git-fixes).\n- pcmcia: db1xxx_ss: restrict to MIPS_DB1XXX boards (git-fixes).\n- phy: mapphone-mdm6600: Fix PM error handling in phy_mdm6600_probe (git-fixes).\n- phy: qcom-qmp: fix pipe-clock imbalance on power-on failure (git-fixes).\n- phy: qcom-qmp: fix reset-controller leak on probe errors (git-fixes).\n- phy: qcom-qmp: fix struct clk leak on probe errors (git-fixes).\n- phy: samsung: exynos5250-sata: fix missing device put in probe error paths (git-fixes).\n- phy: samsung: Fix missing of_node_put() in exynos_sata_phy_probe (git-fixes).\n- phy: ti: Add missing pm_runtime_disable() in serdes_am654_probe (git-fixes).\n- phy: ti: omap-usb2: Fix error handling in omap_usb2_enable_clocks (git-fixes).\n- pinctrl: mvebu: Fix irq_of_parse_and_map() return value (git-fixes).\n- pinctrl: pistachio: fix use of irq_of_parse_and_map() (git-fixes).\n- pinctrl: rockchip: fix RK3308 pinmux bits (git-fixes).\n- pinctrl: sunxi: fix f1c100s uart2 function (git-fixes).\n- pinctrl/rockchip: support deferring other gpio params (git-fixes).\n- ping: fix the sk_bound_dev_if match in ping_lookup (bsc#1195826).\n- ping: remove pr_err from ping_lookup (bsc#1195826).\n- platform/chrome: cros_ec_debugfs: detach log reader wq from devm (git-fixes).\n- platform/chrome: cros_ec_proto: Send command again when timeout occurs (git-fixes).\n- platform/x86: samsung-laptop: Fix an unsigned comparison which can never be negative (git-fixes).\n- platform/x86: wmi: Fix driver-\u003enotify() vs -\u003eprobe() race (git-fixes).\n- platform/x86: wmi: Replace read_takes_no_args with a flags field (git-fixes).\n- PM / devfreq: rk3399_dmc: Disable edev on remove() (git-fixes).\n- powerpc: Enable the DAWR on POWER9 DD2.3 and above (bsc#1055117 ltc#159753).\n- powerpc/64s: Add CPU_FTRS_POWER10 to ALWAYS mask (jsc#SLE-13521 git-fixes).\n- powerpc/64s: Add CPU_FTRS_POWER9_DD2_2 to CPU_FTRS_ALWAYS mask (bsc#1061840 git-fixes).\n- powerpc/64s/radix: Fix huge vmap false positive (bsc#1156395).\n- powerpc/fadump: fix PT_LOAD segment for boot memory area (bsc#1103269 ltc#169948 git-fixes).\n- powerpc/powernv: Add __init attribute to eligible functions (bsc#1188885 ltc#193722 git-fixes).\n- powerpc/powernv: Get L1D flush requirements from device-tree (bsc#1188885 ltc#193722 git-fixes).\n- powerpc/powernv: Get STF barrier requirements from device-tree (bsc#1188885 ltc#193722 git-fixes).\n- powerpc/powernv: Remove POWER9 PVR version check for entry and uaccess flushes (bsc#1188885 ltc#193722 git-fixes).\n- powerpc/xive: Add some error handling code to \u0027xive_spapr_init()\u0027 (git-fixes).\n- powerpc/xive: Fix refcount leak in xive_spapr_init (git-fixes).\n- pwm: lp3943: Fix duty calculation in case period was clamped (git-fixes).\n- pwm: raspberrypi-poe: Fix endianness in firmware struct (git-fixes).\n- qlcnic: Fix error code in probe (git-fixes).\n- raid5: introduce MD_BROKEN (git-fixes).\n- regulator: core: Fix enable_count imbalance with EXCLUSIVE_GET (git-fixes).\n- regulator: pfuze100: Fix refcount leak in pfuze_parse_regulators_dt (git-fixes).\n- rtc: fix use-after-free on device removal (git-fixes).\n- rtc: mc146818-lib: Fix the AltCentury for AMD platforms (git-fixes).\n- rtc: mt6397: check return value after calling platform_get_resource() (git-fixes).\n- rtl818x: Prevent using not initialized queues (git-fixes).\n- rtlwifi: Use pr_warn instead of WARN_ONCE (git-fixes).\n- s390: fix detection of vector enhancements facility 1 vs. vector packed decimal facility (git-fixes).\n- s390: fix strrchr() implementation (git-fixes).\n- s390/cio: dont call css_wait_for_slow_path() inside a lock (git-fixes).\n- s390/cio: Fix the \u0027type\u0027 field in s390_cio_tpi tracepoint (git-fixes).\n- s390/crypto: fix scatterwalk_unmap() callers in AES-GCM (git-fixes).\n- s390/ctcm: fix potential memory leak (git-fixes).\n- s390/ctcm: fix variable dereferenced before check (git-fixes).\n- s390/dasd: fix data corruption for ESE devices (bsc#1200207 LTC#198454).\n- s390/dasd: Fix read for ESE with blksize 4k (bsc#1200206 LTC#198455).\n- s390/dasd: Fix read inconsistency for ESE DASD devices (bsc#1200206 LTC#198455).\n- s390/dasd: prevent double format of tracks for ESE devices (bsc#1200207 LTC#198454).\n- s390/ftrace: fix ftrace_update_ftrace_func implementation (git-fixes).\n- s390/lcs: fix variable dereferenced before check (git-fixes).\n- s390/mcck: fix invalid KVM guest condition check (git-fixes).\n- s390/mcck: isolate SIE instruction when setting CIF_MCCK_GUEST flag (git-fixes).\n- s390/nmi: handle guarded storage validity failures for KVM guests (git-fixes).\n- s390/nmi: handle vector validity failures for KVM guests (git-fixes).\n- s390/pv: fix the forcing of the swiotlb (git-fixes).\n- s390/qdio: cancel the ESTABLISH ccw after timeout (git-fixes).\n- s390/qdio: fix roll-back after timeout on ESTABLISH ccw (git-fixes).\n- s390/vfio-ap: fix circular lockdep when setting/clearing crypto masks (git-fixes).\n- sata_fsl: fix UAF in sata_fsl_port_stop when rmmod sata_fsl (git-fixes).\n- sata_fsl: fix warning in remove_proc_entry when rmmod sata_fsl (git-fixes).\n- sched/pelt: Fix attach_entity_load_avg() corner case (git-fixes)\n- sched/topology: Skip updating masks for non-online nodes (bsc#1197446 ltc#183000).\n- scsi: dc395x: Fix a missing check on list iterator (git-fixes).\n- scsi: fnic: Fix a tracing statement (git-fixes).\n- scsi: fnic: Replace DMA mask of 64 bits with 47 bits (bsc#1199631).\n- scsi: hisi_sas: Change permission of parameter prot_mask (git-fixes).\n- scsi: lpfc: Alter FPIN stat accounting logic (bsc#1200045).\n- scsi: lpfc: Change FA-PWWN detection methodology (bsc#1200045).\n- scsi: lpfc: Change VMID registration to be based on fabric parameters (bsc#1200045).\n- scsi: lpfc: Clear fabric topology flag before initiating a new FLOGI (bsc#1200045).\n- scsi: lpfc: Copyright updates for 14.2.0.2 patches (bsc#1200045).\n- scsi: lpfc: Correct BDE DMA address assignment for GEN_REQ_WQE (bsc#1200045 bsc#1198989 bsc#1197675).\n- scsi: lpfc: Correct CRC32 calculation for congestion stats (bsc#1200045).\n- scsi: lpfc: Decrement outstanding gidft_inp counter if lpfc_err_lost_link() (bsc#1200045).\n- scsi: lpfc: Expand setting ELS_ID field in ELS_REQUEST64_WQE (bsc#1200045).\n- scsi: lpfc: Fill in missing ndlp kref puts in error paths (bsc#1200045).\n- scsi: lpfc: Fix additional reference counting in lpfc_bsg_rport_els() (bsc#1200045).\n- scsi: lpfc: Fix call trace observed during I/O with CMF enabled (bsc#1200045).\n- scsi: lpfc: Fix diagnostic fw logging after a function reset (bsc#1200045).\n- scsi: lpfc: Fix dmabuf ptr assignment in lpfc_ct_reject_event() (bsc#1200045).\n- scsi: lpfc: Fix element offset in __lpfc_sli_release_iocbq_s4() (bsc#1200045).\n- scsi: lpfc: Fix field overload in lpfc_iocbq data structure (bsc#1200045).\n- scsi: lpfc: Fix ndlp put following a LOGO completion (bsc#1200045).\n- scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI (bsc#1200045).\n- scsi: lpfc: Fix resource leak in lpfc_sli4_send_seq_to_ulp() (bsc#1200045).\n- scsi: lpfc: Fix SCSI I/O completion and abort handler deadlock (bsc#1200045).\n- scsi: lpfc: Fix split code for FLOGI on FCoE (bsc#1200045 bsc#1198989 bsc#1197675).