Vulnerability-Lookup

SUSE-SU-2024:3190-1

Vulnerability from csaf_suse - Published: 2024-09-10 08:46 - Updated: 2024-09-10 08:46

Summary

Security update for the Linux Kernel

Severity

Important

Notes

Title of the patch: Security update for the Linux Kernel

Description of the patch: The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454). - CVE-2024-36936: Touch soft lockup during memory accept (bsc#1225773). - CVE-2022-48706: Do proper cleanup if IFCVF init fails (bsc#1225524). - CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707). - CVE-2024-41062: Sync sock recv cb and release (bsc#1228576). - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500). - CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326). - CVE-2024-43893: Check uartclk for zero to avoid divide by zero (bsc#1229759). - CVE-2024-43821: Fix a possible null pointer dereference (bsc#1229315). - CVE-2024-43900: Avoid use-after-free in load_firmware_cb() (bsc#1229756). - CVE-2024-44938: Fix shift-out-of-bounds in dbDiscardAG (bsc#1229792). - CVE-2024-44939: fix null ptr deref in dtInsertEntry (bsc#1229820). - CVE-2024-41087: Fix double free on error (CVE-2024-41087,bsc#1228466). - CVE-2024-42277: Avoid NULL deref in sprd_iommu_hw_en (bsc#1229409). - CVE-2024-43902: Add null checker before passing variables (bsc#1229767). - CVE-2024-43904: Add null checks for 'stream' and 'plane' before dereferencing (bsc#1229768) - CVE-2024-43880: Put back removed metod in struct objagg_ops (bsc#1229481). - CVE-2024-43884: Add error handling to pair_device() (bsc#1229739) - CVE-2024-43899: Fix null pointer deref in dcn20_resource.c (bsc#1229754). - CVE-2022-48920: Get rid of warning on transaction commit when using flushoncommit (bsc#1229658). - CVE-2023-52906: Fix warning during failed attribute validation (bsc#1229527). - CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503) - CVE-2024-43866: Always drain health in shutdown callback (bsc#1229495). - CVE-2024-26812: Struct virqfd kABI workaround (bsc#1222808). - CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641) - CVE-2024-27010: Fix mirred deadlock on device recursion (bsc#1223720). - CVE-2022-48906: Correctly set DATA_FIN timeout when number of retransmits is large (bsc#1229605) - CVE-2024-42155: Wipe copies of protected- and secure-keys (bsc#1228733). - CVE-2024-42156: Wipe copies of clear-key structures on failure (bsc#1228722). - CVE-2023-52899: Add exception protection processing for vd in axi_chan_handle_err function (bsc#1229569). - CVE-2024-42158: Use kfree_sensitive() to fix Coccinelle warnings (bsc#1228720). - CVE-2024-26631: Fix data-race in ipv6_mc_down / mld_ifc_work (bsc#1221630). - CVE-2024-43873: Always initialize seqpacket_allow (bsc#1229488) - CVE-2024-40905: Fix possible race in __fib6_drop_pcpu_from() (bsc#1227761) - CVE-2024-39489: Fix memleak in seg6_hmac_init_algo (bsc#1227623) - CVE-2021-47106: Fix use-after-free in nft_set_catchall_destroy() (bsc#1220962) - CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225428). - CVE-2024-36489: Fix missing memory barrier in tls_init (bsc#1226874) - CVE-2024-41020: Fix fcntl/close race recovery compat path (bsc#1228427). - CVE-2024-27079: Fix NULL domain on device release (bsc#1223742). - CVE-2024-35897: Discard table flag update with pending basechain deletion (bsc#1224510). - CVE-2024-27403: Restore const specifier in flow_offload_route_init() (bsc#1224415). - CVE-2024-27011: Fix memleak in map from abort path (bsc#1223803). - CVE-2024-43819: Reject memory region operations for ucontrol VMs (bsc#1229290 git-fixes). - CVE-2024-26668: Reject configurations that cause integer overflow (bsc#1222335). - CVE-2024-26835: Set dormant flag on hook register failure (bsc#1222967). - CVE-2024-26808: Handle NETDEV_UNREGISTER for inet/ingress basechain (bsc#1222634). - CVE-2024-27016: Validate pppoe header (bsc#1223807). - CVE-2024-35945: Prevent nullptr exceptions on ISR (bsc#1224639). - CVE-2023-52581: Fix memleak when more than 255 elements expired (bsc#1220877). - CVE-2024-36013: Fix slab-use-after-free in l2cap_connect() (bsc#1225578). - CVE-2024-43837: Fix updating attached freplace prog in prog_array map (bsc#1229297). - CVE-2024-42291: Add a per-VF limit on number of FDIR filters (bsc#1229374). - CVE-2024-42268: Fix missing lock on sync reset reload (bsc#1229391). - CVE-2024-43834: Fix invalid wait context of page_pool_destroy() (bsc#1229314) - CVE-2024-36286: Acquire rcu_read_lock() in instance_destroy_rcu() (bsc#1226801) - CVE-2024-26851: Add protection for bmp length out of range (bsc#1223074) - CVE-2024-42157: Wipe sensitive data on failure (bsc#1228727 CVE-2024-42157 git-fixes). - CVE-2024-26677: Blacklist e7870cf13d20 ('rxrpc: Fix delayed ACKs to not set the reference serial number') (bsc#1222387) - CVE-2024-36009: Blacklist 467324bcfe1a ('ax25: Fix netdev refcount issue') (bsc#1224542) - CVE-2023-52859: Fix use-after-free when register pmu fails (bsc#1225582). - CVE-2024-42280: Fix a use after free in hfcmulti_tx() (bsc#1229388) - CVE-2024-42284: Return non-zero value from tipc_udp_addr2str() on error (bsc#1229382) - CVE-2024-42283: Initialize all fields in dumped nexthops (bsc#1229383) - CVE-2024-42312: Always initialize i_uid/i_gid (bsc#1229357) - CVE-2024-43854: Initialize integrity buffer to zero before writing it to media (bsc#1229345) - CVE-2024-42322: Properly dereference pe in ip_vs_add_service (bsc#1229347) - CVE-2024-42301: Fix the array out-of-bounds risk (bsc#1229407). - CVE-2024-42318: Do not lose track of restrictions on cred_transfer (bsc#1229351). - CVE-2024-26669: Fix chain template offload (bsc#1222350). - CVE-2023-52889: Fix null pointer deref when receiving skb during sock creation (bsc#1229287,). - CVE-2022-48645: Move enetc_set_psfp() out of the common enetc_set_features() (bsc#1223508). - CVE-2024-41007: Use signed arithmetic in tcp_rtx_probe0_timed_out() (bsc#1227863). - CVE-2024-36933: Use correct mac_offset to unwind gso skb in nsh_gso_segment() (bsc#1225832). - CVE-2024-42295: Handle inconsistent state in nilfs_btnode_create_block() (bsc#1229370). - CVE-2024-42319: Move devm_mbox_controller_register() after devm_pm_runtime_enable() (bsc#1229350). - CVE-2024-43860: Skip over memory region when node value is NULL (bsc#1229319). - CVE-2024-43831: Handle invalid decoder vsi (bsc#1229309). - CVE-2024-43849: Protect locator_addr with the main mutex (bsc#1229307). - CVE-2024-43841: Do not use strlen() in const context (bsc#1229304). - CVE-2024-43839: Adjust 'name' buf size of bna_tcb and bna_ccb structures (bsc#1229301). - CVE-2024-41088: Fix infinite loop when xmit fails (bsc#1228469). - CVE-2024-42281: Fix a segment issue when downgrading gso_size (bsc#1229386). - CVE-2024-42271: Fixed a use after free in iucv_sock_close(). (bsc#1229400) - CVE-2024-41080: Fix possible deadlock in io_register_iowq_max_workers() (bsc#1228616). - CVE-2024-42246: Remap EPERM in case of connection failure in xs_tcp_setup_socket (bsc#1228989). - CVE-2024-42232: Fixed a race between delayed_work() and ceph_monc_stop(). (bsc#1228959) - CVE-2024-26735: Fix possible use-after-free and null-ptr-deref (bsc#1222372). - CVE-2024-42106: Initialize pad field in struct inet_diag_req_v2 (bsc#1228493). - CVE-2024-38662: Cover verifier checks for mutating sockmap/sockhash (bsc#1226885). - CVE-2024-42110: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx() (bsc#1228501). - CVE-2024-42247: Avoid unaligned 64-bit memory accesses (bsc#1228988). - CVE-2022-48865: Fix kernel panic when enabling bearer (bsc#1228065). - CVE-2023-52498: Fix possible deadlocks in core system-wide PM code (bsc#1221269). - CVE-2024-41068: Fix sclp_init() cleanup on failure (bsc#1228579). - CVE-2022-48808: Fix panic when DSA master device unbinds on shutdown (bsc#1227958). - CVE-2024-42095: Fix Errata i2310 with RX FIFO level check (bsc#1228446). - CVE-2024-40978: Fix crash while reading debugfs attribute (bsc#1227929). - CVE-2024-42107: Do not process extts if PTP is disabled (bsc#1228494). - CVE-2024-42139: Fix improper extts handling (bsc#1228503). - CVE-2024-42148: Fix multiple UBSAN array-index-out-of-bounds (bsc#1228487). - CVE-2024-42142: E-switch, Create ingress ACL when needed (bsc#1228491). - CVE-2024-42162: Account for stopped queues when reading NIC stats (bsc#1228706). - CVE-2024-42082: Remove WARN() from __xdp_reg_mem_model() (bsc#1228482). - CVE-2024-41042: Prefer nft_chain_validate (bsc#1228526). - CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580). - CVE-2024-42228: Using uninitialized value *size when calling amdgpu_vce_cs_reloc (bsc#1228667). - CVE-2024-40995: Fix possible infinite loop in tcf_idr_check_alloc() (bsc#1227830). - CVE-2024-38602: Merge repeat codes in ax25_dev_device_down() (git-fixes CVE-2024-38602 bsc#1226613). - CVE-2024-38554: Fix reference count leak issue of net_device (bsc#1226742). - CVE-2024-36929: Reject skb_copy(_expand) for fraglist GSO skbs (bsc#1225814). - CVE-2024-41009: Fix overrunning reservations in ringbuf (bsc#1228020). - CVE-2024-27024: Fix WARNING in rds_conn_connect_if_down (bsc#1223777). The following non-security bugs were fixed: - ACPI: bus: Indicate support for IRQ ResourceSource thru _OSC (git-fixes). - ACPI: bus: Indicate support for the Generic Event Device thru _OSC (git-fixes). - ACPI: bus: Rework system-level device notification handling (git-fixes). - ACPI: thermal: Drop nocrt parameter (git-fixes). - ACPI: x86: s2idle: Post-increment variables when getting constraints (git-fixes). - afs: Do not cross .backup mountpoint from backup volume (git-fixes). - ALSA: hda: Add HP MP9 G4 Retail System AMS to force connect list (stable-fixes). - ALSA: hda/hdmi: Yet more pin fix for HP EliteDesk 800 G4 (stable-fixes). - ALSA: hda/realtek: Add Framework Laptop 13 (Intel Core Ultra) to quirks (stable-fixes). - ALSA: hda/realtek: Fix noise from speakers on Lenovo IdeaPad 3 15IAU7 (git-fixes). - ALSA: line6: Fix racy access to midibuf (stable-fixes). - ALSA: timer: Relax start tick time check for slave timer elements (git-fixes). - ALSA: usb-audio: Add delay quirk for VIVO USB-C-XE710 HEADSET (stable-fixes). - ALSA: usb-audio: Re-add ScratchAmp quirk entries (git-fixes). - ALSA: usb-audio: Support Yamaha P-125 quirk entry (stable-fixes). - ALSA: usb: Fix UBSAN warning in parse_audio_unit() (stable-fixes). - arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to (git-fixes) - arm64: ACPI: NUMA: initialize all values of acpi_early_node_map to (git-fixes) - arm64: Add Neoverse-V2 part (git-fixes) - arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process (git-fixes) - arm64: armv8_deprecated: Fix warning in isndep cpuhp starting process (git-fixes) - arm64: barrier: Restore spec_bar() macro (git-fixes) - arm64: cpufeature: Add missing .field_width for GIC system registers (git-fixes) - arm64: cpufeature: Fix the visibility of compat hwcaps (git-fixes) - arm64: cpufeature: Force HWCAP to be based on the sysreg visible to (git-fixes) - arm64: cputype: Add Cortex-A720 definitions (git-fixes) - arm64: cputype: Add Cortex-A725 definitions (git-fixes) - arm64: cputype: Add Cortex-X1C definitions (git-fixes) - arm64: cputype: Add Cortex-X3 definitions (git-fixes) - arm64: cputype: Add Cortex-X4 definitions (git-fixes) - arm64: cputype: Add Cortex-X925 definitions (git-fixes) - arm64: cputype: Add Neoverse-V3 definitions (git-fixes) - arm64: dts: rockchip: Increase VOP clk rate on RK3328 (git-fixes) - arm64: dts: rockchip: Increase VOP clk rate on RK3328 (git-fixes) - arm64: errata: Add workaround for Arm errata 3194386 and 3312417 (git-fixes) - arm64: errata: Expand speculative SSBS workaround (again) (git-fixes) - arm64: errata: Expand speculative SSBS workaround (git-fixes) - arm64: errata: Unify speculative SSBS errata logic (git-fixes) Also update default configuration. - arm64: Fix KASAN random tag seed initialization (git-fixes) - arm64: Fix KASAN random tag seed initialization (git-fixes) - ASoC: codecs: wcd938x-sdw: Correct Soundwire ports mask (git-fixes). - ASoC: codecs: wsa881x: Correct Soundwire ports mask (git-fixes). - ASoC: meson: axg-fifo: fix irq scheduling issue with PREEMPT_RT (git-fixes). - async: Introduce async_schedule_dev_nocall() (bsc#1221269). - async: Split async_schedule_node_domain() (bsc#1221269). - Bluetooth: Fix usage of __hci_cmd_sync_status (git-fixes). - Bluetooth: hci_core: Fix not handling hibernation actions (git-fixes). - Bluetooth: l2cap: always unlock channel in l2cap_conless_channel() (git-fixes). - Bluetooth: L2CAP: Fix deadlock (git-fixes). - bpf: Fix a kernel verifier crash in stacksafe() (bsc#1225903). - bpf: kprobe: remove unused declaring of bpf_kprobe_override (git-fixes). - btrfs: fix leak of qgroup extent records after transaction abort (git-fixes). - btrfs: make btrfs_destroy_delayed_refs() return void (git-fixes). - btrfs: remove unnecessary prototype declarations at disk-io.c (git-fixes). - btrfs: sysfs: update fs features directory asynchronously (bsc#1226168). - cachefiles: propagate errors from vfs_getxattr() to avoid infinite loop (bsc#1229418). - ceph: issue a cap release immediately if no cap exists (bsc#1225162). - ceph: periodically flush the cap releases (bsc#1225162). - cpu/SMT: Enable SMT only if a core is online (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588 git-fixes). - cpuidle, ACPI: Evaluate LPI arch_flags for broadcast timer (git-fixes). - docs: KVM: Fix register ID of SPSR_FIQ (git-fixes). - drm: add missing MODULE_DESCRIPTION() macros (stable-fixes). - drm: panel-orientation-quirks: Add labels for both Valve Steam Deck revisions (stable-fixes). - drm: panel-orientation-quirks: Add quirk for Aya Neo KUN (stable-fixes). - drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Tab 3 X90F (stable-fixes). - drm: panel-orientation-quirks: Add quirk for Nanote UMPC-01 (stable-fixes). - drm: panel-orientation-quirks: Add quirk for OrangePi Neo (stable-fixes). - drm/amd/amdgpu/imu_v11_0: Increase buffer size to ensure all possible values can be stored (stable-fixes). - drm/amd/display: Add NULL check for 'afb' before dereferencing in amdgpu_dm_plane_handle_cursor_update (stable-fixes). - drm/amd/display: avoid using null object of framebuffer (git-fixes). - drm/amd/display: Fix && vs || typos (git-fixes). - drm/amd/display: Skip Recompute DSC Params if no Stream on Link (stable-fixes). - drm/amd/display: Validate hw_points_num before using it (stable-fixes). - drm/amd/pm: Fix the null pointer dereference for vega10_hwmgr (stable-fixes). - drm/amdgpu: Actually check flags for all context ops (stable-fixes). - drm/amdgpu: Add lock around VF RLCG interface (stable-fixes). - drm/amdgpu: fix dereference null return value for the function amdgpu_vm_pt_parent (stable-fixes). - drm/amdgpu: Fix the null pointer dereference to ras_manager (stable-fixes). - drm/amdgpu: Validate TA binary size (stable-fixes). - drm/amdgpu/jpeg2: properly set atomics vmid field (stable-fixes). - drm/amdgpu/pm: Fix the null pointer dereference for smu7 (stable-fixes). - drm/amdgpu/pm: Fix the null pointer dereference in apply_state_adjust_rules (stable-fixes). - drm/amdgpu/pm: Fix the param type of set_power_profile_mode (stable-fixes). - drm/bridge: analogix_dp: properly handle zero sized AUX transactions (stable-fixes). - drm/bridge: tc358768: Attempt to fix DSI horizontal timings (stable-fixes). - drm/client: fix null pointer dereference in drm_client_modeset_probe (git-fixes). - drm/dp_mst: Skip CSN if topology probing is not done yet (stable-fixes). - drm/lima: set gp bus_stop bit before hard reset (stable-fixes). - drm/msm/dp: reset the link phy params before link training (git-fixes). - drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (git-fixes). - drm/msm/dpu: do not play tricks with debug macros (git-fixes). - drm/tegra: Zero-initialize iosys_map (stable-fixes). - exfat: fix inode->i_blocks for non-512 byte sector size device (git-fixes). - exfat: fix potential deadlock on __exfat_get_dentry_set (git-fixes). - exfat: redefine DIR_DELETED as the bad cluster number (git-fixes). - exfat: support dynamic allocate bh for exfat_entry_set_cache (git-fixes). - fs/netfs/fscache_cookie: add missing 'n_accesses' check (bsc#1229453). - fuse: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454). - genirq: Add might_sleep() to disable_irq() (git-fixes). - genirq: Always limit the affinity to online CPUs (git-fixes). - genirq: Do not return error on missing optional irq_request_resources() (git-fixes). - genirq: Take the proposed affinity at face value if force==true (git-fixes). - genirq/cpuhotplug, x86/vector: Prevent vector leak during CPU offline (git-fixes). - genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware (git-fixes). - genirq/ipi: Fix NULL pointer deref in irq_data_get_affinity_mask() (git-fixes). - genirq/irqdesc: Do not try to remove non-existing sysfs files (git-fixes). - genirq/matrix: Exclude managed interrupts in irq_matrix_allocated() (git-fixes). - genirq/msi: Shutdown managed interrupts with unsatifiable affinities (git-fixes). - gss_krb5: Fix the error handling path for crypto_sync_skcipher_setkey (git-fixes). - hfs: fix to initialize fields of hfs_inode_info after hfs_alloc_inode() (git-fixes). - i2c: smbus: Improve handling of stuck alerts (git-fixes). - i2c: smbus: Send alert notifications to all devices if source not found (git-fixes). - iommu/amd: Convert comma to semicolon (git-fixes). - ip6_tunnel: Fix broken GRO (bsc#1229444). - ipv6: sr: fix incorrect unregister order (git-fixes). - irqdomain: Drop bogus fwspec-mapping error handling (git-fixes). - irqdomain: Fix association race (git-fixes). - irqdomain: Fix disassociation race (git-fixes). - irqdomain: Fix domain registration race (git-fixes). - irqdomain: Fix mapping-creation race (git-fixes). - irqdomain: Fixed unbalanced fwnode get and put (git-fixes). - irqdomain: Look for existing mapping only once (git-fixes). - irqdomain: Refactor __irq_domain_alloc_irqs() (git-fixes). - irqdomain: Report irq number for NOMAP domains (git-fixes). - kprobes: Fix to check symbol prefixes correctly (git-fixes). - lockd: move from strlcpy with unused retval to strscpy (git-fixes). - memcg: protect concurrent access to mem_cgroup_idr (git-fixes). - mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes). - mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes). - mmc: dw_mmc: allow biu and ciu clocks to defer (git-fixes). - mmc: mmc_test: Fix NULL dereference on allocation failure (git-fixes). - net: ks8851: Fix another TX stall caused by wrong ISR flag handling (git-fixes). - net: ks8851: Fix deadlock with the SPI chip variant (git-fixes). - net: ks8851: Fix potential TX stall after interface reopen (git-fixes). - net: ks8851: Fix TX stall caused by TX buffer overrun (gix-fixes). - net: mana: Add support for page sizes other than 4KB on ARM64 (jsc#PED-8491 bsc#1226530). - net: mana: Fix doorbell out of order violation and avoid unnecessary doorbell rings (bsc#1229154). - net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response (git-fixes). - net: mana: Fix RX buf alloc_size alignment and atomic op panic (bsc#1229086). - net: remove two BUG() from skb_checksum_help() (bsc#1229312). - net: usb: qmi_wwan: fix memory leak for not ip packets (git-fixes). - net/rds: fix possible cp null dereference (git-fixes). - net/sched: initialize noop_qdisc owner (git-fixes). - nfc: pn533: Add poll mod list filling check (git-fixes). - nfs: expose /proc/net/sunrpc/nfs in net namespaces (git-fixes). - nfs: make the rpc_stat per net namespace (git-fixes). - NFSD: add posix ACLs to struct nfsd_attrs (git-fixes). - NFSD: add security label to struct nfsd_attrs (git-fixes). - NFSD: fix regression with setting ACLs (git-fixes). - NFSD: Fix strncpy() fortify warning (git-fixes). - NFSD: Increase NFSD_MAX_OPS_PER_COMPOUND (git-fixes). - NFSD: introduce struct nfsd_attrs (git-fixes). - NFSD: move from strlcpy with unused retval to strscpy (git-fixes). - NFSD: Optimize DRC bucket pruning (git-fixes). - nfsd: return error if nfs4_setacl fails (git-fixes). - NFSD: set attributes when creating symlinks (git-fixes). - nfsd: use locks_inode_context helper (git-fixes). - nilfs2: Remove check for PageError (git-fixes). - nvme_core: scan namespaces asynchronously (bsc#1224105). - ocfs2: use coarse time for new created files (git-fixes). - padata: Fix possible divide-by-0 panic in padata_mt_helper() (git-fixes). - perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 (git-fixes). - platform/x86/amd/hsmp: Add support for ACPI based probing (jsc#PED-8779). - platform/x86/amd/hsmp: Cache pci_dev in struct hsmp_socket (jsc#PED-8779). - platform/x86/amd/hsmp: Change devm_kzalloc() to devm_kcalloc() (jsc#PED-8779). - platform/x86/amd/hsmp: Check HSMP support on AMD family of processors (jsc#PED-8779). - platform/x86/amd/hsmp: Check num_sockets against MAX_AMD_SOCKETS (jsc#PED-8779). - platform/x86/amd/hsmp: Create static func to handle platdev (jsc#PED-8779). - platform/x86/amd/hsmp: Define a struct to hold mailbox regs (jsc#PED-8779). - platform/x86/amd/hsmp: Move dev from platdev to hsmp_socket (jsc#PED-8779). - platform/x86/amd/hsmp: Move hsmp_test to probe (jsc#PED-8779). - platform/x86/amd/hsmp: Non-ACPI support for AMD F1A_M00~0Fh (jsc#PED-8779). - platform/x86/amd/hsmp: Remove extra parenthesis and add a space (jsc#PED-8779). - platform/x86/amd/hsmp: Restructure sysfs group creation (jsc#PED-8779). - platform/x86/amd/hsmp: switch to use device_add_groups() (jsc#PED-8779). - power: supply: axp288_charger: Fix constant_charge_voltage writes (git-fixes). - power: supply: axp288_charger: Round constant_charge_voltage writes down (git-fixes). - powerpc: Fail build if using recordmcount with binutils v2.37 (bsc#1194869). - powerpc: Mark .opd section read-only (bsc#1194869). - powerpc: use generic version of arch_is_kernel_initmem_freed() (bsc#1194869). - powerpc: xor_vmx: Add '-mhard-float' to CFLAGS (bsc#1194869). - powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n (bsc#1194869). - powerpc/io: Avoid clang null pointer arithmetic warnings (bsc#1194869). - powerpc/kexec_file: fix cpus node update to FDT (bsc#1194869). - powerpc/kexec: make the update_cpus_node() function public (bsc#1194869). - powerpc/kexec: split CONFIG_KEXEC_FILE and CONFIG_CRASH_DUMP (bsc#1194869). - powerpc/pseries: Add failure related checks for h_get_mpp and h_get_ppp (bsc#1194869). - powerpc/pseries: Whitelist dtl slub object for copying to userspace (bsc#1194869). - powerpc/radix: Move some functions into #ifdef CONFIG_KVM_BOOK3S_HV_POSSIBLE (bsc#1194869). - powerpc/topology: Check if a core is online (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588 git-fixes). - powerpc/xmon: Check cpu id in commands 'c#', 'dp#' and 'dx#' (bsc#1194869). - RDMA/mana_ib: Use virtual address in dma regions for MRs (git-fixes). - RDMA/rxe: Fix incomplete state save in rxe_requester (git-fixes) - RDMA/rxe: Fix rxe_modify_srq (git-fixes) - RDMA/rxe: Move work queue code to subroutines (git-fixes) - s390/cpacf: get rid of register asm (git-fixes bsc#1227079 bsc#1229187). - s390/cpacf: Make use of invalid opcode produce a link error (git-fixes bsc#1227079). - s390/cpacf: Split and rework cpacf query functions (git-fixes bsc#1229187). - s390/dasd: fix error checks in dasd_copy_pair_store() (git-fixes bsc#1229190). - s390/dasd: fix error recovery leading to data corruption on ESE devices (git-fixes bsc#1229573). - s390/sclp: Prevent release of buffer in I/O (git-fixes bsc#1229572). - s390/uv: Panic for set and remove shared access UVC errors (git-fixes bsc#1229188). - spi: spi-fsl-lpspi: Fix scldiv calculation (git-fixes). - RDMA/rxe: Handle zero length rdma (git-fixes) - sunrpc: add a struct rpc_stats arg to rpc_create_args (git-fixes). - SUNRPC: Fix a race to wake a sync task (git-fixes). - swiotlb: fix swiotlb_bounce() to do partial sync's correctly (git-fixes). - syscalls: fix compat_sys_io_pgetevents_time64 usage (git-fixes). - tracing: Return from tracing_buffers_read() if the file has been closed (bsc#1229136 git-fixes). - ubifs: add check for crypto_shash_tfm_digest (git-fixes). - ubifs: dbg_orphan_check: Fix missed key type checking (git-fixes). - ubifs: Fix adding orphan entry twice for the same inode (git-fixes). - ubifs: Fix unattached xattr inode if powercut happens after deleting (git-fixes). - vfio/pci: fix potential memory leak in vfio_intx_enable() (git-fixes). - wifi: iwlwifi: fw: fix wgds rev 3 exact size (git-fixes). - wifi: mwifiex: duplicate static structs used in driver instances (git-fixes). - x86/APM: drop the duplicate APM_MINOR_DEV macro (git-fixes). - x86/insn: Fix PUSH instruction in x86 instruction decoder opcode map (git-fixes). - x86/mm: Fix pti_clone_entry_text() for i386 (git-fixes). - x86/mtrr: Check if fixed MTRRs exist before saving them (git-fixes). - x86/pm: Work around false positive kmemleak report in msr_build_context() (git-fixes). - xfs: Fix missing interval for missing_owner in xfs fsmap (git-fixes). - xfs: Fix the owner setting issue for rmap query in xfs fsmap (git-fixes). - xfs: use XFS_BUF_DADDR_NULL for daddrs in getfsmap code (git-fixes). - xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration (git-fixes). - xprtrdma: Fix rpcrdma_reqs_reset() (git-fixes).