\n- scsi: lpfc: Inhibit aborts if external loopback plug is inserted (bsc#1200045).\n- scsi: lpfc: Introduce FC_RSCN_MEMENTO flag for tracking post RSCN completion (bsc#1200045).\n- scsi: lpfc: Move cfg_log_verbose check before calling lpfc_dmp_dbg() (bsc#1200045).\n- scsi: lpfc: Move MI module parameter check to handle dynamic disable (bsc#1200045).\n- scsi: lpfc: Protect memory leak for NPIV ports sending PLOGI_RJT (bsc#1200045).\n- scsi: lpfc: Refactor cleanup of mailbox commands (bsc#1200045).\n- scsi: lpfc: Register for Application Services FC-4 type in Fabric topology (bsc#1200045).\n- scsi: lpfc: Remove false FDMI NVMe FC-4 support for NPIV ports (bsc#1200045).\n- scsi: lpfc: Remove redundant lpfc_sli_prep_wqe() call (bsc#1200045).\n- scsi: lpfc: Remove unnecessary null ndlp check in lpfc_sli_prep_wqe() (bsc#1200045).\n- scsi: lpfc: Remove unnecessary NULL pointer assignment for ELS_RDF path (bsc#1200045).\n- scsi: lpfc: Remove unneeded variable (bsc#1200045).\n- scsi: lpfc: Requeue SCSI I/O to upper layer when fw reports link down (bsc#1200045).\n- scsi: lpfc: Revise FDMI reporting of supported port speed for trunk groups (bsc#1200045).\n- scsi: lpfc: Rework FDMI initialization after link up (bsc#1200045).\n- scsi: lpfc: Transition to NPR state upon LOGO cmpl if link down or aborted (bsc#1200045).\n- scsi: lpfc: Tweak message log categories for ELS/FDMI/NVMe rescan (bsc#1200045).\n- scsi: lpfc: Update fc_prli_sent outstanding only after guaranteed IOCB submit (bsc#1200045).\n- scsi: lpfc: Update lpfc version to 14.2.0.2 (bsc#1200045).\n- scsi: lpfc: Update lpfc version to 14.2.0.3 (bsc#1200045).\n- scsi: lpfc: Update stat accounting for READ_STATUS mbox command (bsc#1200045).\n- scsi: lpfc: Use list_for_each_entry_safe() in rscn_recovery_check() (bsc#1200045).\n- scsi: lpfc: Use sg_dma_address() and sg_dma_len() macros for NVMe I/O (bsc#1200045).\n- scsi: lpfc: Zero SLI4 fcp_cmnd buffer\u0027s fcpCntl0 field (bsc#1200045).\n- scsi: pm8001: Fix abort all task initialization (git-fixes).\n- scsi: pm8001: Fix command initialization in pm8001_chip_ssp_tm_req() (git-fixes).\n- scsi: pm8001: Fix command initialization in pm80XX_send_read_log() (git-fixes).\n- scsi: pm8001: Fix le32 values handling in pm80xx_chip_sata_req() (git-fixes).\n- scsi: pm8001: Fix le32 values handling in pm80xx_chip_ssp_io_req() (git-fixes).\n- scsi: pm8001: Fix le32 values handling in pm80xx_set_sas_protocol_timer_config() (git-fixes).\n- scsi: pm8001: Fix NCQ NON DATA command completion handling (git-fixes).\n- scsi: pm8001: Fix NCQ NON DATA command task initialization (git-fixes).\n- scsi: pm8001: Fix payload initialization in pm80xx_encrypt_update() (git-fixes).\n- scsi: pm8001: Fix payload initialization in pm80xx_set_thermal_config() (git-fixes).\n- scsi: pm80xx: Enable upper inbound, outbound queues (git-fixes).\n- scsi: pm80xx: Mask and unmask upper interrupt vectors 32-63 (git-fixes).\n- scsi: qla2xxx: edif: Remove unneeded variable (bsc#1200046).\n- scsi: qla2xxx: Fix missed DMA unmap for aborted commands (bsc#1200046).\n- scsi: qla2xxx: Remove free_sg command flag (bsc#1200046).\n- scsi: qla2xxx: Remove unneeded flush_workqueue() (bsc#1200046).\n- scsi: sr: Do not leak information in ioctl (git-fixes).\n- scsi: ufs: core: Exclude UECxx from SFR dump list (git-fixes).\n- scsi: ufs: qcom: Add a readl() to make sure ref_clk gets enabled (git-fixes).\n- scsi: ufs: qcom: Fix ufs_qcom_resume() (git-fixes).\n- scsi: virtio-scsi: Eliminate anonymous module_init and module_exit (git-fixes).\n- scsi: zorro7xx: Fix a resource leak in zorro7xx_remove_one() (git-fixes).\n- selftests: firmware: Use smaller dictionary for XZ compression (git-fixes).\n- serial: 8250_fintek: Check SER_RS485_RTS_* only with RS485 (git-fixes).\n- serial: 8250_mtk: Fix register address for XON/XOFF character (git-fixes).\n- serial: 8250_mtk: Fix UART_EFR register address (git-fixes).\n- serial: 8250: Also set sticky MCR bits in console restoration (git-fixes).\n- serial: 8250: core: Remove unneeded linux/pm_runtime.h (git-fixes).\n- serial: 8250: Correct the clock for EndRun PTP/1588 PCIe device (git-fixes).\n- serial: 8250: pxa: Remove unneeded linux/pm_runtime.h (git-fixes).\n- serial: digicolor-usart: Do not allow CS5-6 (git-fixes).\n- serial: imx: fix overrun interrupts in DMA mode (git-fixes).\n- serial: meson: acquire port-\u003elock in startup() (git-fixes).\n- serial: msm_serial: disable interrupts in __msm_console_write() (git-fixes).\n- serial: pch: do not overwrite xmit-\u003ebuf[0] by x_char (git-fixes).\n- serial: rda-uart: Do not allow CS5-6 (git-fixes).\n- serial: sh-sci: Do not allow CS5-6 (git-fixes).\n- serial: sifive: Sanitize CSIZE and c_iflag (git-fixes).\n- serial: st-asc: Sanitize CSIZE and correct PARENB for CS7 (git-fixes).\n- serial: stm32-usart: Correct CSIZE, bits, and parity (git-fixes).\n- serial: txx9: Do not allow CS5-6 (git-fixes).\n- slimbus: qcom: Fix IRQ check in qcom_slim_probe (git-fixes).\n- smp: Fix offline cpu check in flush_smp_call_function_queue() (git-fixes).\n- smsc911x: allow using IRQ0 (git-fixes).\n- soc: qcom: smp2p: Fix missing of_node_put() in smp2p_parse_ipc (git-fixes).\n- soc: qcom: smsm: Fix missing of_node_put() in smsm_parse_ipc (git-fixes).\n- soc: rockchip: Fix refcount leak in rockchip_grf_init (git-fixes).\n- spi: img-spfi: Fix pm_runtime_get_sync() error checking (git-fixes).\n- spi: Introduce device-managed SPI controller allocation (git-fixes).\n- spi: spi-cadence: Fix kernel-doc format for resume/suspend (git-fixes).\n- spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname() (git-fixes).\n- spi: spi-rspi: Remove setting {src,dst}_{addr,addr_width} based on DMA direction (git-fixes).\n- spi: spi-ti-qspi: Fix return value handling of wait_for_completion_timeout (git-fixes).\n- spi: stm32-qspi: Fix wait_cmd timeout in APM mode (git-fixes).\n- staging: fieldbus: Fix the error handling path in anybuss_host_common_probe() (git-fixes).\n- staging: rtl8712: fix uninit-value in r871xu_drv_init() (git-fixes).\n- staging: rtl8712: fix uninit-value in usb_read8() and friends (git-fixes).\n- SUNRPC: Ensure gss-proxy connects on setup (git-fixes).\n- SUNRPC: Ensure that the gssproxy client can start in a connected state (git-fixes).\n- thermal: int340x: Fix attr.show callback prototype (git-fixes).\n- thermal/drivers/bcm2711: Do not clamp temperature at zero (git-fixes).\n- thermal/drivers/broadcom: Fix potential NULL dereference in sr_thermal_probe (git-fixes).\n- tilcdc: tilcdc_external: fix an incorrect NULL check on list iterator (git-fixes).\n- timekeeping: Really make sure wall_to_monotonic isn\u0027t (git-fixes)\n- timers: Fix warning condition in __run_timers() (git-fixes)\n- tpm: Fix buffer access in tpm2_get_tpm_pt() (git-fixes).\n- tpm: ibmvtpm: Correct the return value in tpm_ibmvtpm_probe() (bsc#1065729).\n- tracing: Fix potential double free in create_var_ref() (git-fixes).\n- tracing: Fix return value of trace_pid_write() (git-fixes).\n- tty: Fix a possible resource leak in icom_probe (git-fixes).\n- tty: fix deadlock caused by calling printk() under tty_port-\u003elock (git-fixes).\n- tty: goldfish: Use tty_port_destroy() to destroy port (git-fixes).\n- tty: serial: digicolor: fix possible null-ptr-deref in digicolor_uart_probe() (git-fixes).\n- tty: serial: fsl_lpuart: fix potential bug when using both of_alias_get_id and ida_simple_get (git-fixes).\n- tty: serial: owl: Fix missing clk_disable_unprepare() in owl_uart_probe (git-fixes).\n- tty: synclink_gt: Fix null-pointer-dereference in slgt_clean() (git-fixes).\n- usb: cdc-wdm: fix reading stuck on device close (git-fixes).\n- usb: core: hcd: Add support for deferring roothub registration (git-fixes).\n- usb: dwc2: gadget: do not reset gadget\u0027s driver-\u003ebus (git-fixes).\n- usb: dwc3: pci: Fix pm_runtime_get_sync() error checking (git-fixes).\n- usb: ehci-omap: drop unused ehci_read() function (git-fixes).\n- usb: gadget: configfs: clear deactivation flag in configfs_composite_unbind() (git-fixes).\n- usb: hcd-pci: Fully suspend across freeze/thaw cycle (git-fixes).\n- usb: host: isp116x: check return value after calling platform_get_resource() (git-fixes).\n- usb: misc: fix improper handling of refcount in uss720_probe() (git-fixes).\n- usb: mtu3: fix USB 3.0 dual-role-switch from device to host (git-fixes).\n- usb: musb: Fix missing of_node_put() in omap2430_probe (git-fixes).\n- usb: new quirk for Dell Gen 2 devices (git-fixes).\n- usb: quirks: add a Realtek card reader (git-fixes).\n- usb: quirks: add STRING quirk for VCOM device (git-fixes).\n- usb: serial: cp210x: add PIDs for Kamstrup USB Meter Reader (git-fixes).\n- usb: serial: option: add Fibocom L610 modem (git-fixes).\n- usb: serial: option: add Fibocom MA510 modem (git-fixes).\n- usb: serial: option: add Quectel BG95 modem (git-fixes).\n- usb: serial: option: add support for Cinterion MV32-WA/MV32-WB (git-fixes).\n- usb: serial: option: add Telit 0x1057, 0x1058, 0x1075 compositions (git-fixes).\n- usb: serial: pl2303: add device id for HP LM930 Display (git-fixes).\n- usb: serial: qcserial: add support for Sierra Wireless EM7590 (git-fixes).\n- usb: serial: whiteheat: fix heap overflow in WHITEHEAT_GET_DTR_RTS (git-fixes).\n- usb: storage: karma: fix rio_karma_init return (git-fixes).\n- usb: typec: mux: Check dev_set_name() return value (git-fixes).\n- usb: typec: tcpci: Do not skip cleanup in .remove() on error (git-fixes).\n- usb: typec: ucsi: Fix reuse of completion structure (git-fixes).\n- usb: typec: ucsi: Fix role swapping (git-fixes).\n- usb: usbip: add missing device lock on tweak configuration cmd (git-fixes).\n- usb: usbip: fix a refcount leak in stub_probe() (git-fixes).\n- vfio-ccw: Check initialized flag in cp_init() (git-fixes).\n- vfio/ccw: Remove unneeded GFP_DMA (git-fixes).\n- video: fbdev: clcdfb: Fix refcount leak in clcdfb_of_vram_setup (git-fixes).\n- video: fbdev: pxa3xx-gcu: release the resources correctly in pxa3xx_gcu_probe/remove() (git-fixes).\n- virtio/s390: implement virtio-ccw revision 2 correctly (git-fixes).\n- vringh: Fix loop descriptors check in the indirect cases (git-fixes).\n- watchdog: ts4800_wdt: Fix refcount leak in ts4800_wdt_probe (git-fixes).\n- watchdog: wdat_wdt: Stop watchdog when rebooting the system (git-fixes).\n- wifi: mac80211: fix use-after-free in chanctx code (git-fixes).\n- wireguard: device: check for metadata_dst with skb_valid_dst() (git-fixes).\n- xhci: increase usb U3 -\u003e U0 link resume timeout from 100ms to 500ms (git-fixes).\n- xhci: stop polling roothubs after shutdown (git-fixes).\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Leap-Micro-5.2-2022-2177",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2022_2177-1.json"
      },
      {
        "category": "self",
        "summary": "URL for openSUSE-SU-2022:2177-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S2QMD6CJ6PZDFYQ3RKSOGAZNRK7WC5W7/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for openSUSE-SU-2022:2177-1",
        "url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/S2QMD6CJ6PZDFYQ3RKSOGAZNRK7WC5W7/"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1055117",
        "url": "https://bugzilla.suse.com/1055117"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1061840",
        "url": "https://bugzilla.suse.com/1061840"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1065729",
        "url": "https://bugzilla.suse.com/1065729"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1103269",
        "url": "https://bugzilla.suse.com/1103269"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1118212",
        "url": "https://bugzilla.suse.com/1118212"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1153274",
        "url": "https://bugzilla.suse.com/1153274"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1154353",
        "url": "https://bugzilla.suse.com/1154353"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1156395",
        "url": "https://bugzilla.suse.com/1156395"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1158266",
        "url": "https://bugzilla.suse.com/1158266"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1167773",
        "url": "https://bugzilla.suse.com/1167773"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1176447",
        "url": "https://bugzilla.suse.com/1176447"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177282",
        "url": "https://bugzilla.suse.com/1177282"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178134",
        "url": "https://bugzilla.suse.com/1178134"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1180100",
        "url": "https://bugzilla.suse.com/1180100"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1183405",
        "url": "https://bugzilla.suse.com/1183405"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1188885",
        "url": "https://bugzilla.suse.com/1188885"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1195826",
        "url": "https://bugzilla.suse.com/1195826"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1196426",
        "url": "https://bugzilla.suse.com/1196426"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1196478",
        "url": "https://bugzilla.suse.com/1196478"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1196570",
        "url": "https://bugzilla.suse.com/1196570"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1196840",
        "url": "https://bugzilla.suse.com/1196840"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1197446",
        "url": "https://bugzilla.suse.com/1197446"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1197472",
        "url": "https://bugzilla.suse.com/1197472"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1197601",
        "url": "https://bugzilla.suse.com/1197601"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1197675",
        "url": "https://bugzilla.suse.com/1197675"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1198438",
        "url": "https://bugzilla.suse.com/1198438"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1198577",
        "url": "https://bugzilla.suse.com/1198577"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1198971",
        "url": "https://bugzilla.suse.com/1198971"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1198989",