Patchnames: SUSE-2024-3190,SUSE-SLE-Module-Public-Cloud-15-SP5-2024-3190,openSUSE-SLE-15.5-2024-3190

CVE-2021-4441

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.66.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-5.14.21-150500.33.66.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.66.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-azure-devel-5.14.21-150500.33.66.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure-5.14.21-150500.33.66.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure-5.14.21-150500.33.66.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.66.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-syms-azure-5.14.21-150500.33.66.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.66.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:cluster-md-kmp-azure-5.14.21-150500.33.66.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.66.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:dlm-kmp-azure-5.14.21-150500.33.66.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.66.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:gfs2-kmp-azure-5.14.21-150500.33.66.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.66.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:kernel-azure-5.14.21-150500.33.66.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.66.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:kernel-azure-devel-5.14.21-150500.33.66.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.66.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:kernel-azure-extra-5.14.21-150500.33.66.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.66.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:kernel-azure-livepatch-devel-5.14.21-150500.33.66.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.66.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:kernel-azure-optional-5.14.21-150500.33.66.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:kernel-azure-vdso-5.14.21-150500.33.66.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:kernel-devel-azure-5.14.21-150500.33.66.1.noarch	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:kernel-source-azure-5.14.21-150500.33.66.1.noarch	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.66.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:kernel-syms-azure-5.14.21-150500.33.66.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.66.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:kselftests-kmp-azure-5.14.21-150500.33.66.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.66.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:ocfs2-kmp-azure-5.14.21-150500.33.66.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.66.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 15.5:reiserfs-kmp-azure-5.14.21-150500.33.66.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2021-47106

6.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2021-47517

6.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2021-47546

2.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact low

CVE-2022-38457

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-40133

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48645

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48706

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48808

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact low

CVE-2022-48865

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48868

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48869

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48870

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48871

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48872

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact important

CVE-2022-48873

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact important

CVE-2022-48875

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48878

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48880

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48881

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48882

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48883

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact important

CVE-2022-48884

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact important

CVE-2022-48885

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48886

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48887

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48888

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48889

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48890

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48891

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48893

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48896

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48898

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48899

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48903

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48904

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48905

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48906

4.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48907

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48909

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48910

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48912

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact important

CVE-2022-48913

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48914

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48915

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48916

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48917

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48918

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48919

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48920

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48921

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48923

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact important

CVE-2022-48924

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48925

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48926

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48927

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48928

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48929

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48930

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48931

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48932

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48934

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48937

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48938

6.6 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48939

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48940

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48941

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48942

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2022-48943

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-3610

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact important

CVE-2023-52458

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-52489

5.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-52498

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-52581

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-52859

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-52887

0 (None)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:N

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-52889

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-52893

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-52894

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-52896

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-52898

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-52899

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-52900

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-52901

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-52904

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-52905

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-52906

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-52907

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-52908

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-52909

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-52910

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-52911

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-52912

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2023-52913

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-26631

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-26668

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-26669

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-26677

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-26735

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-26808

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact important

CVE-2024-26812

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-26835

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact low

CVE-2024-26851

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-27010

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-27011

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-27016

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-27024

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-27079

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-27403

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-31076

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-35897

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-35902

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-35945

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-35971

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-36009

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-36013

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-36270

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-36286

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-36489

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-36929

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-36933

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-36936

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact low

CVE-2024-36962

6.2 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-38554

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-38602

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-38662

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-39489

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-40905

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-40978

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-40980

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-40995

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41000

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41007

2.5 (Low)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact low

CVE-2024-41009

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact important

CVE-2024-41011

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact important

CVE-2024-41016

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41020

6.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41022

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41035

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41036

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41038

6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41039

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41042

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41045

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41056

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41060

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41062

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact important

CVE-2024-41065

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41068

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41073

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41079

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41080

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41087

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact important

CVE-2024-41088

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41089

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41092

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41093

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41095

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41097

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-41098

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42069

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42074

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42076

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42077

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42080

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42082

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42085

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42086

6.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42087

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42089

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42090

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42092

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42095

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42097

2.8 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42098

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42101

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42104

6.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42106

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42107

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42110

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42114

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42115

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42119

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42120

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42121

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42126

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42127

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42130

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42137

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42139

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42142

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42143

0 (None)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:N

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42148

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42152

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42155

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42156

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42157

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42158

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42162

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42223

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42225

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42228

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42229

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42230

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42232

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact important

CVE-2024-42236

6.6 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42237

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42238

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42239

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42240

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42244

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42246

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42247

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42268

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42271

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact important

CVE-2024-42274

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42276

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42277

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42280

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42281

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42283

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42284

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42285

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42286

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42287

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42288

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42289

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42291

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42292

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42295

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42301

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42302

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42308

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42309

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42310

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42311

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42312

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42313

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42315

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42318

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42319

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42320

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-42322

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43816

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43818

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43819

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43821

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43823

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43829

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43830

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43831

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43834

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43837

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43839

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43841

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43842

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43846

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43849

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43853

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43854

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43856

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43858

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43860

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43861

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact important

CVE-2024-43863

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43866

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43867

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43871

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43872

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43873

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43879

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43880

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43882

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact important

CVE-2024-43883

6.4 (Medium)


                
                  CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43884

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43889

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43892

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43893

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43894

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43895

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43899

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43900

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43902

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43903

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43904

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43905

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43907

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43908

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-43909

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-44938

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact important

CVE-2024-44939

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

CVE-2024-44947

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 35 products, the same list as for CVE-2021-4441