        "url": "https://bugzilla.suse.com/1198989"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1199035",
        "url": "https://bugzilla.suse.com/1199035"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1199052",
        "url": "https://bugzilla.suse.com/1199052"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1199063",
        "url": "https://bugzilla.suse.com/1199063"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1199114",
        "url": "https://bugzilla.suse.com/1199114"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1199314",
        "url": "https://bugzilla.suse.com/1199314"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1199365",
        "url": "https://bugzilla.suse.com/1199365"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1199505",
        "url": "https://bugzilla.suse.com/1199505"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1199507",
        "url": "https://bugzilla.suse.com/1199507"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1199564",
        "url": "https://bugzilla.suse.com/1199564"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1199626",
        "url": "https://bugzilla.suse.com/1199626"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1199631",
        "url": "https://bugzilla.suse.com/1199631"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1199650",
        "url": "https://bugzilla.suse.com/1199650"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1199670",
        "url": "https://bugzilla.suse.com/1199670"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1199839",
        "url": "https://bugzilla.suse.com/1199839"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200015",
        "url": "https://bugzilla.suse.com/1200015"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200019",
        "url": "https://bugzilla.suse.com/1200019"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200045",
        "url": "https://bugzilla.suse.com/1200045"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200046",
        "url": "https://bugzilla.suse.com/1200046"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200143",
        "url": "https://bugzilla.suse.com/1200143"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200144",
        "url": "https://bugzilla.suse.com/1200144"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200192",
        "url": "https://bugzilla.suse.com/1200192"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200206",
        "url": "https://bugzilla.suse.com/1200206"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200207",
        "url": "https://bugzilla.suse.com/1200207"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200216",
        "url": "https://bugzilla.suse.com/1200216"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200249",
        "url": "https://bugzilla.suse.com/1200249"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200259",
        "url": "https://bugzilla.suse.com/1200259"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200263",
        "url": "https://bugzilla.suse.com/1200263"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200529",
        "url": "https://bugzilla.suse.com/1200529"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200549",
        "url": "https://bugzilla.suse.com/1200549"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1200604",
        "url": "https://bugzilla.suse.com/1200604"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2019-19377 page",
        "url": "https://www.suse.com/security/cve/CVE-2019-19377/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-26541 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-26541/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-33061 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-33061/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-0168 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-0168/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-1184 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-1184/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-1652 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-1652/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-1729 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-1729/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-1966 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-1966/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-1972 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-1972/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-1974 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-1974/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-1975 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-1975/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-20008 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-20008/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-20141 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-20141/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-21123 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-21123/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-21125 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-21125/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-21127 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-21127/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-21166 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-21166/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-21180 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-21180/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-30594 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-30594/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-32250 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-32250/"
      }
    ],
    "title": "Security update for the Linux Kernel",
    "tracking": {
      "current_release_date": "2022-06-24T11:32:22Z",
      "generator": {
        "date": "2022-06-24T11:32:22Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2022:2177-1",
      "initial_release_date": "2022-06-24T11:32:22Z",
      "revision_history": [
        {
          "date": "2022-06-24T11:32:22Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-rt-5.3.18-150300.93.1.x86_64",
                "product": {
                  "name": "kernel-rt-5.3.18-150300.93.1.x86_64",
                  "product_id": "kernel-rt-5.3.18-150300.93.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap Micro 5.2",
                "product": {
                  "name": "openSUSE Leap Micro 5.2",
                  "product_id": "openSUSE Leap Micro 5.2",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap-micro:5.2"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-rt-5.3.18-150300.93.1.x86_64 as component of openSUSE Leap Micro 5.2",
          "product_id": "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
        },
        "product_reference": "kernel-rt-5.3.18-150300.93.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap Micro 5.2"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2019-19377",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2019-19377"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2019-19377",
          "url": "https://www.suse.com/security/cve/CVE-2019-19377"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1158266 for CVE-2019-19377",
          "url": "https://bugzilla.suse.com/1158266"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162338 for CVE-2019-19377",
          "url": "https://bugzilla.suse.com/1162338"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1162369 for CVE-2019-19377",
          "url": "https://bugzilla.suse.com/1162369"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1173871 for CVE-2019-19377",
          "url": "https://bugzilla.suse.com/1173871"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1211495 for CVE-2019-19377",
          "url": "https://bugzilla.suse.com/1211495"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T11:32:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2019-19377"
    },
    {
      "cve": "CVE-2020-26541",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-26541"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-26541",
          "url": "https://www.suse.com/security/cve/CVE-2020-26541"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1177282 for CVE-2020-26541",
          "url": "https://bugzilla.suse.com/1177282"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T11:32:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-26541"
    },
    {
      "cve": "CVE-2021-33061",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-33061"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Insufficient control flow management for the Intel(R) 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enable denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-33061",
          "url": "https://www.suse.com/security/cve/CVE-2021-33061"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1196426 for CVE-2021-33061",
          "url": "https://bugzilla.suse.com/1196426"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T11:32:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-33061"
    },
    {
      "cve": "CVE-2022-0168",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-0168"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A denial of service (DOS) issue was found in the Linux kernel\u0027s smb2_ioctl_query_info function in the fs/cifs/smb2ops.c Common Internet File System (CIFS) due to an incorrect return from the memdup_user function. This flaw allows a local, privileged (CAP_SYS_ADMIN) attacker to crash the system.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-0168",
          "url": "https://www.suse.com/security/cve/CVE-2022-0168"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1197472 for CVE-2022-0168",
          "url": "https://bugzilla.suse.com/1197472"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T11:32:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-0168"
    },
    {
      "cve": "CVE-2022-1184",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-1184"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel\u0027s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-1184",
          "url": "https://www.suse.com/security/cve/CVE-2022-1184"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1198577 for CVE-2022-1184",
          "url": "https://bugzilla.suse.com/1198577"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1210859 for CVE-2022-1184",
          "url": "https://bugzilla.suse.com/1210859"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T11:32:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-1184"
    },
    {
      "cve": "CVE-2022-1652",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-1652"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function. By executing a specially-crafted program, an attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-1652",
          "url": "https://www.suse.com/security/cve/CVE-2022-1652"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1199063 for CVE-2022-1652",
          "url": "https://bugzilla.suse.com/1199063"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200057 for CVE-2022-1652",
          "url": "https://bugzilla.suse.com/1200057"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200751 for CVE-2022-1652",
          "url": "https://bugzilla.suse.com/1200751"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201034 for CVE-2022-1652",
          "url": "https://bugzilla.suse.com/1201034"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201832 for CVE-2022-1652",
          "url": "https://bugzilla.suse.com/1201832"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1204132 for CVE-2022-1652",
          "url": "https://bugzilla.suse.com/1204132"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1212307 for CVE-2022-1652",
          "url": "https://bugzilla.suse.com/1212307"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T11:32:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-1652"
    },
    {
      "cve": "CVE-2022-1729",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-1729"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-1729",
          "url": "https://www.suse.com/security/cve/CVE-2022-1729"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1199507 for CVE-2022-1729",
          "url": "https://bugzilla.suse.com/1199507"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1199697 for CVE-2022-1729",
          "url": "https://bugzilla.suse.com/1199697"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201832 for CVE-2022-1729",
          "url": "https://bugzilla.suse.com/1201832"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T11:32:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-1729"
    },
    {
      "cve": "CVE-2022-1966",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-1966"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-32250. Reason: This candidate is a duplicate of CVE-2022-32250. Notes: All CVE users should reference CVE-2022-32250 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-1966",
          "url": "https://www.suse.com/security/cve/CVE-2022-1966"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200015 for CVE-2022-1966",
          "url": "https://bugzilla.suse.com/1200015"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200268 for CVE-2022-1966",
          "url": "https://bugzilla.suse.com/1200268"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200494 for CVE-2022-1966",
          "url": "https://bugzilla.suse.com/1200494"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200529 for CVE-2022-1966",
          "url": "https://bugzilla.suse.com/1200529"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T11:32:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-1966"
    },
    {
      "cve": "CVE-2022-1972",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-1972"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-2078. Reason: This candidate is a reservation duplicate of CVE-2022-2078. Notes: All CVE users should reference CVE-2022-2078 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-1972",