Threats

Impact moderate

References

1236 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-security-upd…	self
https://bugzilla.suse.com/1193629	self
https://bugzilla.suse.com/1194111	self
https://bugzilla.suse.com/1194765	self
https://bugzilla.suse.com/1194869	self
https://bugzilla.suse.com/1196261	self
https://bugzilla.suse.com/1196516	self
https://bugzilla.suse.com/1196894	self
https://bugzilla.suse.com/1198017	self
https://bugzilla.suse.com/1203329	self
https://bugzilla.suse.com/1203330	self
https://bugzilla.suse.com/1203360	self
https://bugzilla.suse.com/1205462	self
https://bugzilla.suse.com/1206006	self
https://bugzilla.suse.com/1206258	self
https://bugzilla.suse.com/1206843	self
https://bugzilla.suse.com/1207158	self
https://bugzilla.suse.com/1208783	self
https://bugzilla.suse.com/1210644	self
https://bugzilla.suse.com/1213580	self
https://bugzilla.suse.com/1213632	self
https://bugzilla.suse.com/1214285	self
https://bugzilla.suse.com/1216834	self
https://bugzilla.suse.com/1220428	self
https://bugzilla.suse.com/1220877	self
https://bugzilla.suse.com/1220962	self
https://bugzilla.suse.com/1221269	self
https://bugzilla.suse.com/1221326	self
https://bugzilla.suse.com/1221630	self
https://bugzilla.suse.com/1221645	self
https://bugzilla.suse.com/1222335	self
https://bugzilla.suse.com/1222350	self
https://bugzilla.suse.com/1222372	self
https://bugzilla.suse.com/1222387	self
https://bugzilla.suse.com/1222634	self
https://bugzilla.suse.com/1222808	self
https://bugzilla.suse.com/1222967	self
https://bugzilla.suse.com/1223074	self
https://bugzilla.suse.com/1223191	self
https://bugzilla.suse.com/1223508	self
https://bugzilla.suse.com/1223720	self
https://bugzilla.suse.com/1223742	self
https://bugzilla.suse.com/1223777	self
https://bugzilla.suse.com/1223803	self
https://bugzilla.suse.com/1223807	self
https://bugzilla.suse.com/1224105	self
https://bugzilla.suse.com/1224415	self
https://bugzilla.suse.com/1224496	self
https://bugzilla.suse.com/1224510	self
https://bugzilla.suse.com/1224542	self
https://bugzilla.suse.com/1224578	self
https://bugzilla.suse.com/1224639	self
https://bugzilla.suse.com/1225162	self
https://bugzilla.suse.com/1225352	self
https://bugzilla.suse.com/1225428	self
https://bugzilla.suse.com/1225524	self
https://bugzilla.suse.com/1225578	self
https://bugzilla.suse.com/1225582	self
https://bugzilla.suse.com/1225773	self
https://bugzilla.suse.com/1225814	self
https://bugzilla.suse.com/1225827	self
https://bugzilla.suse.com/1225832	self
https://bugzilla.suse.com/1225903	self
https://bugzilla.suse.com/1226168	self
https://bugzilla.suse.com/1226530	self
https://bugzilla.suse.com/1226613	self
https://bugzilla.suse.com/1226742	self
https://bugzilla.suse.com/1226765	self
https://bugzilla.suse.com/1226798	self
https://bugzilla.suse.com/1226801	self
https://bugzilla.suse.com/1226874	self
https://bugzilla.suse.com/1226885	self
https://bugzilla.suse.com/1227079	self
https://bugzilla.suse.com/1227623	self
https://bugzilla.suse.com/1227761	self
https://bugzilla.suse.com/1227830	self
https://bugzilla.suse.com/1227863	self
https://bugzilla.suse.com/1227867	self
https://bugzilla.suse.com/1227929	self
https://bugzilla.suse.com/1227937	self
https://bugzilla.suse.com/1227958	self
https://bugzilla.suse.com/1228020	self
https://bugzilla.suse.com/1228065	self
https://bugzilla.suse.com/1228114	self
https://bugzilla.suse.com/1228410	self
https://bugzilla.suse.com/1228426	self
https://bugzilla.suse.com/1228427	self
https://bugzilla.suse.com/1228429	self
https://bugzilla.suse.com/1228446	self
https://bugzilla.suse.com/1228447	self
https://bugzilla.suse.com/1228449	self
https://bugzilla.suse.com/1228450	self
https://bugzilla.suse.com/1228452	self
https://bugzilla.suse.com/1228456	self
https://bugzilla.suse.com/1228463	self
https://bugzilla.suse.com/1228466	self
https://bugzilla.suse.com/1228467	self
https://bugzilla.suse.com/1228469	self
https://bugzilla.suse.com/1228480	self
https://bugzilla.suse.com/1228481	self
https://bugzilla.suse.com/1228482	self
https://bugzilla.suse.com/1228483	self
https://bugzilla.suse.com/1228484	self
https://bugzilla.suse.com/1228485	self
https://bugzilla.suse.com/1228487	self
https://bugzilla.suse.com/1228489	self
https://bugzilla.suse.com/1228491	self
https://bugzilla.suse.com/1228493	self
https://bugzilla.suse.com/1228494	self
https://bugzilla.suse.com/1228495	self
https://bugzilla.suse.com/1228496	self
https://bugzilla.suse.com/1228501	self
https://bugzilla.suse.com/1228503	self
https://bugzilla.suse.com/1228509	self
https://bugzilla.suse.com/1228513	self
https://bugzilla.suse.com/1228515	self
https://bugzilla.suse.com/1228516	self
https://bugzilla.suse.com/1228526	self
https://bugzilla.suse.com/1228531	self
https://bugzilla.suse.com/1228563	self
https://bugzilla.suse.com/1228564	self
https://bugzilla.suse.com/1228567	self
https://bugzilla.suse.com/1228576	self
https://bugzilla.suse.com/1228579	self
https://bugzilla.suse.com/1228584	self
https://bugzilla.suse.com/1228588	self
https://bugzilla.suse.com/1228590	self
https://bugzilla.suse.com/1228615	self
https://bugzilla.suse.com/1228616	self
https://bugzilla.suse.com/1228635	self
https://bugzilla.suse.com/1228636	self
https://bugzilla.suse.com/1228654	self
https://bugzilla.suse.com/1228656	self
https://bugzilla.suse.com/1228658	self
https://bugzilla.suse.com/1228660	self
https://bugzilla.suse.com/1228662	self
https://bugzilla.suse.com/1228667	self
https://bugzilla.suse.com/1228673	self
https://bugzilla.suse.com/1228677	self
https://bugzilla.suse.com/1228687	self
https://bugzilla.suse.com/1228706	self
https://bugzilla.suse.com/1228708	self
https://bugzilla.suse.com/1228710	self
https://bugzilla.suse.com/1228718	self
https://bugzilla.suse.com/1228720	self
https://bugzilla.suse.com/1228721	self
https://bugzilla.suse.com/1228722	self
https://bugzilla.suse.com/1228724	self
https://bugzilla.suse.com/1228726	self
https://bugzilla.suse.com/1228727	self
https://bugzilla.suse.com/1228733	self
https://bugzilla.suse.com/1228748	self
https://bugzilla.suse.com/1228766	self
https://bugzilla.suse.com/1228779	self
https://bugzilla.suse.com/1228801	self
https://bugzilla.suse.com/1228850	self
https://bugzilla.suse.com/1228857	self
https://bugzilla.suse.com/1228959	self
https://bugzilla.suse.com/1228964	self
https://bugzilla.suse.com/1228966	self
https://bugzilla.suse.com/1228967	self
https://bugzilla.suse.com/1228979	self
https://bugzilla.suse.com/1228988	self
https://bugzilla.suse.com/1228989	self
https://bugzilla.suse.com/1228991	self
https://bugzilla.suse.com/1228992	self
https://bugzilla.suse.com/1229042	self
https://bugzilla.suse.com/1229054	self
https://bugzilla.suse.com/1229086	self
https://bugzilla.suse.com/1229136	self
https://bugzilla.suse.com/1229154	self
https://bugzilla.suse.com/1229187	self
https://bugzilla.suse.com/1229188	self
https://bugzilla.suse.com/1229190	self
https://bugzilla.suse.com/1229287	self
https://bugzilla.suse.com/1229290	self
https://bugzilla.suse.com/1229292	self
https://bugzilla.suse.com/1229296	self
https://bugzilla.suse.com/1229297	self
https://bugzilla.suse.com/1229301	self
https://bugzilla.suse.com/1229303	self
https://bugzilla.suse.com/1229304	self
https://bugzilla.suse.com/1229305	self
https://bugzilla.suse.com/1229307	self
https://bugzilla.suse.com/1229309	self
https://bugzilla.suse.com/1229312	self
https://bugzilla.suse.com/1229314	self
https://bugzilla.suse.com/1229315	self
https://bugzilla.suse.com/1229317	self
https://bugzilla.suse.com/1229318	self
https://bugzilla.suse.com/1229319	self
https://bugzilla.suse.com/1229327	self
https://bugzilla.suse.com/1229341	self
https://bugzilla.suse.com/1229345	self
https://bugzilla.suse.com/1229346	self
https://bugzilla.suse.com/1229347	self
https://bugzilla.suse.com/1229349	self
https://bugzilla.suse.com/1229350	self
https://bugzilla.suse.com/1229351	self
https://bugzilla.suse.com/1229354	self
https://bugzilla.suse.com/1229356	self
https://bugzilla.suse.com/1229357	self
https://bugzilla.suse.com/1229358	self
https://bugzilla.suse.com/1229359	self
https://bugzilla.suse.com/1229360	self
https://bugzilla.suse.com/1229366	self
https://bugzilla.suse.com/1229370	self
https://bugzilla.suse.com/1229373	self
https://bugzilla.suse.com/1229374	self
https://bugzilla.suse.com/1229381	self
https://bugzilla.suse.com/1229382	self
https://bugzilla.suse.com/1229383	self
https://bugzilla.suse.com/1229386	self
https://bugzilla.suse.com/1229388	self
https://bugzilla.suse.com/1229391	self
https://bugzilla.suse.com/1229392	self
https://bugzilla.suse.com/1229395	self
https://bugzilla.suse.com/1229398	self
https://bugzilla.suse.com/1229399	self
https://bugzilla.suse.com/1229400	self
https://bugzilla.suse.com/1229407	self
https://bugzilla.suse.com/1229409	self
https://bugzilla.suse.com/1229410	self
https://bugzilla.suse.com/1229411	self
https://bugzilla.suse.com/1229413	self
https://bugzilla.suse.com/1229414	self
https://bugzilla.suse.com/1229417	self
https://bugzilla.suse.com/1229418	self
https://bugzilla.suse.com/1229444	self
https://bugzilla.suse.com/1229453	self
https://bugzilla.suse.com/1229454	self
https://bugzilla.suse.com/1229481	self
https://bugzilla.suse.com/1229482	self
https://bugzilla.suse.com/1229488	self
https://bugzilla.suse.com/1229489	self
https://bugzilla.suse.com/1229490	self
https://bugzilla.suse.com/1229493	self
https://bugzilla.suse.com/1229495	self
https://bugzilla.suse.com/1229497	self
https://bugzilla.suse.com/1229500	self
https://bugzilla.suse.com/1229503	self
https://bugzilla.suse.com/1229506	self
https://bugzilla.suse.com/1229507	self
https://bugzilla.suse.com/1229508	self
https://bugzilla.suse.com/1229509	self
https://bugzilla.suse.com/1229510	self
https://bugzilla.suse.com/1229512	self
https://bugzilla.suse.com/1229516	self
https://bugzilla.suse.com/1229521	self
https://bugzilla.suse.com/1229522	self
https://bugzilla.suse.com/1229523	self
https://bugzilla.suse.com/1229524	self
https://bugzilla.suse.com/1229525	self
https://bugzilla.suse.com/1229526	self
https://bugzilla.suse.com/1229527	self
https://bugzilla.suse.com/1229528	self
https://bugzilla.suse.com/1229529	self
https://bugzilla.suse.com/1229531	self
https://bugzilla.suse.com/1229533	self
https://bugzilla.suse.com/1229535	self
https://bugzilla.suse.com/1229536	self
https://bugzilla.suse.com/1229537	self
https://bugzilla.suse.com/1229540	self
https://bugzilla.suse.com/1229544	self
https://bugzilla.suse.com/1229545	self
https://bugzilla.suse.com/1229546	self
https://bugzilla.suse.com/1229547	self
https://bugzilla.suse.com/1229548	self
https://bugzilla.suse.com/1229554	self
https://bugzilla.suse.com/1229557	self
https://bugzilla.suse.com/1229558	self
https://bugzilla.suse.com/1229559	self
https://bugzilla.suse.com/1229560	self
https://bugzilla.suse.com/1229562	self
https://bugzilla.suse.com/1229564	self
https://bugzilla.suse.com/1229565	self
https://bugzilla.suse.com/1229566	self
https://bugzilla.suse.com/1229568	self
https://bugzilla.suse.com/1229569	self
https://bugzilla.suse.com/1229572	self
https://bugzilla.suse.com/1229573	self
https://bugzilla.suse.com/1229576	self
https://bugzilla.suse.com/1229581	self
https://bugzilla.suse.com/1229588	self
https://bugzilla.suse.com/1229598	self
https://bugzilla.suse.com/1229603	self
https://bugzilla.suse.com/1229604	self
https://bugzilla.suse.com/1229605	self
https://bugzilla.suse.com/1229608	self
https://bugzilla.suse.com/1229611	self
https://bugzilla.suse.com/1229612	self
https://bugzilla.suse.com/1229613	self
https://bugzilla.suse.com/1229614	self
https://bugzilla.suse.com/1229615	self
https://bugzilla.suse.com/1229616	self
https://bugzilla.suse.com/1229617	self
https://bugzilla.suse.com/1229620	self
https://bugzilla.suse.com/1229622	self
https://bugzilla.suse.com/1229623	self
https://bugzilla.suse.com/1229624	self
https://bugzilla.suse.com/1229625	self
https://bugzilla.suse.com/1229626	self
https://bugzilla.suse.com/1229628	self
https://bugzilla.suse.com/1229629	self
https://bugzilla.suse.com/1229630	self
https://bugzilla.suse.com/1229631	self
https://bugzilla.suse.com/1229632	self
https://bugzilla.suse.com/1229635	self
https://bugzilla.suse.com/1229636	self
https://bugzilla.suse.com/1229637	self
https://bugzilla.suse.com/1229638	self
https://bugzilla.suse.com/1229639	self
https://bugzilla.suse.com/1229641	self
https://bugzilla.suse.com/1229642	self
https://bugzilla.suse.com/1229643	self
https://bugzilla.suse.com/1229645	self
https://bugzilla.suse.com/1229657	self
https://bugzilla.suse.com/1229658	self
https://bugzilla.suse.com/1229662	self
https://bugzilla.suse.com/1229664	self
https://bugzilla.suse.com/1229707	self
https://bugzilla.suse.com/1229739	self
https://bugzilla.suse.com/1229743	self
https://bugzilla.suse.com/1229746	self
https://bugzilla.suse.com/1229754	self
https://bugzilla.suse.com/1229755	self
https://bugzilla.suse.com/1229756	self
https://bugzilla.suse.com/1229759	self
https://bugzilla.suse.com/1229761	self
https://bugzilla.suse.com/1229767	self
https://bugzilla.suse.com/1229768	self
https://bugzilla.suse.com/1229781	self
https://bugzilla.suse.com/1229784	self
https://bugzilla.suse.com/1229787	self
https://bugzilla.suse.com/1229788	self
https://bugzilla.suse.com/1229789	self
https://bugzilla.suse.com/1229792	self
https://bugzilla.suse.com/1229820	self
https://www.suse.com/security/cve/CVE-2021-4441/	self
https://www.suse.com/security/cve/CVE-2021-47106/	self
https://www.suse.com/security/cve/CVE-2021-47517/	self
https://www.suse.com/security/cve/CVE-2021-47546/	self
https://www.suse.com/security/cve/CVE-2022-38457/	self
https://www.suse.com/security/cve/CVE-2022-40133/	self
https://www.suse.com/security/cve/CVE-2022-48645/	self
https://www.suse.com/security/cve/CVE-2022-48706/	self
https://www.suse.com/security/cve/CVE-2022-48808/	self
https://www.suse.com/security/cve/CVE-2022-48865/	self
https://www.suse.com/security/cve/CVE-2022-48868/	self
https://www.suse.com/security/cve/CVE-2022-48869/	self
https://www.suse.com/security/cve/CVE-2022-48870/	self
https://www.suse.com/security/cve/CVE-2022-48871/	self
https://www.suse.com/security/cve/CVE-2022-48872/	self
https://www.suse.com/security/cve/CVE-2022-48873/	self
https://www.suse.com/security/cve/CVE-2022-48875/	self
https://www.suse.com/security/cve/CVE-2022-48878/	self
https://www.suse.com/security/cve/CVE-2022-48880/	self
https://www.suse.com/security/cve/CVE-2022-48881/	self
https://www.suse.com/security/cve/CVE-2022-48882/	self
https://www.suse.com/security/cve/CVE-2022-48883/	self
https://www.suse.com/security/cve/CVE-2022-48884/	self
https://www.suse.com/security/cve/CVE-2022-48885/	self
https://www.suse.com/security/cve/CVE-2022-48886/	self
https://www.suse.com/security/cve/CVE-2022-48887/	self
https://www.suse.com/security/cve/CVE-2022-48888/	self
https://www.suse.com/security/cve/CVE-2022-48889/	self
https://www.suse.com/security/cve/CVE-2022-48890/	self
https://www.suse.com/security/cve/CVE-2022-48891/	self
https://www.suse.com/security/cve/CVE-2022-48893/	self
https://www.suse.com/security/cve/CVE-2022-48896/	self
https://www.suse.com/security/cve/CVE-2022-48898/	self
https://www.suse.com/security/cve/CVE-2022-48899/	self
https://www.suse.com/security/cve/CVE-2022-48903/	self
https://www.suse.com/security/cve/CVE-2022-48904/	self
https://www.suse.com/security/cve/CVE-2022-48905/	self
https://www.suse.com/security/cve/CVE-2022-48906/	self
https://www.suse.com/security/cve/CVE-2022-48907/	self
https://www.suse.com/security/cve/CVE-2022-48909/	self
https://www.suse.com/security/cve/CVE-2022-48910/	self
https://www.suse.com/security/cve/CVE-2022-48912/	self
https://www.suse.com/security/cve/CVE-2022-48913/	self
https://www.suse.com/security/cve/CVE-2022-48914/	self
https://www.suse.com/security/cve/CVE-2022-48915/	self
https://www.suse.com/security/cve/CVE-2022-48916/	self
https://www.suse.com/security/cve/CVE-2022-48917/	self
https://www.suse.com/security/cve/CVE-2022-48918/	self
https://www.suse.com/security/cve/CVE-2022-48919/	self
https://www.suse.com/security/cve/CVE-2022-48920/	self
https://www.suse.com/security/cve/CVE-2022-48921/	self
https://www.suse.com/security/cve/CVE-2022-48923/	self
https://www.suse.com/security/cve/CVE-2022-48924/	self
https://www.suse.com/security/cve/CVE-2022-48925/	self
https://www.suse.com/security/cve/CVE-2022-48926/	self
https://www.suse.com/security/cve/CVE-2022-48927/	self
https://www.suse.com/security/cve/CVE-2022-48928/	self
https://www.suse.com/security/cve/CVE-2022-48929/	self
https://www.suse.com/security/cve/CVE-2022-48930/	self
https://www.suse.com/security/cve/CVE-2022-48931/	self
https://www.suse.com/security/cve/CVE-2022-48932/	self
https://www.suse.com/security/cve/CVE-2022-48934/	self
https://www.suse.com/security/cve/CVE-2022-48937/	self
https://www.suse.com/security/cve/CVE-2022-48938/	self
https://www.suse.com/security/cve/CVE-2022-48939/	self
https://www.suse.com/security/cve/CVE-2022-48940/	self
https://www.suse.com/security/cve/CVE-2022-48941/	self
https://www.suse.com/security/cve/CVE-2022-48942/	self
https://www.suse.com/security/cve/CVE-2022-48943/	self
https://www.suse.com/security/cve/CVE-2023-3610/	self
https://www.suse.com/security/cve/CVE-2023-52458/	self
https://www.suse.com/security/cve/CVE-2023-52489/	self
https://www.suse.com/security/cve/CVE-2023-52498/	self
https://www.suse.com/security/cve/CVE-2023-52581/	self
https://www.suse.com/security/cve/CVE-2023-52859/	self
https://www.suse.com/security/cve/CVE-2023-52887/	self
https://www.suse.com/security/cve/CVE-2023-52889/	self
https://www.suse.com/security/cve/CVE-2023-52893/	self
https://www.suse.com/security/cve/CVE-2023-52894/	self
https://www.suse.com/security/cve/CVE-2023-52896/	self
https://www.suse.com/security/cve/CVE-2023-52898/	self
https://www.suse.com/security/cve/CVE-2023-52899/	self
https://www.suse.com/security/cve/CVE-2023-52900/	self
https://www.suse.com/security/cve/CVE-2023-52901/	self
https://www.suse.com/security/cve/CVE-2023-52904/	self
https://www.suse.com/security/cve/CVE-2023-52905/	self
https://www.suse.com/security/cve/CVE-2023-52906/	self
https://www.suse.com/security/cve/CVE-2023-52907/	self
https://www.suse.com/security/cve/CVE-2023-52908/	self
https://www.suse.com/security/cve/CVE-2023-52909/	self
https://www.suse.com/security/cve/CVE-2023-52910/	self
https://www.suse.com/security/cve/CVE-2023-52911/	self
https://www.suse.com/security/cve/CVE-2023-52912/	self
https://www.suse.com/security/cve/CVE-2023-52913/	self
https://www.suse.com/security/cve/CVE-2024-26631/	self
https://www.suse.com/security/cve/CVE-2024-26668/	self
https://www.suse.com/security/cve/CVE-2024-26669/	self
https://www.suse.com/security/cve/CVE-2024-26677/	self
https://www.suse.com/security/cve/CVE-2024-26735/	self
https://www.suse.com/security/cve/CVE-2024-26808/	self
https://www.suse.com/security/cve/CVE-2024-26812/	self
https://www.suse.com/security/cve/CVE-2024-26835/	self
https://www.suse.com/security/cve/CVE-2024-26851/	self
https://www.suse.com/security/cve/CVE-2024-27010/	self
https://www.suse.com/security/cve/CVE-2024-27011/	self
https://www.suse.com/security/cve/CVE-2024-27016/	self
https://www.suse.com/security/cve/CVE-2024-27024/	self
https://www.suse.com/security/cve/CVE-2024-27079/	self
https://www.suse.com/security/cve/CVE-2024-27403/	self
https://www.suse.com/security/cve/CVE-2024-31076/	self
https://www.suse.com/security/cve/CVE-2024-35897/	self
https://www.suse.com/security/cve/CVE-2024-35902/	self
https://www.suse.com/security/cve/CVE-2024-35945/	self
https://www.suse.com/security/cve/CVE-2024-35971/	self
https://www.suse.com/security/cve/CVE-2024-36009/	self
https://www.suse.com/security/cve/CVE-2024-36013/	self
https://www.suse.com/security/cve/CVE-2024-36270/	self
https://www.suse.com/security/cve/CVE-2024-36286/	self
https://www.suse.com/security/cve/CVE-2024-36489/	self
https://www.suse.com/security/cve/CVE-2024-36929/	self