          "url": "https://www.suse.com/security/cve/CVE-2022-1972"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200019 for CVE-2022-1972",
          "url": "https://bugzilla.suse.com/1200019"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200266 for CVE-2022-1972",
          "url": "https://bugzilla.suse.com/1200266"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T11:32:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-1972"
    },
    {
      "cve": "CVE-2022-1974",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-1974"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free flaw was found in the Linux kernel\u0027s NFC core functionality due to a race condition between kobject creation and delete. This vulnerability allows a local attacker with CAP_NET_ADMIN privilege to leak kernel information.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-1974",
          "url": "https://www.suse.com/security/cve/CVE-2022-1974"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200144 for CVE-2022-1974",
          "url": "https://bugzilla.suse.com/1200144"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200265 for CVE-2022-1974",
          "url": "https://bugzilla.suse.com/1200265"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T11:32:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-1974"
    },
    {
      "cve": "CVE-2022-1975",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-1975"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the Linux kernel by simulating a nfc device from user-space.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-1975",
          "url": "https://www.suse.com/security/cve/CVE-2022-1975"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200143 for CVE-2022-1975",
          "url": "https://bugzilla.suse.com/1200143"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T11:32:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-1975"
    },
    {
      "cve": "CVE-2022-20008",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-20008"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to uninitialized data. This could lead to local information disclosure if reading from an SD card that triggers errors, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-216481035References: Upstream kernel",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-20008",
          "url": "https://www.suse.com/security/cve/CVE-2022-20008"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1199564 for CVE-2022-20008",
          "url": "https://bugzilla.suse.com/1199564"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T11:32:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-20008"
    },
    {
      "cve": "CVE-2022-20141",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-20141"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-112551163References: Upstream kernel",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-20141",
          "url": "https://www.suse.com/security/cve/CVE-2022-20141"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200604 for CVE-2022-20141",
          "url": "https://bugzilla.suse.com/1200604"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200605 for CVE-2022-20141",
          "url": "https://bugzilla.suse.com/1200605"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1203034 for CVE-2022-20141",
          "url": "https://bugzilla.suse.com/1203034"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T11:32:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-20141"
    },
    {
      "cve": "CVE-2022-21123",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-21123"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incomplete cleanup of multi-core shared buffers for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-21123",
          "url": "https://www.suse.com/security/cve/CVE-2022-21123"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1199650 for CVE-2022-21123",
          "url": "https://bugzilla.suse.com/1199650"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200549 for CVE-2022-21123",
          "url": "https://bugzilla.suse.com/1200549"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1209075 for CVE-2022-21123",
          "url": "https://bugzilla.suse.com/1209075"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T11:32:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-21123"
    },
    {
      "cve": "CVE-2022-21125",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-21125"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-21125",
          "url": "https://www.suse.com/security/cve/CVE-2022-21125"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1199650 for CVE-2022-21125",
          "url": "https://bugzilla.suse.com/1199650"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200549 for CVE-2022-21125",
          "url": "https://bugzilla.suse.com/1200549"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1209074 for CVE-2022-21125",
          "url": "https://bugzilla.suse.com/1209074"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T11:32:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-21125"
    },
    {
      "cve": "CVE-2022-21127",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-21127"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incomplete cleanup in specific special register read operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-21127",
          "url": "https://www.suse.com/security/cve/CVE-2022-21127"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1199650 for CVE-2022-21127",
          "url": "https://bugzilla.suse.com/1199650"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200549 for CVE-2022-21127",
          "url": "https://bugzilla.suse.com/1200549"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T11:32:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-21127"
    },
    {
      "cve": "CVE-2022-21166",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-21166"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-21166",
          "url": "https://www.suse.com/security/cve/CVE-2022-21166"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1199650 for CVE-2022-21166",
          "url": "https://bugzilla.suse.com/1199650"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200549 for CVE-2022-21166",
          "url": "https://bugzilla.suse.com/1200549"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1209073 for CVE-2022-21166",
          "url": "https://bugzilla.suse.com/1209073"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T11:32:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-21166"
    },
    {
      "cve": "CVE-2022-21180",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-21180"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Improper input validation for some Intel(R) Processors may allow an authenticated user to potentially cause a denial of service via local access.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-21180",
          "url": "https://www.suse.com/security/cve/CVE-2022-21180"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1199650 for CVE-2022-21180",
          "url": "https://bugzilla.suse.com/1199650"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200549 for CVE-2022-21180",
          "url": "https://bugzilla.suse.com/1200549"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1212313 for CVE-2022-21180",
          "url": "https://bugzilla.suse.com/1212313"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T11:32:22Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2022-21180"
    },
    {
      "cve": "CVE-2022-30594",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-30594"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-30594",
          "url": "https://www.suse.com/security/cve/CVE-2022-30594"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1199505 for CVE-2022-30594",
          "url": "https://bugzilla.suse.com/1199505"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1199602 for CVE-2022-30594",
          "url": "https://bugzilla.suse.com/1199602"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1201549 for CVE-2022-30594",
          "url": "https://bugzilla.suse.com/1201549"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1204132 for CVE-2022-30594",
          "url": "https://bugzilla.suse.com/1204132"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T11:32:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-30594"
    },
    {
      "cve": "CVE-2022-32250",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-32250"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-32250",
          "url": "https://www.suse.com/security/cve/CVE-2022-32250"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200015 for CVE-2022-32250",
          "url": "https://bugzilla.suse.com/1200015"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200268 for CVE-2022-32250",
          "url": "https://bugzilla.suse.com/1200268"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200494 for CVE-2022-32250",
          "url": "https://bugzilla.suse.com/1200494"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1202992 for CVE-2022-32250",
          "url": "https://bugzilla.suse.com/1202992"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1202993 for CVE-2022-32250",
          "url": "https://bugzilla.suse.com/1202993"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1203002 for CVE-2022-32250",
          "url": "https://bugzilla.suse.com/1203002"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap Micro 5.2:kernel-rt-5.3.18-150300.93.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2022-06-24T11:32:22Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-32250"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "kernel-devel-5.18.4-1.1 on GA media",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "These are all security issues fixed in the kernel-devel-5.18.4-1.1 package on the GA media of openSUSE Tumbleweed.",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Tumbleweed-2024-12146",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_12146-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-1966 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-1966/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-1972 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-1972/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2022-1973 page",
        "url": "https://www.suse.com/security/cve/CVE-2022-1973/"
      }
    ],
    "title": "kernel-devel-5.18.4-1.1 on GA media",
    "tracking": {
      "current_release_date": "2024-06-15T00:00:00Z",
      "generator": {
        "date": "2024-06-15T00:00:00Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2024:12146-1",
      "initial_release_date": "2024-06-15T00:00:00Z",
      "revision_history": [
        {
          "date": "2024-06-15T00:00:00Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-5.18.4-1.1.aarch64",
                "product": {
                  "name": "kernel-devel-5.18.4-1.1.aarch64",
                  "product_id": "kernel-devel-5.18.4-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-5.18.4-1.1.aarch64",
                "product": {
                  "name": "kernel-macros-5.18.4-1.1.aarch64",
                  "product_id": "kernel-macros-5.18.4-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-5.18.4-1.1.aarch64",
                "product": {
                  "name": "kernel-source-5.18.4-1.1.aarch64",
                  "product_id": "kernel-source-5.18.4-1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-vanilla-5.18.4-1.1.aarch64",
                "product": {
                  "name": "kernel-source-vanilla-5.18.4-1.1.aarch64",
                  "product_id": "kernel-source-vanilla-5.18.4-1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-5.18.4-1.1.ppc64le",
                "product": {
                  "name": "kernel-devel-5.18.4-1.1.ppc64le",
                  "product_id": "kernel-devel-5.18.4-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-5.18.4-1.1.ppc64le",
                "product": {
                  "name": "kernel-macros-5.18.4-1.1.ppc64le",
                  "product_id": "kernel-macros-5.18.4-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-5.18.4-1.1.ppc64le",
                "product": {
                  "name": "kernel-source-5.18.4-1.1.ppc64le",
                  "product_id": "kernel-source-5.18.4-1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-vanilla-5.18.4-1.1.ppc64le",
                "product": {
                  "name": "kernel-source-vanilla-5.18.4-1.1.ppc64le",
                  "product_id": "kernel-source-vanilla-5.18.4-1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-5.18.4-1.1.s390x",
                "product": {
                  "name": "kernel-devel-5.18.4-1.1.s390x",
                  "product_id": "kernel-devel-5.18.4-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-5.18.4-1.1.s390x",
                "product": {
                  "name": "kernel-macros-5.18.4-1.1.s390x",
                  "product_id": "kernel-macros-5.18.4-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-5.18.4-1.1.s390x",
                "product": {
                  "name": "kernel-source-5.18.4-1.1.s390x",
                  "product_id": "kernel-source-5.18.4-1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-vanilla-5.18.4-1.1.s390x",
                "product": {
                  "name": "kernel-source-vanilla-5.18.4-1.1.s390x",
                  "product_id": "kernel-source-vanilla-5.18.4-1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kernel-devel-5.18.4-1.1.x86_64",
                "product": {
                  "name": "kernel-devel-5.18.4-1.1.x86_64",
                  "product_id": "kernel-devel-5.18.4-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-macros-5.18.4-1.1.x86_64",
                "product": {
                  "name": "kernel-macros-5.18.4-1.1.x86_64",
                  "product_id": "kernel-macros-5.18.4-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-5.18.4-1.1.x86_64",
                "product": {
                  "name": "kernel-source-5.18.4-1.1.x86_64",
                  "product_id": "kernel-source-5.18.4-1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kernel-source-vanilla-5.18.4-1.1.x86_64",