https://www.suse.com/security/cve/CVE-2024-36933/	self
https://www.suse.com/security/cve/CVE-2024-36936/	self
https://www.suse.com/security/cve/CVE-2024-36962/	self
https://www.suse.com/security/cve/CVE-2024-38554/	self
https://www.suse.com/security/cve/CVE-2024-38602/	self
https://www.suse.com/security/cve/CVE-2024-38662/	self
https://www.suse.com/security/cve/CVE-2024-39489/	self
https://www.suse.com/security/cve/CVE-2024-40905/	self
https://www.suse.com/security/cve/CVE-2024-40978/	self
https://www.suse.com/security/cve/CVE-2024-40980/	self
https://www.suse.com/security/cve/CVE-2024-40995/	self
https://www.suse.com/security/cve/CVE-2024-41000/	self
https://www.suse.com/security/cve/CVE-2024-41007/	self
https://www.suse.com/security/cve/CVE-2024-41009/	self
https://www.suse.com/security/cve/CVE-2024-41011/	self
https://www.suse.com/security/cve/CVE-2024-41016/	self
https://www.suse.com/security/cve/CVE-2024-41020/	self
https://www.suse.com/security/cve/CVE-2024-41022/	self
https://www.suse.com/security/cve/CVE-2024-41035/	self
https://www.suse.com/security/cve/CVE-2024-41036/	self
https://www.suse.com/security/cve/CVE-2024-41038/	self
https://www.suse.com/security/cve/CVE-2024-41039/	self
https://www.suse.com/security/cve/CVE-2024-41042/	self
https://www.suse.com/security/cve/CVE-2024-41045/	self
https://www.suse.com/security/cve/CVE-2024-41056/	self
https://www.suse.com/security/cve/CVE-2024-41060/	self
https://www.suse.com/security/cve/CVE-2024-41062/	self
https://www.suse.com/security/cve/CVE-2024-41065/	self
https://www.suse.com/security/cve/CVE-2024-41068/	self
https://www.suse.com/security/cve/CVE-2024-41073/	self
https://www.suse.com/security/cve/CVE-2024-41079/	self
https://www.suse.com/security/cve/CVE-2024-41080/	self
https://www.suse.com/security/cve/CVE-2024-41087/	self
https://www.suse.com/security/cve/CVE-2024-41088/	self
https://www.suse.com/security/cve/CVE-2024-41089/	self
https://www.suse.com/security/cve/CVE-2024-41092/	self
https://www.suse.com/security/cve/CVE-2024-41093/	self
https://www.suse.com/security/cve/CVE-2024-41095/	self
https://www.suse.com/security/cve/CVE-2024-41097/	self
https://www.suse.com/security/cve/CVE-2024-41098/	self
https://www.suse.com/security/cve/CVE-2024-42069/	self
https://www.suse.com/security/cve/CVE-2024-42074/	self
https://www.suse.com/security/cve/CVE-2024-42076/	self
https://www.suse.com/security/cve/CVE-2024-42077/	self
https://www.suse.com/security/cve/CVE-2024-42080/	self
https://www.suse.com/security/cve/CVE-2024-42082/	self
https://www.suse.com/security/cve/CVE-2024-42085/	self
https://www.suse.com/security/cve/CVE-2024-42086/	self
https://www.suse.com/security/cve/CVE-2024-42087/	self
https://www.suse.com/security/cve/CVE-2024-42089/	self
https://www.suse.com/security/cve/CVE-2024-42090/	self
https://www.suse.com/security/cve/CVE-2024-42092/	self
https://www.suse.com/security/cve/CVE-2024-42095/	self
https://www.suse.com/security/cve/CVE-2024-42097/	self
https://www.suse.com/security/cve/CVE-2024-42098/	self
https://www.suse.com/security/cve/CVE-2024-42101/	self
https://www.suse.com/security/cve/CVE-2024-42104/	self
https://www.suse.com/security/cve/CVE-2024-42106/	self
https://www.suse.com/security/cve/CVE-2024-42107/	self
https://www.suse.com/security/cve/CVE-2024-42110/	self
https://www.suse.com/security/cve/CVE-2024-42114/	self
https://www.suse.com/security/cve/CVE-2024-42115/	self
https://www.suse.com/security/cve/CVE-2024-42119/	self
https://www.suse.com/security/cve/CVE-2024-42120/	self
https://www.suse.com/security/cve/CVE-2024-42121/	self
https://www.suse.com/security/cve/CVE-2024-42126/	self
https://www.suse.com/security/cve/CVE-2024-42127/	self
https://www.suse.com/security/cve/CVE-2024-42130/	self
https://www.suse.com/security/cve/CVE-2024-42137/	self
https://www.suse.com/security/cve/CVE-2024-42139/	self
https://www.suse.com/security/cve/CVE-2024-42142/	self
https://www.suse.com/security/cve/CVE-2024-42143/	self
https://www.suse.com/security/cve/CVE-2024-42148/	self
https://www.suse.com/security/cve/CVE-2024-42152/	self
https://www.suse.com/security/cve/CVE-2024-42155/	self
https://www.suse.com/security/cve/CVE-2024-42156/	self
https://www.suse.com/security/cve/CVE-2024-42157/	self
https://www.suse.com/security/cve/CVE-2024-42158/	self
https://www.suse.com/security/cve/CVE-2024-42162/	self
https://www.suse.com/security/cve/CVE-2024-42223/	self
https://www.suse.com/security/cve/CVE-2024-42225/	self
https://www.suse.com/security/cve/CVE-2024-42228/	self
https://www.suse.com/security/cve/CVE-2024-42229/	self
https://www.suse.com/security/cve/CVE-2024-42230/	self
https://www.suse.com/security/cve/CVE-2024-42232/	self
https://www.suse.com/security/cve/CVE-2024-42236/	self
https://www.suse.com/security/cve/CVE-2024-42237/	self
https://www.suse.com/security/cve/CVE-2024-42238/	self
https://www.suse.com/security/cve/CVE-2024-42239/	self
https://www.suse.com/security/cve/CVE-2024-42240/	self
https://www.suse.com/security/cve/CVE-2024-42244/	self
https://www.suse.com/security/cve/CVE-2024-42246/	self
https://www.suse.com/security/cve/CVE-2024-42247/	self
https://www.suse.com/security/cve/CVE-2024-42268/	self
https://www.suse.com/security/cve/CVE-2024-42271/	self
https://www.suse.com/security/cve/CVE-2024-42274/	self
https://www.suse.com/security/cve/CVE-2024-42276/	self
https://www.suse.com/security/cve/CVE-2024-42277/	self
https://www.suse.com/security/cve/CVE-2024-42280/	self
https://www.suse.com/security/cve/CVE-2024-42281/	self
https://www.suse.com/security/cve/CVE-2024-42283/	self
https://www.suse.com/security/cve/CVE-2024-42284/	self
https://www.suse.com/security/cve/CVE-2024-42285/	self
https://www.suse.com/security/cve/CVE-2024-42286/	self
https://www.suse.com/security/cve/CVE-2024-42287/	self
https://www.suse.com/security/cve/CVE-2024-42288/	self
https://www.suse.com/security/cve/CVE-2024-42289/	self
https://www.suse.com/security/cve/CVE-2024-42291/	self
https://www.suse.com/security/cve/CVE-2024-42292/	self
https://www.suse.com/security/cve/CVE-2024-42295/	self
https://www.suse.com/security/cve/CVE-2024-42301/	self
https://www.suse.com/security/cve/CVE-2024-42302/	self
https://www.suse.com/security/cve/CVE-2024-42308/	self
https://www.suse.com/security/cve/CVE-2024-42309/	self
https://www.suse.com/security/cve/CVE-2024-42310/	self
https://www.suse.com/security/cve/CVE-2024-42311/	self
https://www.suse.com/security/cve/CVE-2024-42312/	self
https://www.suse.com/security/cve/CVE-2024-42313/	self
https://www.suse.com/security/cve/CVE-2024-42315/	self
https://www.suse.com/security/cve/CVE-2024-42318/	self
https://www.suse.com/security/cve/CVE-2024-42319/	self
https://www.suse.com/security/cve/CVE-2024-42320/	self
https://www.suse.com/security/cve/CVE-2024-42322/	self
https://www.suse.com/security/cve/CVE-2024-43816/	self
https://www.suse.com/security/cve/CVE-2024-43818/	self
https://www.suse.com/security/cve/CVE-2024-43819/	self
https://www.suse.com/security/cve/CVE-2024-43821/	self
https://www.suse.com/security/cve/CVE-2024-43823/	self
https://www.suse.com/security/cve/CVE-2024-43829/	self
https://www.suse.com/security/cve/CVE-2024-43830/	self
https://www.suse.com/security/cve/CVE-2024-43831/	self
https://www.suse.com/security/cve/CVE-2024-43834/	self
https://www.suse.com/security/cve/CVE-2024-43837/	self
https://www.suse.com/security/cve/CVE-2024-43839/	self
https://www.suse.com/security/cve/CVE-2024-43841/	self
https://www.suse.com/security/cve/CVE-2024-43842/	self
https://www.suse.com/security/cve/CVE-2024-43846/	self
https://www.suse.com/security/cve/CVE-2024-43849/	self
https://www.suse.com/security/cve/CVE-2024-43853/	self
https://www.suse.com/security/cve/CVE-2024-43854/	self
https://www.suse.com/security/cve/CVE-2024-43856/	self
https://www.suse.com/security/cve/CVE-2024-43858/	self
https://www.suse.com/security/cve/CVE-2024-43860/	self
https://www.suse.com/security/cve/CVE-2024-43861/	self
https://www.suse.com/security/cve/CVE-2024-43863/	self
https://www.suse.com/security/cve/CVE-2024-43866/	self
https://www.suse.com/security/cve/CVE-2024-43867/	self
https://www.suse.com/security/cve/CVE-2024-43871/	self
https://www.suse.com/security/cve/CVE-2024-43872/	self
https://www.suse.com/security/cve/CVE-2024-43873/	self
https://www.suse.com/security/cve/CVE-2024-43879/	self
https://www.suse.com/security/cve/CVE-2024-43880/	self
https://www.suse.com/security/cve/CVE-2024-43882/	self
https://www.suse.com/security/cve/CVE-2024-43883/	self
https://www.suse.com/security/cve/CVE-2024-43884/	self
https://www.suse.com/security/cve/CVE-2024-43889/	self
https://www.suse.com/security/cve/CVE-2024-43892/	self
https://www.suse.com/security/cve/CVE-2024-43893/	self
https://www.suse.com/security/cve/CVE-2024-43894/	self
https://www.suse.com/security/cve/CVE-2024-43895/	self
https://www.suse.com/security/cve/CVE-2024-43899/	self
https://www.suse.com/security/cve/CVE-2024-43900/	self
https://www.suse.com/security/cve/CVE-2024-43902/	self
https://www.suse.com/security/cve/CVE-2024-43903/	self
https://www.suse.com/security/cve/CVE-2024-43904/	self
https://www.suse.com/security/cve/CVE-2024-43905/	self
https://www.suse.com/security/cve/CVE-2024-43907/	self
https://www.suse.com/security/cve/CVE-2024-43908/	self
https://www.suse.com/security/cve/CVE-2024-43909/	self
https://www.suse.com/security/cve/CVE-2024-44938/	self
https://www.suse.com/security/cve/CVE-2024-44939/	self
https://www.suse.com/security/cve/CVE-2024-44947/	self
https://www.suse.com/security/cve/CVE-2021-4441	external
https://bugzilla.suse.com/1229598	external
https://www.suse.com/security/cve/CVE-2021-47106	external
https://bugzilla.suse.com/1220962	external
https://www.suse.com/security/cve/CVE-2021-47517	external
https://bugzilla.suse.com/1225428	external
https://www.suse.com/security/cve/CVE-2021-47546	external
https://bugzilla.suse.com/1225504	external
https://www.suse.com/security/cve/CVE-2022-38457	external
https://bugzilla.suse.com/1203330	external
https://www.suse.com/security/cve/CVE-2022-40133	external
https://bugzilla.suse.com/1203329	external
https://www.suse.com/security/cve/CVE-2022-48645	external
https://bugzilla.suse.com/1223508	external
https://www.suse.com/security/cve/CVE-2022-48706	external
https://bugzilla.suse.com/1225524	external
https://www.suse.com/security/cve/CVE-2022-48808	external
https://bugzilla.suse.com/1227958	external
https://www.suse.com/security/cve/CVE-2022-48865	external
https://bugzilla.suse.com/1228065	external
https://www.suse.com/security/cve/CVE-2022-48868	external
https://bugzilla.suse.com/1229506	external
https://www.suse.com/security/cve/CVE-2022-48869	external
https://bugzilla.suse.com/1229507	external
https://www.suse.com/security/cve/CVE-2022-48870	external
https://bugzilla.suse.com/1229508	external
https://www.suse.com/security/cve/CVE-2022-48871	external
https://bugzilla.suse.com/1229509	external
https://www.suse.com/security/cve/CVE-2022-48872	external
https://bugzilla.suse.com/1229510	external
https://bugzilla.suse.com/1229519	external
https://www.suse.com/security/cve/CVE-2022-48873	external
https://bugzilla.suse.com/1229512	external
https://bugzilla.suse.com/1229513	external
https://www.suse.com/security/cve/CVE-2022-48875	external
https://bugzilla.suse.com/1229516	external
https://www.suse.com/security/cve/CVE-2022-48878	external
https://bugzilla.suse.com/1229554	external
https://www.suse.com/security/cve/CVE-2022-48880	external
https://bugzilla.suse.com/1229557	external
https://www.suse.com/security/cve/CVE-2022-48881	external
https://bugzilla.suse.com/1229559	external
https://www.suse.com/security/cve/CVE-2022-48882	external
https://bugzilla.suse.com/1229558	external
https://www.suse.com/security/cve/CVE-2022-48883	external
https://bugzilla.suse.com/1229560	external
https://bugzilla.suse.com/1229561	external
https://www.suse.com/security/cve/CVE-2022-48884	external
https://bugzilla.suse.com/1229562	external
https://bugzilla.suse.com/1229563	external
https://www.suse.com/security/cve/CVE-2022-48885	external
https://bugzilla.suse.com/1229564	external
https://www.suse.com/security/cve/CVE-2022-48886	external
https://bugzilla.suse.com/1229548	external
https://www.suse.com/security/cve/CVE-2022-48887	external
https://bugzilla.suse.com/1229547	external
https://www.suse.com/security/cve/CVE-2022-48888	external
https://bugzilla.suse.com/1229546	external
https://www.suse.com/security/cve/CVE-2022-48889	external
https://bugzilla.suse.com/1229545	external
https://www.suse.com/security/cve/CVE-2022-48890	external
https://bugzilla.suse.com/1229544	external
https://www.suse.com/security/cve/CVE-2022-48891	external
https://bugzilla.suse.com/1229565	external
https://www.suse.com/security/cve/CVE-2022-48893	external
https://bugzilla.suse.com/1229576	external
https://www.suse.com/security/cve/CVE-2022-48896	external
https://bugzilla.suse.com/1229540	external
https://www.suse.com/security/cve/CVE-2022-48898	external
https://bugzilla.suse.com/1229537	external
https://www.suse.com/security/cve/CVE-2022-48899	external
https://bugzilla.suse.com/1229536	external
https://www.suse.com/security/cve/CVE-2022-48903	external
https://bugzilla.suse.com/1229613	external
https://www.suse.com/security/cve/CVE-2022-48904	external
https://bugzilla.suse.com/1229603	external
https://www.suse.com/security/cve/CVE-2022-48905	external
https://bugzilla.suse.com/1229604	external
https://www.suse.com/security/cve/CVE-2022-48906	external
https://bugzilla.suse.com/1229605	external
https://www.suse.com/security/cve/CVE-2022-48907	external
https://bugzilla.suse.com/1229608	external
https://www.suse.com/security/cve/CVE-2022-48909	external
https://bugzilla.suse.com/1229611	external
https://www.suse.com/security/cve/CVE-2022-48910	external
https://bugzilla.suse.com/1229632	external
https://www.suse.com/security/cve/CVE-2022-48912	external
https://bugzilla.suse.com/1229641	external
https://bugzilla.suse.com/1229644	external
https://www.suse.com/security/cve/CVE-2022-48913	external
https://bugzilla.suse.com/1229643	external
https://www.suse.com/security/cve/CVE-2022-48914	external
https://bugzilla.suse.com/1229642	external
https://www.suse.com/security/cve/CVE-2022-48915	external
https://bugzilla.suse.com/1229639	external
https://www.suse.com/security/cve/CVE-2022-48916	external
https://bugzilla.suse.com/1229638	external
https://www.suse.com/security/cve/CVE-2022-48917	external
https://bugzilla.suse.com/1229637	external
https://www.suse.com/security/cve/CVE-2022-48918	external
https://bugzilla.suse.com/1229636	external
https://www.suse.com/security/cve/CVE-2022-48919	external
https://bugzilla.suse.com/1229657	external
https://bugzilla.suse.com/1229660	external
https://www.suse.com/security/cve/CVE-2022-48920	external
https://bugzilla.suse.com/1229658	external
https://www.suse.com/security/cve/CVE-2022-48921	external
https://bugzilla.suse.com/1229635	external
https://www.suse.com/security/cve/CVE-2022-48923	external
https://bugzilla.suse.com/1229662	external
https://bugzilla.suse.com/1229663	external
https://www.suse.com/security/cve/CVE-2022-48924	external
https://bugzilla.suse.com/1229631	external
https://www.suse.com/security/cve/CVE-2022-48925	external
https://bugzilla.suse.com/1229630	external
https://www.suse.com/security/cve/CVE-2022-48926	external
https://bugzilla.suse.com/1229629	external
https://www.suse.com/security/cve/CVE-2022-48927	external
https://bugzilla.suse.com/1229628	external
https://www.suse.com/security/cve/CVE-2022-48928	external
https://bugzilla.suse.com/1229626	external
https://www.suse.com/security/cve/CVE-2022-48929	external
https://bugzilla.suse.com/1229625	external
https://www.suse.com/security/cve/CVE-2022-48930	external
https://bugzilla.suse.com/1229624	external
https://www.suse.com/security/cve/CVE-2022-48931	external
https://bugzilla.suse.com/1229623	external
https://www.suse.com/security/cve/CVE-2022-48932	external
https://bugzilla.suse.com/1229622	external
https://www.suse.com/security/cve/CVE-2022-48934	external
https://bugzilla.suse.com/1229620	external
https://www.suse.com/security/cve/CVE-2022-48937	external
https://bugzilla.suse.com/1229617	external
https://www.suse.com/security/cve/CVE-2022-48938	external
https://bugzilla.suse.com/1229664	external
https://www.suse.com/security/cve/CVE-2022-48939	external
https://bugzilla.suse.com/1229616	external
https://www.suse.com/security/cve/CVE-2022-48940	external
https://bugzilla.suse.com/1229615	external
https://www.suse.com/security/cve/CVE-2022-48941	external
https://bugzilla.suse.com/1229614	external
https://www.suse.com/security/cve/CVE-2022-48942	external
https://bugzilla.suse.com/1229612	external
https://www.suse.com/security/cve/CVE-2022-48943	external
https://bugzilla.suse.com/1229645	external
https://www.suse.com/security/cve/CVE-2023-3610	external
https://bugzilla.suse.com/1213580	external
https://bugzilla.suse.com/1213584	external
https://www.suse.com/security/cve/CVE-2023-52458	external
https://bugzilla.suse.com/1220428	external
https://www.suse.com/security/cve/CVE-2023-52489	external
https://bugzilla.suse.com/1221326	external
https://www.suse.com/security/cve/CVE-2023-52498	external
https://bugzilla.suse.com/1221269	external
https://www.suse.com/security/cve/CVE-2023-52581	external
https://bugzilla.suse.com/1220877	external
https://www.suse.com/security/cve/CVE-2023-52859	external
https://bugzilla.suse.com/1225582	external
https://www.suse.com/security/cve/CVE-2023-52887	external
https://bugzilla.suse.com/1228426	external
https://www.suse.com/security/cve/CVE-2023-52889	external
https://bugzilla.suse.com/1229287	external
https://www.suse.com/security/cve/CVE-2023-52893	external
https://bugzilla.suse.com/1229535	external
https://www.suse.com/security/cve/CVE-2023-52894	external
https://bugzilla.suse.com/1229566	external
https://www.suse.com/security/cve/CVE-2023-52896	external
https://bugzilla.suse.com/1229533	external
https://www.suse.com/security/cve/CVE-2023-52898	external
https://bugzilla.suse.com/1229568	external
https://www.suse.com/security/cve/CVE-2023-52899	external
https://bugzilla.suse.com/1229569	external
https://www.suse.com/security/cve/CVE-2023-52900	external
https://bugzilla.suse.com/1229581	external
https://www.suse.com/security/cve/CVE-2023-52901	external
https://bugzilla.suse.com/1229531	external
https://www.suse.com/security/cve/CVE-2023-52904	external
https://bugzilla.suse.com/1229529	external
https://www.suse.com/security/cve/CVE-2023-52905	external
https://bugzilla.suse.com/1229528	external
https://www.suse.com/security/cve/CVE-2023-52906	external
https://bugzilla.suse.com/1229527	external
https://www.suse.com/security/cve/CVE-2023-52907	external
https://bugzilla.suse.com/1229526	external
https://www.suse.com/security/cve/CVE-2023-52908	external
https://bugzilla.suse.com/1229525	external
https://www.suse.com/security/cve/CVE-2023-52909	external
https://bugzilla.suse.com/1229524	external
https://www.suse.com/security/cve/CVE-2023-52910	external
https://bugzilla.suse.com/1229523	external
https://www.suse.com/security/cve/CVE-2023-52911	external
https://bugzilla.suse.com/1229522	external
https://www.suse.com/security/cve/CVE-2023-52912	external
https://bugzilla.suse.com/1229588	external
https://www.suse.com/security/cve/CVE-2023-52913	external
https://bugzilla.suse.com/1229521	external
https://www.suse.com/security/cve/CVE-2024-26631	external
https://bugzilla.suse.com/1221630	external
https://www.suse.com/security/cve/CVE-2024-26668	external
https://bugzilla.suse.com/1222335	external
https://www.suse.com/security/cve/CVE-2024-26669	external
https://bugzilla.suse.com/1222350	external
https://www.suse.com/security/cve/CVE-2024-26677	external
https://bugzilla.suse.com/1222387	external
https://www.suse.com/security/cve/CVE-2024-26735	external
https://bugzilla.suse.com/1222372	external
https://www.suse.com/security/cve/CVE-2024-26808	external
https://bugzilla.suse.com/1222634	external