                "product": {
                  "name": "kernel-source-vanilla-5.18.4-1.1.x86_64",
                  "product_id": "kernel-source-vanilla-5.18.4-1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Tumbleweed",
                "product": {
                  "name": "openSUSE Tumbleweed",
                  "product_id": "openSUSE Tumbleweed",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:tumbleweed"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-5.18.4-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.aarch64"
        },
        "product_reference": "kernel-devel-5.18.4-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-5.18.4-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.ppc64le"
        },
        "product_reference": "kernel-devel-5.18.4-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-5.18.4-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.s390x"
        },
        "product_reference": "kernel-devel-5.18.4-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-devel-5.18.4-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.x86_64"
        },
        "product_reference": "kernel-devel-5.18.4-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-5.18.4-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.aarch64"
        },
        "product_reference": "kernel-macros-5.18.4-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-5.18.4-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.ppc64le"
        },
        "product_reference": "kernel-macros-5.18.4-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-5.18.4-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.s390x"
        },
        "product_reference": "kernel-macros-5.18.4-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-macros-5.18.4-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.x86_64"
        },
        "product_reference": "kernel-macros-5.18.4-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-5.18.4-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.aarch64"
        },
        "product_reference": "kernel-source-5.18.4-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-5.18.4-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.ppc64le"
        },
        "product_reference": "kernel-source-5.18.4-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-5.18.4-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.s390x"
        },
        "product_reference": "kernel-source-5.18.4-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-5.18.4-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.x86_64"
        },
        "product_reference": "kernel-source-5.18.4-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-vanilla-5.18.4-1.1.aarch64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.aarch64"
        },
        "product_reference": "kernel-source-vanilla-5.18.4-1.1.aarch64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-vanilla-5.18.4-1.1.ppc64le as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.ppc64le"
        },
        "product_reference": "kernel-source-vanilla-5.18.4-1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-vanilla-5.18.4-1.1.s390x as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.s390x"
        },
        "product_reference": "kernel-source-vanilla-5.18.4-1.1.s390x",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kernel-source-vanilla-5.18.4-1.1.x86_64 as component of openSUSE Tumbleweed",
          "product_id": "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.x86_64"
        },
        "product_reference": "kernel-source-vanilla-5.18.4-1.1.x86_64",
        "relates_to_product_reference": "openSUSE Tumbleweed"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2022-1966",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-1966"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-32250. Reason: This candidate is a duplicate of CVE-2022-32250. Notes: All CVE users should reference CVE-2022-32250 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-1966",
          "url": "https://www.suse.com/security/cve/CVE-2022-1966"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200015 for CVE-2022-1966",
          "url": "https://bugzilla.suse.com/1200015"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200268 for CVE-2022-1966",
          "url": "https://bugzilla.suse.com/1200268"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200494 for CVE-2022-1966",
          "url": "https://bugzilla.suse.com/1200494"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200529 for CVE-2022-1966",
          "url": "https://bugzilla.suse.com/1200529"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-1966"
    },
    {
      "cve": "CVE-2022-1972",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-1972"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-2078. Reason: This candidate is a reservation duplicate of CVE-2022-2078. Notes: All CVE users should reference CVE-2022-2078 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-1972",
          "url": "https://www.suse.com/security/cve/CVE-2022-1972"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200019 for CVE-2022-1972",
          "url": "https://bugzilla.suse.com/1200019"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200266 for CVE-2022-1972",
          "url": "https://bugzilla.suse.com/1200266"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-1972"
    },
    {
      "cve": "CVE-2022-1973",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2022-1973"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A use-after-free flaw was found in the Linux kernel in log_replay in fs/ntfs3/fslog.c in the NTFS journal. This flaw allows a local attacker to crash the system and leads to a kernel information leak problem.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.s390x",
          "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.s390x",
          "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.x86_64",
          "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.aarch64",
          "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.ppc64le",
          "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.s390x",
          "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2022-1973",
          "url": "https://www.suse.com/security/cve/CVE-2022-1973"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1200023 for CVE-2022-1973",
          "url": "https://bugzilla.suse.com/1200023"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-devel-5.18.4-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-macros-5.18.4-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-5.18.4-1.1.x86_64",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.aarch64",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.ppc64le",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.s390x",
            "openSUSE Tumbleweed:kernel-source-vanilla-5.18.4-1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2024-06-15T00:00:00Z",
          "details": "important"
        }
      ],
      "title": "CVE-2022-1973"
    }
  ]
}