https://bugzilla.suse.com/1245772	external
https://www.suse.com/security/cve/CVE-2024-26812	external
https://bugzilla.suse.com/1222808	external
https://www.suse.com/security/cve/CVE-2024-26835	external
https://bugzilla.suse.com/1222967	external
https://www.suse.com/security/cve/CVE-2024-26851	external
https://bugzilla.suse.com/1223074	external
https://www.suse.com/security/cve/CVE-2024-27010	external
https://bugzilla.suse.com/1223720	external
https://www.suse.com/security/cve/CVE-2024-27011	external
https://bugzilla.suse.com/1223803	external
https://www.suse.com/security/cve/CVE-2024-27016	external
https://bugzilla.suse.com/1223807	external
https://www.suse.com/security/cve/CVE-2024-27024	external
https://bugzilla.suse.com/1223777	external
https://www.suse.com/security/cve/CVE-2024-27079	external
https://bugzilla.suse.com/1223742	external
https://www.suse.com/security/cve/CVE-2024-27403	external
https://bugzilla.suse.com/1224415	external
https://www.suse.com/security/cve/CVE-2024-31076	external
https://bugzilla.suse.com/1226765	external
https://www.suse.com/security/cve/CVE-2024-35897	external
https://bugzilla.suse.com/1224510	external
https://www.suse.com/security/cve/CVE-2024-35902	external
https://bugzilla.suse.com/1224496	external
https://www.suse.com/security/cve/CVE-2024-35945	external
https://bugzilla.suse.com/1224639	external
https://www.suse.com/security/cve/CVE-2024-35971	external
https://bugzilla.suse.com/1224578	external
https://www.suse.com/security/cve/CVE-2024-36009	external
https://bugzilla.suse.com/1224542	external
https://www.suse.com/security/cve/CVE-2024-36013	external
https://bugzilla.suse.com/1225578	external
https://www.suse.com/security/cve/CVE-2024-36270	external
https://bugzilla.suse.com/1226798	external
https://www.suse.com/security/cve/CVE-2024-36286	external
https://bugzilla.suse.com/1226801	external
https://www.suse.com/security/cve/CVE-2024-36489	external
https://bugzilla.suse.com/1226874	external
https://www.suse.com/security/cve/CVE-2024-36929	external
https://bugzilla.suse.com/1225814	external
https://www.suse.com/security/cve/CVE-2024-36933	external
https://bugzilla.suse.com/1225832	external
https://www.suse.com/security/cve/CVE-2024-36936	external
https://bugzilla.suse.com/1225773	external
https://www.suse.com/security/cve/CVE-2024-36962	external
https://bugzilla.suse.com/1225827	external
https://www.suse.com/security/cve/CVE-2024-38554	external
https://bugzilla.suse.com/1226742	external
https://www.suse.com/security/cve/CVE-2024-38602	external
https://bugzilla.suse.com/1226613	external
https://www.suse.com/security/cve/CVE-2024-38662	external
https://bugzilla.suse.com/1226885	external
https://www.suse.com/security/cve/CVE-2024-39489	external
https://bugzilla.suse.com/1227623	external
https://www.suse.com/security/cve/CVE-2024-40905	external
https://bugzilla.suse.com/1227761	external
https://www.suse.com/security/cve/CVE-2024-40978	external
https://bugzilla.suse.com/1227929	external
https://www.suse.com/security/cve/CVE-2024-40980	external
https://bugzilla.suse.com/1227937	external
https://www.suse.com/security/cve/CVE-2024-40995	external
https://bugzilla.suse.com/1227830	external
https://www.suse.com/security/cve/CVE-2024-41000	external
https://bugzilla.suse.com/1227867	external
https://www.suse.com/security/cve/CVE-2024-41007	external
https://bugzilla.suse.com/1227863	external
https://www.suse.com/security/cve/CVE-2024-41009	external
https://bugzilla.suse.com/1228020	external
https://bugzilla.suse.com/1245988	external
https://www.suse.com/security/cve/CVE-2024-41011	external
https://bugzilla.suse.com/1228114	external
https://bugzilla.suse.com/1228115	external
https://www.suse.com/security/cve/CVE-2024-41016	external
https://bugzilla.suse.com/1228410	external
https://www.suse.com/security/cve/CVE-2024-41020	external
https://bugzilla.suse.com/1228427	external
https://www.suse.com/security/cve/CVE-2024-41022	external
https://bugzilla.suse.com/1228429	external
https://www.suse.com/security/cve/CVE-2024-41035	external
https://bugzilla.suse.com/1228485	external
https://www.suse.com/security/cve/CVE-2024-41036	external
https://bugzilla.suse.com/1228496	external
https://www.suse.com/security/cve/CVE-2024-41038	external
https://bugzilla.suse.com/1228509	external
https://www.suse.com/security/cve/CVE-2024-41039	external
https://bugzilla.suse.com/1228515	external
https://www.suse.com/security/cve/CVE-2024-41042	external
https://bugzilla.suse.com/1228526	external
https://www.suse.com/security/cve/CVE-2024-41045	external
https://bugzilla.suse.com/1228531	external
https://www.suse.com/security/cve/CVE-2024-41056	external
https://bugzilla.suse.com/1228480	external
https://www.suse.com/security/cve/CVE-2024-41060	external
https://bugzilla.suse.com/1228567	external
https://www.suse.com/security/cve/CVE-2024-41062	external
https://bugzilla.suse.com/1228576	external
https://bugzilla.suse.com/1228578	external
https://www.suse.com/security/cve/CVE-2024-41065	external
https://bugzilla.suse.com/1228636	external
https://www.suse.com/security/cve/CVE-2024-41068	external
https://bugzilla.suse.com/1228579	external
https://www.suse.com/security/cve/CVE-2024-41073	external
https://bugzilla.suse.com/1228635	external
https://www.suse.com/security/cve/CVE-2024-41079	external
https://bugzilla.suse.com/1228615	external
https://www.suse.com/security/cve/CVE-2024-41080	external
https://bugzilla.suse.com/1228616	external
https://www.suse.com/security/cve/CVE-2024-41087	external
https://bugzilla.suse.com/1228466	external
https://bugzilla.suse.com/1228740	external
https://www.suse.com/security/cve/CVE-2024-41088	external
https://bugzilla.suse.com/1228469	external
https://www.suse.com/security/cve/CVE-2024-41089	external
https://bugzilla.suse.com/1228658	external
https://www.suse.com/security/cve/CVE-2024-41092	external
https://bugzilla.suse.com/1228483	external
https://www.suse.com/security/cve/CVE-2024-41093	external
https://bugzilla.suse.com/1228660	external
https://www.suse.com/security/cve/CVE-2024-41095	external
https://bugzilla.suse.com/1228662	external
https://www.suse.com/security/cve/CVE-2024-41097	external
https://bugzilla.suse.com/1228513	external
https://www.suse.com/security/cve/CVE-2024-41098	external
https://bugzilla.suse.com/1228467	external
https://www.suse.com/security/cve/CVE-2024-42069	external
https://bugzilla.suse.com/1228463	external
https://www.suse.com/security/cve/CVE-2024-42074	external
https://bugzilla.suse.com/1228481	external
https://www.suse.com/security/cve/CVE-2024-42076	external
https://bugzilla.suse.com/1228484	external
https://www.suse.com/security/cve/CVE-2024-42077	external
https://bugzilla.suse.com/1228516	external
https://www.suse.com/security/cve/CVE-2024-42080	external
https://bugzilla.suse.com/1228673	external
https://www.suse.com/security/cve/CVE-2024-42082	external
https://bugzilla.suse.com/1228482	external
https://www.suse.com/security/cve/CVE-2024-42085	external
https://bugzilla.suse.com/1228456	external
https://www.suse.com/security/cve/CVE-2024-42086	external
https://bugzilla.suse.com/1228452	external
https://www.suse.com/security/cve/CVE-2024-42087	external
https://bugzilla.suse.com/1228677	external
https://www.suse.com/security/cve/CVE-2024-42089	external
https://bugzilla.suse.com/1228450	external
https://www.suse.com/security/cve/CVE-2024-42090	external
https://bugzilla.suse.com/1228449	external
https://www.suse.com/security/cve/CVE-2024-42092	external
https://bugzilla.suse.com/1228447	external
https://www.suse.com/security/cve/CVE-2024-42095	external
https://bugzilla.suse.com/1228446	external
https://www.suse.com/security/cve/CVE-2024-42097	external
https://bugzilla.suse.com/1228766	external
https://www.suse.com/security/cve/CVE-2024-42098	external
https://bugzilla.suse.com/1228779	external
https://www.suse.com/security/cve/CVE-2024-42101	external
https://bugzilla.suse.com/1228495	external
https://www.suse.com/security/cve/CVE-2024-42104	external
https://bugzilla.suse.com/1228654	external
https://www.suse.com/security/cve/CVE-2024-42106	external
https://bugzilla.suse.com/1228493	external
https://www.suse.com/security/cve/CVE-2024-42107	external
https://bugzilla.suse.com/1228494	external
https://www.suse.com/security/cve/CVE-2024-42110	external
https://bugzilla.suse.com/1228501	external
https://www.suse.com/security/cve/CVE-2024-42114	external
https://bugzilla.suse.com/1228564	external
https://www.suse.com/security/cve/CVE-2024-42115	external
https://bugzilla.suse.com/1228656	external
https://www.suse.com/security/cve/CVE-2024-42119	external
https://bugzilla.suse.com/1228584	external
https://www.suse.com/security/cve/CVE-2024-42120	external
https://bugzilla.suse.com/1228588	external
https://www.suse.com/security/cve/CVE-2024-42121	external
https://bugzilla.suse.com/1228590	external
https://www.suse.com/security/cve/CVE-2024-42126	external
https://bugzilla.suse.com/1228718	external
https://www.suse.com/security/cve/CVE-2024-42127	external
https://bugzilla.suse.com/1228721	external
https://www.suse.com/security/cve/CVE-2024-42130	external
https://bugzilla.suse.com/1228687	external
https://www.suse.com/security/cve/CVE-2024-42137	external
https://bugzilla.suse.com/1228563	external
https://www.suse.com/security/cve/CVE-2024-42139	external
https://bugzilla.suse.com/1228503	external
https://www.suse.com/security/cve/CVE-2024-42142	external
https://bugzilla.suse.com/1228491	external
https://www.suse.com/security/cve/CVE-2024-42143	external
https://bugzilla.suse.com/1228748	external
https://www.suse.com/security/cve/CVE-2024-42148	external
https://bugzilla.suse.com/1228487	external
https://www.suse.com/security/cve/CVE-2024-42152	external
https://bugzilla.suse.com/1228724	external
https://www.suse.com/security/cve/CVE-2024-42155	external
https://bugzilla.suse.com/1228733	external
https://www.suse.com/security/cve/CVE-2024-42156	external
https://bugzilla.suse.com/1228722	external
https://www.suse.com/security/cve/CVE-2024-42157	external
https://bugzilla.suse.com/1228727	external
https://www.suse.com/security/cve/CVE-2024-42158	external
https://bugzilla.suse.com/1228720	external
https://www.suse.com/security/cve/CVE-2024-42162	external
https://bugzilla.suse.com/1228706	external
https://www.suse.com/security/cve/CVE-2024-42223	external
https://bugzilla.suse.com/1228726	external
https://www.suse.com/security/cve/CVE-2024-42225	external
https://bugzilla.suse.com/1228710	external
https://www.suse.com/security/cve/CVE-2024-42228	external
https://bugzilla.suse.com/1228667	external
https://www.suse.com/security/cve/CVE-2024-42229	external
https://bugzilla.suse.com/1228708	external
https://www.suse.com/security/cve/CVE-2024-42230	external
https://bugzilla.suse.com/1228489	external
https://www.suse.com/security/cve/CVE-2024-42232	external
https://bugzilla.suse.com/1228959	external
https://bugzilla.suse.com/1229458	external
https://www.suse.com/security/cve/CVE-2024-42236	external
https://bugzilla.suse.com/1228964	external
https://www.suse.com/security/cve/CVE-2024-42237	external
https://bugzilla.suse.com/1228992	external
https://www.suse.com/security/cve/CVE-2024-42238	external
https://bugzilla.suse.com/1228991	external
https://www.suse.com/security/cve/CVE-2024-42239	external
https://bugzilla.suse.com/1228979	external
https://www.suse.com/security/cve/CVE-2024-42240	external
https://bugzilla.suse.com/1228966	external
https://www.suse.com/security/cve/CVE-2024-42244	external
https://bugzilla.suse.com/1228967	external
https://www.suse.com/security/cve/CVE-2024-42246	external
https://bugzilla.suse.com/1228989	external
https://www.suse.com/security/cve/CVE-2024-42247	external
https://bugzilla.suse.com/1228988	external
https://www.suse.com/security/cve/CVE-2024-42268	external
https://bugzilla.suse.com/1229391	external
https://www.suse.com/security/cve/CVE-2024-42271	external
https://bugzilla.suse.com/1229400	external
https://bugzilla.suse.com/1229401	external
https://www.suse.com/security/cve/CVE-2024-42274	external
https://bugzilla.suse.com/1229417	external
https://www.suse.com/security/cve/CVE-2024-42276	external
https://bugzilla.suse.com/1229410	external
https://www.suse.com/security/cve/CVE-2024-42277	external
https://bugzilla.suse.com/1229409	external
https://www.suse.com/security/cve/CVE-2024-42280	external
https://bugzilla.suse.com/1229388	external
https://www.suse.com/security/cve/CVE-2024-42281	external
https://bugzilla.suse.com/1229386	external
https://www.suse.com/security/cve/CVE-2024-42283	external
https://bugzilla.suse.com/1229383	external
https://www.suse.com/security/cve/CVE-2024-42284	external
https://bugzilla.suse.com/1229382	external
https://www.suse.com/security/cve/CVE-2024-42285	external
https://bugzilla.suse.com/1229381	external
https://www.suse.com/security/cve/CVE-2024-42286	external
https://bugzilla.suse.com/1229395	external
https://www.suse.com/security/cve/CVE-2024-42287	external
https://bugzilla.suse.com/1229392	external
https://www.suse.com/security/cve/CVE-2024-42288	external
https://bugzilla.suse.com/1229398	external
https://www.suse.com/security/cve/CVE-2024-42289	external
https://bugzilla.suse.com/1229399	external
https://www.suse.com/security/cve/CVE-2024-42291	external
https://bugzilla.suse.com/1229374	external
https://www.suse.com/security/cve/CVE-2024-42292	external
https://bugzilla.suse.com/1229373	external
https://www.suse.com/security/cve/CVE-2024-42295	external
https://bugzilla.suse.com/1229370	external
https://www.suse.com/security/cve/CVE-2024-42301	external
https://bugzilla.suse.com/1229407	external
https://www.suse.com/security/cve/CVE-2024-42302	external
https://bugzilla.suse.com/1229366	external
https://www.suse.com/security/cve/CVE-2024-42308	external
https://bugzilla.suse.com/1229411	external
https://www.suse.com/security/cve/CVE-2024-42309	external
https://bugzilla.suse.com/1229359	external
https://www.suse.com/security/cve/CVE-2024-42310	external
https://bugzilla.suse.com/1229358	external
https://www.suse.com/security/cve/CVE-2024-42311	external
https://bugzilla.suse.com/1229413	external
https://www.suse.com/security/cve/CVE-2024-42312	external
https://bugzilla.suse.com/1229357	external
https://www.suse.com/security/cve/CVE-2024-42313	external
https://bugzilla.suse.com/1229356	external
https://www.suse.com/security/cve/CVE-2024-42315	external
https://bugzilla.suse.com/1229354	external
https://www.suse.com/security/cve/CVE-2024-42318	external
https://bugzilla.suse.com/1229351	external
https://www.suse.com/security/cve/CVE-2024-42319	external
https://bugzilla.suse.com/1229350	external
https://www.suse.com/security/cve/CVE-2024-42320	external
https://bugzilla.suse.com/1229349	external
https://www.suse.com/security/cve/CVE-2024-42322	external
https://bugzilla.suse.com/1229347	external
https://www.suse.com/security/cve/CVE-2024-43816	external
https://bugzilla.suse.com/1229318	external
https://www.suse.com/security/cve/CVE-2024-43818	external
https://bugzilla.suse.com/1229296	external
https://www.suse.com/security/cve/CVE-2024-43819	external
https://bugzilla.suse.com/1229290	external
https://www.suse.com/security/cve/CVE-2024-43821	external
https://bugzilla.suse.com/1229315	external
https://www.suse.com/security/cve/CVE-2024-43823	external
https://bugzilla.suse.com/1229303	external
https://www.suse.com/security/cve/CVE-2024-43829	external
https://bugzilla.suse.com/1229341	external
https://www.suse.com/security/cve/CVE-2024-43830	external
https://bugzilla.suse.com/1229305	external
https://www.suse.com/security/cve/CVE-2024-43831	external
https://bugzilla.suse.com/1229309	external
https://www.suse.com/security/cve/CVE-2024-43834	external
https://bugzilla.suse.com/1229314	external
https://www.suse.com/security/cve/CVE-2024-43837	external
https://bugzilla.suse.com/1229297	external
https://www.suse.com/security/cve/CVE-2024-43839	external
https://bugzilla.suse.com/1229301	external
https://www.suse.com/security/cve/CVE-2024-43841	external
https://bugzilla.suse.com/1229304	external
https://www.suse.com/security/cve/CVE-2024-43842	external
https://bugzilla.suse.com/1229317	external
https://www.suse.com/security/cve/CVE-2024-43846	external
https://bugzilla.suse.com/1229360	external
https://www.suse.com/security/cve/CVE-2024-43849	external
https://bugzilla.suse.com/1229307	external
https://www.suse.com/security/cve/CVE-2024-43853	external
https://bugzilla.suse.com/1229292	external
https://www.suse.com/security/cve/CVE-2024-43854	external
https://bugzilla.suse.com/1229345	external
https://www.suse.com/security/cve/CVE-2024-43856	external
https://bugzilla.suse.com/1229346	external
https://www.suse.com/security/cve/CVE-2024-43858	external
https://bugzilla.suse.com/1229414	external
https://www.suse.com/security/cve/CVE-2024-43860	external
https://bugzilla.suse.com/1229319	external
https://www.suse.com/security/cve/CVE-2024-43861	external
https://bugzilla.suse.com/1229500	external
https://bugzilla.suse.com/1229553	external
https://www.suse.com/security/cve/CVE-2024-43863	external
https://bugzilla.suse.com/1229497	external
https://www.suse.com/security/cve/CVE-2024-43866	external
https://bugzilla.suse.com/1229495	external
https://www.suse.com/security/cve/CVE-2024-43867	external
https://bugzilla.suse.com/1229493	external
https://www.suse.com/security/cve/CVE-2024-43871	external
https://bugzilla.suse.com/1229490	external
https://www.suse.com/security/cve/CVE-2024-43872	external
https://bugzilla.suse.com/1229489	external
https://www.suse.com/security/cve/CVE-2024-43873	external
https://bugzilla.suse.com/1229488	external
https://www.suse.com/security/cve/CVE-2024-43879	external
https://bugzilla.suse.com/1229482	external
https://www.suse.com/security/cve/CVE-2024-43880	external
https://bugzilla.suse.com/1229481	external
https://www.suse.com/security/cve/CVE-2024-43882	external
https://bugzilla.suse.com/1229503	external
https://bugzilla.suse.com/1229504	external
https://www.suse.com/security/cve/CVE-2024-43883	external
https://bugzilla.suse.com/1229707	external
https://www.suse.com/security/cve/CVE-2024-43884	external
https://bugzilla.suse.com/1229739	external
https://www.suse.com/security/cve/CVE-2024-43889	external
https://bugzilla.suse.com/1229743	external
https://www.suse.com/security/cve/CVE-2024-43892	external
https://bugzilla.suse.com/1229761	external
https://www.suse.com/security/cve/CVE-2024-43893	external
https://bugzilla.suse.com/1229759	external
https://www.suse.com/security/cve/CVE-2024-43894	external
https://bugzilla.suse.com/1229746	external
https://www.suse.com/security/cve/CVE-2024-43895	external
https://bugzilla.suse.com/1229755	external
https://www.suse.com/security/cve/CVE-2024-43899	external
https://bugzilla.suse.com/1229754	external
https://www.suse.com/security/cve/CVE-2024-43900	external
https://bugzilla.suse.com/1229756	external
https://www.suse.com/security/cve/CVE-2024-43902	external
https://bugzilla.suse.com/1229767	external
https://www.suse.com/security/cve/CVE-2024-43903	external
https://bugzilla.suse.com/1229781	external
https://www.suse.com/security/cve/CVE-2024-43904	external
https://bugzilla.suse.com/1229768	external
https://www.suse.com/security/cve/CVE-2024-43905	external
https://bugzilla.suse.com/1229784	external
https://www.suse.com/security/cve/CVE-2024-43907	external
https://bugzilla.suse.com/1229787	external
https://www.suse.com/security/cve/CVE-2024-43908	external
https://bugzilla.suse.com/1229788	external
https://www.suse.com/security/cve/CVE-2024-43909	external
https://bugzilla.suse.com/1229789	external
https://www.suse.com/security/cve/CVE-2024-44938	external
https://bugzilla.suse.com/1229792	external
https://bugzilla.suse.com/1229793	external
https://www.suse.com/security/cve/CVE-2024-44939	external
https://bugzilla.suse.com/1229820	external
https://www.suse.com/security/cve/CVE-2024-44947	external
https://bugzilla.suse.com/1229456	external
https://bugzilla.suse.com/1230098	external

JSON

To clipboard

Loading 3.6 MB of JSON…

CVE-2024-42283 (GCVE-0-2024-42283)

Vulnerability from cvelistv5 – Published: 2024-08-17 09:08 – Updated: 2026-05-12 11:56

Title

net: nexthop: Initialize all fields in dumped nexthops

Summary

In the Linux kernel, the following vulnerability has been resolved: net: nexthop: Initialize all fields in dumped nexthops struct nexthop_grp contains two reserved fields that are not initialized by nla_put_nh_group(), and carry garbage. This can be observed e.g. with strace (edited for clarity): # ip nexthop add id 1 dev lo # ip nexthop add id 101 group 1 # strace -e recvmsg ip nexthop get id 101 ... recvmsg(... [{nla_len=12, nla_type=NHA_GROUP}, [{id=1, weight=0, resvd1=0x69, resvd2=0x67}]] ...) = 52 The fields are reserved and therefore not currently used. But as they are, they leak kernel memory, and the fact they are not just zero complicates repurposing of the fields for new ends. Initialize the full structure.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-10 16:11 UTC

Assigner

Linux mitre root

References

10 references

URL	Tags
https://git.kernel.org/stable/c/fd06cb4a5fc7bda3d…
https://git.kernel.org/stable/c/5cc4d71dda2dd4f15…
https://git.kernel.org/stable/c/9e8f558a3afe99ce5…
https://git.kernel.org/stable/c/1377de719652d868f…
https://git.kernel.org/stable/c/7704460acd7f5d35e…
https://git.kernel.org/stable/c/a13d3864b76ac8708…
https://git.kernel.org/stable/c/6d745cd0e9720282c…
https://lists.debian.org/debian-lts-announce/2025…
https://lists.debian.org/debian-lts-announce/2024…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

3 products

Vendor	Product	Version
Linux	Linux	Affected: 430a049190de3c9e219f43084de9f1122da04570 , < fd06cb4a5fc7bda3dea31712618a62af72a1c6cb (git) Affected: 430a049190de3c9e219f43084de9f1122da04570 , < 5cc4d71dda2dd4f1520f40e634a527022e48ccd8 (git) Affected: 430a049190de3c9e219f43084de9f1122da04570 , < 9e8f558a3afe99ce51a642ce0d3637ddc2b5d5d0 (git) Affected: 430a049190de3c9e219f43084de9f1122da04570 , < 1377de719652d868f5317ba8398b7e74c5f0430b (git) Affected: 430a049190de3c9e219f43084de9f1122da04570 , < 7704460acd7f5d35eb07c52500987dc9b95313fb (git) Affected: 430a049190de3c9e219f43084de9f1122da04570 , < a13d3864b76ac87085ec530b2ff8e37482a63a96 (git) Affected: 430a049190de3c9e219f43084de9f1122da04570 , < 6d745cd0e9720282cd291d36b9db528aea18add2 (git)
Linux	Linux	Affected: 5.3 Unaffected: 0 , < 5.3 (semver) Unaffected: 5.4.282 , ≤ 5.4.* (semver) Unaffected: 5.10.224 , ≤ 5.10.* (semver) Unaffected: 5.15.165 , ≤ 5.15.* (semver) Unaffected: 6.1.103 , ≤ 6.1.* (semver) Unaffected: 6.6.44 , ≤ 6.6.* (semver) Unaffected: 6.10.3 , ≤ 6.10.* (semver) Unaffected: 6.11 , ≤ * (original_commit_for_fix)
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	Affected: 0 , < * (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-42283",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:11:29.775671Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-12T17:33:05.278Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:03:26.190Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-12T11:56:46.841Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ipv4/nexthop.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "fd06cb4a5fc7bda3dea31712618a62af72a1c6cb",
              "status": "affected",
              "version": "430a049190de3c9e219f43084de9f1122da04570",
              "versionType": "git"
            },
            {
              "lessThan": "5cc4d71dda2dd4f1520f40e634a527022e48ccd8",
              "status": "affected",
              "version": "430a049190de3c9e219f43084de9f1122da04570",
              "versionType": "git"
            },
            {
              "lessThan": "9e8f558a3afe99ce51a642ce0d3637ddc2b5d5d0",
              "status": "affected",
              "version": "430a049190de3c9e219f43084de9f1122da04570",
              "versionType": "git"
            },
            {
              "lessThan": "1377de719652d868f5317ba8398b7e74c5f0430b",
              "status": "affected",
              "version": "430a049190de3c9e219f43084de9f1122da04570",
              "versionType": "git"
            },
            {
              "lessThan": "7704460acd7f5d35eb07c52500987dc9b95313fb",
              "status": "affected",
              "version": "430a049190de3c9e219f43084de9f1122da04570",
              "versionType": "git"
            },
            {
              "lessThan": "a13d3864b76ac87085ec530b2ff8e37482a63a96",
              "status": "affected",
              "version": "430a049190de3c9e219f43084de9f1122da04570",
              "versionType": "git"
            },
            {
              "lessThan": "6d745cd0e9720282cd291d36b9db528aea18add2",
              "status": "affected",
              "version": "430a049190de3c9e219f43084de9f1122da04570",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ipv4/nexthop.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.3"
            },
            {
              "lessThan": "5.3",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.282",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.224",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.165",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.103",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.44",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.282",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.224",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.165",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.103",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.44",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.3",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11",
                  "versionStartIncluding": "5.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: nexthop: Initialize all fields in dumped nexthops\n\nstruct nexthop_grp contains two reserved fields that are not initialized by\nnla_put_nh_group(), and carry garbage. This can be observed e.g. with\nstrace (edited for clarity):\n\n    # ip nexthop add id 1 dev lo\n    # ip nexthop add id 101 group 1\n    # strace -e recvmsg ip nexthop get id 101\n    ...\n    recvmsg(... [{nla_len=12, nla_type=NHA_GROUP},\n                 [{id=1, weight=0, resvd1=0x69, resvd2=0x67}]] ...) = 52\n\nThe fields are reserved and therefore not currently used. But as they are, they\nleak kernel memory, and the fact they are not just zero complicates repurposing\nof the fields for new ends. Initialize the full structure."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T20:29:21.856Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/fd06cb4a5fc7bda3dea31712618a62af72a1c6cb"
        },
        {
          "url": "https://git.kernel.org/stable/c/5cc4d71dda2dd4f1520f40e634a527022e48ccd8"
        },
        {
          "url": "https://git.kernel.org/stable/c/9e8f558a3afe99ce51a642ce0d3637ddc2b5d5d0"
        },
        {
          "url": "https://git.kernel.org/stable/c/1377de719652d868f5317ba8398b7e74c5f0430b"
        },
        {
          "url": "https://git.kernel.org/stable/c/7704460acd7f5d35eb07c52500987dc9b95313fb"
        },
        {
          "url": "https://git.kernel.org/stable/c/a13d3864b76ac87085ec530b2ff8e37482a63a96"
        },
        {
          "url": "https://git.kernel.org/stable/c/6d745cd0e9720282cd291d36b9db528aea18add2"
        }
      ],
      "title": "net: nexthop: Initialize all fields in dumped nexthops",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-42283",
    "datePublished": "2024-08-17T09:08:49.866Z",
    "dateReserved": "2024-07-30T07:40:12.262Z",
    "dateUpdated": "2026-05-12T11:56:46.841Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-42284 (GCVE-0-2024-42284)

Vulnerability from cvelistv5 – Published: 2024-08-17 09:08 – Updated: 2026-08-05 11:36

Title

tipc: Return non-zero value from tipc_udp_addr2str() on error

Summary

In the Linux kernel, the following vulnerability has been resolved: tipc: Return non-zero value from tipc_udp_addr2str() on error tipc_udp_addr2str() should return non-zero value if the UDP media address is invalid. Otherwise, a buffer overflow access can occur in tipc_media_addr_printf(). Fix this by returning 1 on an invalid UDP media address.

Severity

9.1 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-10 16:11 UTC

Assigner

Linux mitre root

References

10 references

URL	Tags
https://git.kernel.org/stable/c/7ec3335dd89c8d169…
https://git.kernel.org/stable/c/253405541be2f15ff…
https://git.kernel.org/stable/c/aa38bf74899de07cf…
https://git.kernel.org/stable/c/5eea1276754505836…
https://git.kernel.org/stable/c/728734352743a78b4…
https://git.kernel.org/stable/c/76ddf84a52f0d8ec3…
https://git.kernel.org/stable/c/2abe350db1aa599ee…
https://git.kernel.org/stable/c/fa96c6baef1b5385e…
https://lists.debian.org/debian-lts-announce/2025…
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: d0f91938bede204a343473792529e0db7d599836 , < 7ec3335dd89c8d169e9650e4bac64fde71fdf15b (git) Affected: d0f91938bede204a343473792529e0db7d599836 , < 253405541be2f15ffebdeac2f4cf4b7e9144d12f (git) Affected: d0f91938bede204a343473792529e0db7d599836 , < aa38bf74899de07cf70b50cd17f8ad45fb6654c8 (git) Affected: d0f91938bede204a343473792529e0db7d599836 , < 5eea127675450583680c8170358bcba43227bd69 (git) Affected: d0f91938bede204a343473792529e0db7d599836 , < 728734352743a78b4c5a7285b282127696a4a813 (git) Affected: d0f91938bede204a343473792529e0db7d599836 , < 76ddf84a52f0d8ec3f5db6ccce08faf202a17d28 (git) Affected: d0f91938bede204a343473792529e0db7d599836 , < 2abe350db1aa599eeebc6892237d0bce0f1de62a (git) Affected: d0f91938bede204a343473792529e0db7d599836 , < fa96c6baef1b5385e2f0c0677b32b3839e716076 (git)
Linux	Linux	Affected: 4.1 Unaffected: 0 , < 4.1 (semver) Unaffected: 4.19.320 , ≤ 4.19.* (semver) Unaffected: 5.4.282 , ≤ 5.4.* (semver) Unaffected: 5.10.224 , ≤ 5.10.* (semver) Unaffected: 5.15.165 , ≤ 5.15.* (semver) Unaffected: 6.1.103 , ≤ 6.1.* (semver) Unaffected: 6.6.44 , ≤ 6.6.* (semver) Unaffected: 6.10.3 , ≤ 6.10.* (semver) Unaffected: 6.11 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-42284",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:11:26.639456Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-12T17:33:30.616Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:03:29.114Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/tipc/udp_media.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "7ec3335dd89c8d169e9650e4bac64fde71fdf15b",
              "status": "affected",
              "version": "d0f91938bede204a343473792529e0db7d599836",
              "versionType": "git"
            },
            {
              "lessThan": "253405541be2f15ffebdeac2f4cf4b7e9144d12f",
              "status": "affected",
              "version": "d0f91938bede204a343473792529e0db7d599836",
              "versionType": "git"
            },
            {
              "lessThan": "aa38bf74899de07cf70b50cd17f8ad45fb6654c8",
              "status": "affected",
              "version": "d0f91938bede204a343473792529e0db7d599836",
              "versionType": "git"
            },
            {
              "lessThan": "5eea127675450583680c8170358bcba43227bd69",
              "status": "affected",
              "version": "d0f91938bede204a343473792529e0db7d599836",
              "versionType": "git"
            },
            {
              "lessThan": "728734352743a78b4c5a7285b282127696a4a813",
              "status": "affected",
              "version": "d0f91938bede204a343473792529e0db7d599836",
              "versionType": "git"
            },
            {
              "lessThan": "76ddf84a52f0d8ec3f5db6ccce08faf202a17d28",
              "status": "affected",
              "version": "d0f91938bede204a343473792529e0db7d599836",
              "versionType": "git"
            },
            {
              "lessThan": "2abe350db1aa599eeebc6892237d0bce0f1de62a",
              "status": "affected",
              "version": "d0f91938bede204a343473792529e0db7d599836",
              "versionType": "git"
            },
            {
              "lessThan": "fa96c6baef1b5385e2f0c0677b32b3839e716076",
              "status": "affected",
              "version": "d0f91938bede204a343473792529e0db7d599836",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/tipc/udp_media.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.1"
            },
            {
              "lessThan": "4.1",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.320",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.282",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.224",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.165",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.103",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.44",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.320",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.282",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.224",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.165",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.103",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.44",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.3",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11",
                  "versionStartIncluding": "4.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: Return non-zero value from tipc_udp_addr2str() on error\n\ntipc_udp_addr2str() should return non-zero value if the UDP media\naddress is invalid. Otherwise, a buffer overflow access can occur in\ntipc_media_addr_printf(). Fix this by returning 1 on an invalid UDP\nmedia address."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The malformed media address is parsed straight out of a TIPC LINK_CONFIG discovery packet received on the UDP bearer socket (port 6118), which accepts routable unicast/replicast traffic from arbitrary sources with no peer-address check in tipc_udp_recv(). A remote host can therefore reach the vulnerable code with a single crafted UDP datagram.\nAC:L - One crafted packet with proto set to any value other than ETH_P_IP/ETH_P_IPV6 and msg_prevnode=0 deterministically reaches disc_dupl_alert() and the uninitialized-buffer read; there is no race, no memory-layout dependency, and no condition outside the attacker\u0027s control.\nPR:N - TIPC neighbor discovery is processed before any link is established and, with the default configuration (no CONFIG_TIPC_CRYPTO keys), involves no authentication whatsoever. The attacker needs no account or credentials on the target.\nUI:N - The victim node processes incoming discovery messages automatically in softirq context; no administrator or user action is required beyond having the UDP bearer already enabled.\nS:U - The out-of-bounds read and the leaked data both stay within the kernel\u0027s own security authority; no VM, IOMMU, or sandbox boundary is crossed.\nC:H - The %s conversion reads an uninitialized 60-byte stack buffer past its end until a NUL byte, and the harvested kernel stack contents are printed into the kernel log via pr_warn \u2014 an unbounded stack out-of-bounds read that can disclose kernel pointers and defeat KASLR.\nI:N - No out-of-bounds or attacker-controlled write occurs; every scnprintf() destination remains correctly length-bounded, so no kernel data is modified.\nA:H - The unbounded stack read can fault into the VMAP_STACK guard page and immediately panics KASAN/panic_on_warn kernels as a stack-out-of-bounds report, and the trigger is a non-ratelimited pr_warn that a remote attacker can drive repeatedly."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:36:20.207Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/7ec3335dd89c8d169e9650e4bac64fde71fdf15b"
        },
        {
          "url": "https://git.kernel.org/stable/c/253405541be2f15ffebdeac2f4cf4b7e9144d12f"
        },
        {
          "url": "https://git.kernel.org/stable/c/aa38bf74899de07cf70b50cd17f8ad45fb6654c8"
        },
        {
          "url": "https://git.kernel.org/stable/c/5eea127675450583680c8170358bcba43227bd69"
        },
        {
          "url": "https://git.kernel.org/stable/c/728734352743a78b4c5a7285b282127696a4a813"
        },
        {
          "url": "https://git.kernel.org/stable/c/76ddf84a52f0d8ec3f5db6ccce08faf202a17d28"
        },
        {
          "url": "https://git.kernel.org/stable/c/2abe350db1aa599eeebc6892237d0bce0f1de62a"
        },
        {
          "url": "https://git.kernel.org/stable/c/fa96c6baef1b5385e2f0c0677b32b3839e716076"
        }
      ],
      "title": "tipc: Return non-zero value from tipc_udp_addr2str() on error",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-42284",
    "datePublished": "2024-08-17T09:08:50.576Z",
    "dateReserved": "2024-07-30T07:40:12.262Z",
    "dateUpdated": "2026-08-05T11:36:20.207Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-42285 (GCVE-0-2024-42285)

Vulnerability from cvelistv5 – Published: 2024-08-17 09:08 – Updated: 2026-08-05 11:36

Title

RDMA/iwcm: Fix a use-after-free related to destroying CM IDs

Summary

In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix a use-after-free related to destroying CM IDs iw_conn_req_handler() associates a new struct rdma_id_private (conn_id) with an existing struct iw_cm_id (cm_id) as follows: conn_id->cm_id.iw = cm_id; cm_id->context = conn_id; cm_id->cm_handler = cma_iw_handler; rdma_destroy_id() frees both the cm_id and the struct rdma_id_private. Make sure that cm_work_handler() does not trigger a use-after-free by only freeing of the struct rdma_id_private after all pending work has finished.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-10 16:11 UTC

Assigner

Linux mitre root

References

10 references

URL	Tags
https://git.kernel.org/stable/c/d91d253c87fd1efec…
https://git.kernel.org/stable/c/7f25f296fc9bd0435…
https://git.kernel.org/stable/c/94ee7ff99b87435ec…
https://git.kernel.org/stable/c/557d035fe88d78dd5…
https://git.kernel.org/stable/c/dc8074b8901caabb9…
https://git.kernel.org/stable/c/ff5bbbdee08287d75…
https://git.kernel.org/stable/c/ee39384ee787e86e9…
https://git.kernel.org/stable/c/aee2424246f9f1dad…
https://lists.debian.org/debian-lts-announce/2025…
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 , < d91d253c87fd1efece521ff2612078a35af673c6 (git) Affected: 59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 , < 7f25f296fc9bd0435be14e89bf657cd615a23574 (git) Affected: 59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 , < 94ee7ff99b87435ec63211f632918dc7f44dac79 (git) Affected: 59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 , < 557d035fe88d78dd51664f4dc0e1896c04c97cf6 (git) Affected: 59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 , < dc8074b8901caabb97c2d353abd6b4e7fa5a59a5 (git) Affected: 59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 , < ff5bbbdee08287d75d72e65b72a2b76d9637892a (git) Affected: 59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 , < ee39384ee787e86e9db4efb843818ef0ea9cb8ae (git) Affected: 59c68ac31e15ad09d2cb04734e3c8c544a95f8d4 , < aee2424246f9f1dadc33faa78990c1e2eb7826e4 (git)
Linux	Linux	Affected: 4.8 Unaffected: 0 , < 4.8 (semver) Unaffected: 4.19.320 , ≤ 4.19.* (semver) Unaffected: 5.4.282 , ≤ 5.4.* (semver) Unaffected: 5.10.224 , ≤ 5.10.* (semver) Unaffected: 5.15.165 , ≤ 5.15.* (semver) Unaffected: 6.1.103 , ≤ 6.1.* (semver) Unaffected: 6.6.44 , ≤ 6.6.* (semver) Unaffected: 6.10.3 , ≤ 6.10.* (semver) Unaffected: 6.11 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-42285",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:11:23.465400Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-12T17:33:30.490Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:03:32.078Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/infiniband/core/iwcm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "d91d253c87fd1efece521ff2612078a35af673c6",
              "status": "affected",
              "version": "59c68ac31e15ad09d2cb04734e3c8c544a95f8d4",
              "versionType": "git"
            },
            {
              "lessThan": "7f25f296fc9bd0435be14e89bf657cd615a23574",
              "status": "affected",
              "version": "59c68ac31e15ad09d2cb04734e3c8c544a95f8d4",
              "versionType": "git"
            },
            {
              "lessThan": "94ee7ff99b87435ec63211f632918dc7f44dac79",
              "status": "affected",
              "version": "59c68ac31e15ad09d2cb04734e3c8c544a95f8d4",
              "versionType": "git"
            },
            {
              "lessThan": "557d035fe88d78dd51664f4dc0e1896c04c97cf6",
              "status": "affected",
              "version": "59c68ac31e15ad09d2cb04734e3c8c544a95f8d4",
              "versionType": "git"
            },
            {
              "lessThan": "dc8074b8901caabb97c2d353abd6b4e7fa5a59a5",
              "status": "affected",
              "version": "59c68ac31e15ad09d2cb04734e3c8c544a95f8d4",
              "versionType": "git"
            },
            {
              "lessThan": "ff5bbbdee08287d75d72e65b72a2b76d9637892a",
              "status": "affected",
              "version": "59c68ac31e15ad09d2cb04734e3c8c544a95f8d4",
              "versionType": "git"
            },
            {
              "lessThan": "ee39384ee787e86e9db4efb843818ef0ea9cb8ae",
              "status": "affected",
              "version": "59c68ac31e15ad09d2cb04734e3c8c544a95f8d4",
              "versionType": "git"
            },
            {
              "lessThan": "aee2424246f9f1dadc33faa78990c1e2eb7826e4",
              "status": "affected",
              "version": "59c68ac31e15ad09d2cb04734e3c8c544a95f8d4",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/infiniband/core/iwcm.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.8"
            },
            {
              "lessThan": "4.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.320",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.282",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.224",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.165",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.103",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.44",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.320",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.282",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.224",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.165",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.103",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.44",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.3",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/iwcm: Fix a use-after-free related to destroying CM IDs\n\niw_conn_req_handler() associates a new struct rdma_id_private (conn_id) with\nan existing struct iw_cm_id (cm_id) as follows:\n\n        conn_id-\u003ecm_id.iw = cm_id;\n        cm_id-\u003econtext = conn_id;\n        cm_id-\u003ecm_handler = cma_iw_handler;\n\nrdma_destroy_id() frees both the cm_id and the struct rdma_id_private. Make\nsure that cm_work_handler() does not trigger a use-after-free by only\nfreeing of the struct rdma_id_private after all pending work has finished."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The iWARP CM state machine exists exclusively to process connection-management events (CONNECT_REQUEST/REPLY, ESTABLISHED, DISCONNECT, CLOSE) originated by remote peers over MPA/TCP, and the freed-object dereference occurs inside `cm_work_handler()`/`cma_iw_handler()` while handling such a remote event. Network-facing RDMA targets over iWARP (nvmet-rdma, NFS/RDMA svcrdma, iSER, SMB Direct, on cxgb4/irdma/qedr or software siw) drive both the event delivery and the `rdma_destroy_id()` teardown from remote peer actions.\nAC:L - The attacker controls both sides of the race: the connect/abort lifecycle of their own connection generates the queued CM events, and forcing a connection rejection or resetting the TCP connection drives the concurrent `rdma_destroy_id()`. The sequence can be repeated in a tight loop across many concurrent connections until the window is hit, with no condition outside attacker influence.\nPR:N - The RDMA-CM/iWARP handshake and the entire connect-reject-disconnect cycle complete before any upper-layer authentication (NVMe-oF Connect/in-band auth, RPCSEC, SMB session setup), so an unauthenticated peer that can reach the target port suffices. The local variant is even weaker-gated: rdma_ucm\u0027s `/dev/infiniband/rdma_cm` handlers contain no capability checks at all.\nUI:N - Exploitation is entirely driven by the attacker\u0027s own connection attempts and teardowns against an already-listening RDMA service. No action by any local user or administrator is required.\nS:U - The use-after-free corrupts kernel heap memory and hijacks kernel control flow within the same security authority as the vulnerable component. No VM, IOMMU, or sandbox boundary is crossed.\nC:H - After the free, `cma_iw_handler()` reads `id_priv-\u003estate`, `id_priv-\u003ecm_id`, and other fields from the reallocated slab object, and the resulting control-flow hijack via the stale `event_handler` pointer can be leveraged for arbitrary kernel memory disclosure. Per kernel guidance a use-after-free is scored High for confidentiality.\nI:H - `cma_cm_event_handler()` performs an indirect call through `id_priv-\u003eid.event_handler` read from the freed object, and `mutex_lock(\u0026id_priv-\u003ehandler_mutex)` writes into it \u2014 together giving heap-spray-based arbitrary write and code-execution potential. This is a full control-flow hijack primitive, not a bounded corruption.\nA:H - Even without successful grooming, dereferencing the freed `rdma_id_private` (mutex operations and an indirect call on garbage) reliably oopses or panics the kernel, as observed by KASAN slab-use-after-free reports during blktests. The trigger is repeatable, so a remote attacker can crash the target at will."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:36:21.283Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/d91d253c87fd1efece521ff2612078a35af673c6"
        },
        {
          "url": "https://git.kernel.org/stable/c/7f25f296fc9bd0435be14e89bf657cd615a23574"
        },
        {
          "url": "https://git.kernel.org/stable/c/94ee7ff99b87435ec63211f632918dc7f44dac79"
        },
        {
          "url": "https://git.kernel.org/stable/c/557d035fe88d78dd51664f4dc0e1896c04c97cf6"
        },
        {
          "url": "https://git.kernel.org/stable/c/dc8074b8901caabb97c2d353abd6b4e7fa5a59a5"
        },
        {
          "url": "https://git.kernel.org/stable/c/ff5bbbdee08287d75d72e65b72a2b76d9637892a"
        },
        {
          "url": "https://git.kernel.org/stable/c/ee39384ee787e86e9db4efb843818ef0ea9cb8ae"
        },
        {
          "url": "https://git.kernel.org/stable/c/aee2424246f9f1dadc33faa78990c1e2eb7826e4"
        }
      ],
      "title": "RDMA/iwcm: Fix a use-after-free related to destroying CM IDs",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-42285",
    "datePublished": "2024-08-17T09:08:51.302Z",
    "dateReserved": "2024-07-30T07:40:12.262Z",
    "dateUpdated": "2026-08-05T11:36:21.283Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-42286 (GCVE-0-2024-42286)

Vulnerability from cvelistv5 – Published: 2024-08-17 09:08 – Updated: 2026-08-05 11:36

Title

scsi: qla2xxx: validate nvme_local_port correctly

Summary

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: validate nvme_local_port correctly The driver load failed with error message, qla2xxx [0000:04:00.0]-ffff:0: register_localport failed: ret=ffffffef and with a kernel crash, BUG: unable to handle kernel NULL pointer dereference at 0000000000000070 Workqueue: events_unbound qla_register_fcport_fn [qla2xxx] RIP: 0010:nvme_fc_register_remoteport+0x16/0x430 [nvme_fc] RSP: 0018:ffffaaa040eb3d98 EFLAGS: 00010282 RAX: 0000000000000000 RBX: ffff9dfb46b78c00 RCX: 0000000000000000 RDX: ffff9dfb46b78da8 RSI: ffffaaa040eb3e08 RDI: 0000000000000000 RBP: ffff9dfb612a0a58 R08: ffffffffaf1d6270 R09: 3a34303a30303030 R10: 34303a303030305b R11: 2078787832616c71 R12: ffff9dfb46b78dd4 R13: ffff9dfb46b78c24 R14: ffff9dfb41525300 R15: ffff9dfb46b78da8 FS: 0000000000000000(0000) GS:ffff9dfc67c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000070 CR3: 000000018da10004 CR4: 00000000000206f0 Call Trace: qla_nvme_register_remote+0xeb/0x1f0 [qla2xxx] ? qla2x00_dfs_create_rport+0x231/0x270 [qla2xxx] qla2x00_update_fcport+0x2a1/0x3c0 [qla2xxx] qla_register_fcport_fn+0x54/0xc0 [qla2xxx] Exit the qla_nvme_register_remote() function when qla_nvme_register_hba() fails and correctly validate nvme_local_port.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-10 16:11 UTC

Assigner

Linux mitre root

References

10 references

URL	Tags
https://git.kernel.org/stable/c/549aac9655320c9b2…
https://git.kernel.org/stable/c/e1f010844443c389b…
https://git.kernel.org/stable/c/a3ab508a4853a9f5a…
https://git.kernel.org/stable/c/cde43031df533751b…
https://git.kernel.org/stable/c/7cec2c3bfe84539c4…
https://git.kernel.org/stable/c/f6be298cc1042f24d…
https://git.kernel.org/stable/c/3eac973eb5cb2b874…
https://git.kernel.org/stable/c/eb1d4ce2609584eeb…
https://lists.debian.org/debian-lts-announce/2025…
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 8777e4314d397c4e3615dc02fe8537e571e3922f , < 549aac9655320c9b245a24271b204668c5d40430 (git) Affected: 8777e4314d397c4e3615dc02fe8537e571e3922f , < e1f010844443c389bc552884ac5cfa47de34d54c (git) Affected: 8777e4314d397c4e3615dc02fe8537e571e3922f , < a3ab508a4853a9f5ae25a7816a4889f09938f63c (git) Affected: 8777e4314d397c4e3615dc02fe8537e571e3922f , < cde43031df533751b4ead37d173922feee2f550f (git) Affected: 8777e4314d397c4e3615dc02fe8537e571e3922f , < 7cec2c3bfe84539c415f5e16f989228eba1d2f1e (git) Affected: 8777e4314d397c4e3615dc02fe8537e571e3922f , < f6be298cc1042f24d521197af29c7c4eb95af4d5 (git) Affected: 8777e4314d397c4e3615dc02fe8537e571e3922f , < 3eac973eb5cb2b874b3918f924798afc5affd46b (git) Affected: 8777e4314d397c4e3615dc02fe8537e571e3922f , < eb1d4ce2609584eeb7694866f34d4b213caa3af9 (git)
Linux	Linux	Affected: 4.19 Unaffected: 0 , < 4.19 (semver) Unaffected: 4.19.320 , ≤ 4.19.* (semver) Unaffected: 5.4.282 , ≤ 5.4.* (semver) Unaffected: 5.10.224 , ≤ 5.10.* (semver) Unaffected: 5.15.165 , ≤ 5.15.* (semver) Unaffected: 6.1.103 , ≤ 6.1.* (semver) Unaffected: 6.6.44 , ≤ 6.6.* (semver) Unaffected: 6.10.3 , ≤ 6.10.* (semver) Unaffected: 6.11 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-42286",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:11:20.265559Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-12T17:33:30.367Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:03:35.011Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/scsi/qla2xxx/qla_nvme.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "549aac9655320c9b245a24271b204668c5d40430",
              "status": "affected",
              "version": "8777e4314d397c4e3615dc02fe8537e571e3922f",
              "versionType": "git"
            },
            {
              "lessThan": "e1f010844443c389bc552884ac5cfa47de34d54c",
              "status": "affected",
              "version": "8777e4314d397c4e3615dc02fe8537e571e3922f",
              "versionType": "git"
            },
            {
              "lessThan": "a3ab508a4853a9f5ae25a7816a4889f09938f63c",
              "status": "affected",
              "version": "8777e4314d397c4e3615dc02fe8537e571e3922f",
              "versionType": "git"
            },
            {
              "lessThan": "cde43031df533751b4ead37d173922feee2f550f",
              "status": "affected",
              "version": "8777e4314d397c4e3615dc02fe8537e571e3922f",
              "versionType": "git"
            },
            {
              "lessThan": "7cec2c3bfe84539c415f5e16f989228eba1d2f1e",
              "status": "affected",
              "version": "8777e4314d397c4e3615dc02fe8537e571e3922f",
              "versionType": "git"
            },
            {
              "lessThan": "f6be298cc1042f24d521197af29c7c4eb95af4d5",
              "status": "affected",
              "version": "8777e4314d397c4e3615dc02fe8537e571e3922f",
              "versionType": "git"
            },
            {
              "lessThan": "3eac973eb5cb2b874b3918f924798afc5affd46b",
              "status": "affected",
              "version": "8777e4314d397c4e3615dc02fe8537e571e3922f",
              "versionType": "git"
            },
            {
              "lessThan": "eb1d4ce2609584eeb7694866f34d4b213caa3af9",
              "status": "affected",
              "version": "8777e4314d397c4e3615dc02fe8537e571e3922f",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/scsi/qla2xxx/qla_nvme.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.19"
            },
            {
              "lessThan": "4.19",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.320",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.282",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.224",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.165",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.103",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.44",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.320",
                  "versionStartIncluding": "4.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.282",
                  "versionStartIncluding": "4.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.224",
                  "versionStartIncluding": "4.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.165",
                  "versionStartIncluding": "4.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.103",
                  "versionStartIncluding": "4.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.44",
                  "versionStartIncluding": "4.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.3",
                  "versionStartIncluding": "4.19",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11",
                  "versionStartIncluding": "4.19",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: validate nvme_local_port correctly\n\nThe driver load failed with error message,\n\nqla2xxx [0000:04:00.0]-ffff:0: register_localport failed: ret=ffffffef\n\nand with a kernel crash,\n\n\tBUG: unable to handle kernel NULL pointer dereference at 0000000000000070\n\tWorkqueue: events_unbound qla_register_fcport_fn [qla2xxx]\n\tRIP: 0010:nvme_fc_register_remoteport+0x16/0x430 [nvme_fc]\n\tRSP: 0018:ffffaaa040eb3d98 EFLAGS: 00010282\n\tRAX: 0000000000000000 RBX: ffff9dfb46b78c00 RCX: 0000000000000000\n\tRDX: ffff9dfb46b78da8 RSI: ffffaaa040eb3e08 RDI: 0000000000000000\n\tRBP: ffff9dfb612a0a58 R08: ffffffffaf1d6270 R09: 3a34303a30303030\n\tR10: 34303a303030305b R11: 2078787832616c71 R12: ffff9dfb46b78dd4\n\tR13: ffff9dfb46b78c24 R14: ffff9dfb41525300 R15: ffff9dfb46b78da8\n\tFS:  0000000000000000(0000) GS:ffff9dfc67c00000(0000) knlGS:0000000000000000\n\tCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n\tCR2: 0000000000000070 CR3: 000000018da10004 CR4: 00000000000206f0\n\tCall Trace:\n\tqla_nvme_register_remote+0xeb/0x1f0 [qla2xxx]\n\t? qla2x00_dfs_create_rport+0x231/0x270 [qla2xxx]\n\tqla2x00_update_fcport+0x2a1/0x3c0 [qla2xxx]\n\tqla_register_fcport_fn+0x54/0xc0 [qla2xxx]\n\nExit the qla_nvme_register_remote() function when qla_nvme_register_hba()\nfails and correctly validate nvme_local_port."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The vulnerable code runs entirely in kernel DPC/workqueue context in response to Fibre Channel fabric events (link up, RSCN, remote port login) delivered by peers on the SAN, with no local syscall or ioctl involvement. Consistent with other qla2xxx fabric-driven NULL-deref CVEs in this driver (e.g. CVE-2025-71236), the remote FC peer that drives discovery makes this network-reachable.\nAC:L - Both sides of the race are discovery paths an attacker can drive repeatedly by generating link bounces/RSCNs and port logins, forcing concurrent `qla_nvme_register_hba()` entry from the DPC thread and the fcport workqueue. The race was hit spontaneously on ordinary driver load in the field, showing the window is wide and requires no special conditions.\nPR:N - No credentials are checked anywhere on the path \u2014 standard Fibre Channel fabric login and RSCN processing is unauthenticated by default (FC-SP/EDIF is opt-in and rarely deployed), and the crashing code runs in kernel worker context with no privilege gate.\nUI:N - The registration path is triggered automatically by fabric discovery and driver initialization; no administrator or user action is needed beyond the system having an NVMe-FC-capable qla2xxx HBA attached to the fabric.\nS:U - The NULL dereference oopses inside the kernel that owns the driver; no VM, IOMMU, or sandbox boundary is crossed and the impact stays within the same security authority.\nC:N - The fault is a dereference of a NULL `nvme_fc_local_port` at fixed offset 0x70, an address below `mmap_min_addr` that cannot be mapped or populated by an attacker, so no kernel memory contents are disclosed.\nI:N - The access is `kref_get_unless_zero()` on an unmappable NULL-page address, which faults before any state is modified; there is no out-of-bounds write, freed-object reuse, or type confusion to leverage for corruption.\nA:H - The dereference produces a kernel oops in `events_unbound`/`qla_register_fcport_fn`, killing the worker, aborting driver load, and leaving the NVMe-FC storage path unusable \u2014 a full panic on `panic_on_oops` systems."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:36:22.360Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/549aac9655320c9b245a24271b204668c5d40430"
        },
        {
          "url": "https://git.kernel.org/stable/c/e1f010844443c389bc552884ac5cfa47de34d54c"
        },
        {
          "url": "https://git.kernel.org/stable/c/a3ab508a4853a9f5ae25a7816a4889f09938f63c"
        },
        {
          "url": "https://git.kernel.org/stable/c/cde43031df533751b4ead37d173922feee2f550f"
        },
        {
          "url": "https://git.kernel.org/stable/c/7cec2c3bfe84539c415f5e16f989228eba1d2f1e"
        },
        {
          "url": "https://git.kernel.org/stable/c/f6be298cc1042f24d521197af29c7c4eb95af4d5"
        },
        {
          "url": "https://git.kernel.org/stable/c/3eac973eb5cb2b874b3918f924798afc5affd46b"
        },
        {
          "url": "https://git.kernel.org/stable/c/eb1d4ce2609584eeb7694866f34d4b213caa3af9"
        }
      ],
      "title": "scsi: qla2xxx: validate nvme_local_port correctly",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-42286",
    "datePublished": "2024-08-17T09:08:52.036Z",
    "dateReserved": "2024-07-30T07:40:12.262Z",
    "dateUpdated": "2026-08-05T11:36:22.360Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-42287 (GCVE-0-2024-42287)

Vulnerability from cvelistv5 – Published: 2024-08-17 09:08 – Updated: 2026-08-05 11:36

Title

scsi: qla2xxx: Complete command early within lock

Summary

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Complete command early within lock A crash was observed while performing NPIV and FW reset, BUG: kernel NULL pointer dereference, address: 000000000000001c #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: 0000 1 PREEMPT_RT SMP NOPTI RIP: 0010:dma_direct_unmap_sg+0x51/0x1e0 RSP: 0018:ffffc90026f47b88 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000021 RCX: 0000000000000002 RDX: 0000000000000021 RSI: 0000000000000000 RDI: ffff8881041130d0 RBP: ffff8881041130d0 R08: 0000000000000000 R09: 0000000000000034 R10: ffffc90026f47c48 R11: 0000000000000031 R12: 0000000000000000 R13: 0000000000000000 R14: ffff8881565e4a20 R15: 0000000000000000 FS: 00007f4c69ed3d00(0000) GS:ffff889faac80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000000001c CR3: 0000000288a50002 CR4: 00000000007706e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> ? __die_body+0x1a/0x60 ? page_fault_oops+0x16f/0x4a0 ? do_user_addr_fault+0x174/0x7f0 ? exc_page_fault+0x69/0x1a0 ? asm_exc_page_fault+0x22/0x30 ? dma_direct_unmap_sg+0x51/0x1e0 ? preempt_count_sub+0x96/0xe0 qla2xxx_qpair_sp_free_dma+0x29f/0x3b0 [qla2xxx] qla2xxx_qpair_sp_compl+0x60/0x80 [qla2xxx] __qla2x00_abort_all_cmds+0xa2/0x450 [qla2xxx] The command completion was done early while aborting the commands in driver unload path but outside lock to avoid the WARN_ON condition of performing dma_free_attr within the lock. However this caused race condition while command completion via multiple paths causing system crash. Hence complete the command early in unload path but within the lock to avoid race condition.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-10 16:11 UTC

Assigner

Linux mitre root

References

9 references

URL	Tags
https://git.kernel.org/stable/c/af46649304b0c9ced…
https://git.kernel.org/stable/c/57ba7563712227647…
https://git.kernel.org/stable/c/9117337b04d789bd0…
https://git.kernel.org/stable/c/814f4a53cc86f7ea8…
https://git.kernel.org/stable/c/314efe3f87949a568…
https://git.kernel.org/stable/c/36fdc5319c4d0ec8b…
https://git.kernel.org/stable/c/4475afa2646d3fec1…
https://lists.debian.org/debian-lts-announce/2025…
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 9189f20b4c5307c0998682bb522e481b4567a8b8 , < af46649304b0c9cede4ccfc2be2561ce8ed6a2ea (git) Affected: 231cfa78ec5badd84a1a2b09465bfad1a926aba1 , < 57ba7563712227647f82a92547e82c96cd350553 (git) Affected: d6f7377528d2abf338e504126e44439541be8f7d , < 9117337b04d789bd08fdd9854a40bec2815cd3f6 (git) Affected: cd0a1804ac5bab2545ac700c8d0fe9ae9284c567 , < 814f4a53cc86f7ea8b501bfb1723f24fd29ef5ee (git) Affected: 0367076b0817d5c75dfb83001ce7ce5c64d803a9 , < 314efe3f87949a568f512f05df20bf47b81cf232 (git) Affected: 0367076b0817d5c75dfb83001ce7ce5c64d803a9 , < 36fdc5319c4d0ec8b8938ec4769764098a246bfb (git) Affected: 0367076b0817d5c75dfb83001ce7ce5c64d803a9 , < 4475afa2646d3fec176fc4d011d3879b26cb26e3 (git) Affected: 415d614344a4f1bbddf55d724fc7eb9ef4b39aad (git) Affected: 5.4.240 , < 5.4.282 (semver) Affected: 5.10.177 , < 5.10.224 (semver) Affected: 5.15.105 , < 5.15.165 (semver) Affected: 6.1.22 , < 6.1.103 (semver) Affected: 6.2.9 , < 6.3 (semver)
Linux	Linux	Affected: 6.3 Unaffected: 0 , < 6.3 (semver) Unaffected: 5.4.282 , ≤ 5.4.* (semver) Unaffected: 5.10.224 , ≤ 5.10.* (semver) Unaffected: 5.15.165 , ≤ 5.15.* (semver) Unaffected: 6.1.103 , ≤ 6.1.* (semver) Unaffected: 6.6.44 , ≤ 6.6.* (semver) Unaffected: 6.10.3 , ≤ 6.10.* (semver) Unaffected: 6.11 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-42287",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:11:16.790105Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-12T17:33:30.183Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:03:37.968Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/scsi/qla2xxx/qla_os.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "af46649304b0c9cede4ccfc2be2561ce8ed6a2ea",
              "status": "affected",
              "version": "9189f20b4c5307c0998682bb522e481b4567a8b8",
              "versionType": "git"
            },
            {
              "lessThan": "57ba7563712227647f82a92547e82c96cd350553",
              "status": "affected",
              "version": "231cfa78ec5badd84a1a2b09465bfad1a926aba1",
              "versionType": "git"
            },
            {
              "lessThan": "9117337b04d789bd08fdd9854a40bec2815cd3f6",
              "status": "affected",
              "version": "d6f7377528d2abf338e504126e44439541be8f7d",
              "versionType": "git"
            },
            {
              "lessThan": "814f4a53cc86f7ea8b501bfb1723f24fd29ef5ee",
              "status": "affected",
              "version": "cd0a1804ac5bab2545ac700c8d0fe9ae9284c567",
              "versionType": "git"
            },
            {
              "lessThan": "314efe3f87949a568f512f05df20bf47b81cf232",
              "status": "affected",
              "version": "0367076b0817d5c75dfb83001ce7ce5c64d803a9",
              "versionType": "git"
            },
            {
              "lessThan": "36fdc5319c4d0ec8b8938ec4769764098a246bfb",
              "status": "affected",
              "version": "0367076b0817d5c75dfb83001ce7ce5c64d803a9",
              "versionType": "git"
            },
            {
              "lessThan": "4475afa2646d3fec176fc4d011d3879b26cb26e3",
              "status": "affected",
              "version": "0367076b0817d5c75dfb83001ce7ce5c64d803a9",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "415d614344a4f1bbddf55d724fc7eb9ef4b39aad",
              "versionType": "git"
            },
            {
              "lessThan": "5.4.282",
              "status": "affected",
              "version": "5.4.240",
              "versionType": "semver"
            },
            {
              "lessThan": "5.10.224",
              "status": "affected",
              "version": "5.10.177",
              "versionType": "semver"
            },
            {
              "lessThan": "5.15.165",
              "status": "affected",
              "version": "5.15.105",
              "versionType": "semver"
            },
            {
              "lessThan": "6.1.103",
              "status": "affected",
              "version": "6.1.22",
              "versionType": "semver"
            },
            {
              "lessThan": "6.3",
              "status": "affected",
              "version": "6.2.9",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/scsi/qla2xxx/qla_os.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.3"
            },
            {
              "lessThan": "6.3",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.282",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.224",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.165",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.103",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.44",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.282",
                  "versionStartIncluding": "5.4.240",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.224",
                  "versionStartIncluding": "5.10.177",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.165",
                  "versionStartIncluding": "5.15.105",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.103",
                  "versionStartIncluding": "6.1.22",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.44",
                  "versionStartIncluding": "6.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.3",
                  "versionStartIncluding": "6.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11",
                  "versionStartIncluding": "6.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.2.9",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Complete command early within lock\n\nA crash was observed while performing NPIV and FW reset,\n\n BUG: kernel NULL pointer dereference, address: 000000000000001c\n #PF: supervisor read access in kernel mode\n #PF: error_code(0x0000) - not-present page\n PGD 0 P4D 0\n Oops: 0000 1 PREEMPT_RT SMP NOPTI\n RIP: 0010:dma_direct_unmap_sg+0x51/0x1e0\n RSP: 0018:ffffc90026f47b88 EFLAGS: 00010246\n RAX: 0000000000000000 RBX: 0000000000000021 RCX: 0000000000000002\n RDX: 0000000000000021 RSI: 0000000000000000 RDI: ffff8881041130d0\n RBP: ffff8881041130d0 R08: 0000000000000000 R09: 0000000000000034\n R10: ffffc90026f47c48 R11: 0000000000000031 R12: 0000000000000000\n R13: 0000000000000000 R14: ffff8881565e4a20 R15: 0000000000000000\n FS: 00007f4c69ed3d00(0000) GS:ffff889faac80000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 000000000000001c CR3: 0000000288a50002 CR4: 00000000007706e0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n PKRU: 55555554\n Call Trace:\n \u003cTASK\u003e\n ? __die_body+0x1a/0x60\n ? page_fault_oops+0x16f/0x4a0\n ? do_user_addr_fault+0x174/0x7f0\n ? exc_page_fault+0x69/0x1a0\n ? asm_exc_page_fault+0x22/0x30\n ? dma_direct_unmap_sg+0x51/0x1e0\n ? preempt_count_sub+0x96/0xe0\n qla2xxx_qpair_sp_free_dma+0x29f/0x3b0 [qla2xxx]\n qla2xxx_qpair_sp_compl+0x60/0x80 [qla2xxx]\n __qla2x00_abort_all_cmds+0xa2/0x450 [qla2xxx]\n\nThe command completion was done early while aborting the commands in driver\nunload path but outside lock to avoid the WARN_ON condition of performing\ndma_free_attr within the lock. However this caused race condition while\ncommand completion via multiple paths causing system crash.\n\nHence complete the command early in unload path but within the lock to\navoid race condition."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:A - The abort-all-commands path is driven by Fibre Channel fabric/firmware async events (MBA_SYSTEM_ERR, MBA_LIP_OCCURRED, MBA_LOOP_INIT_ERR, transfer errors) that set ISP_ABORT_NEEDED, and in target mode the racing outstanding commands come from remote FC initiators. An attacker attached to the same SAN fabric can reach it without local access, but not from an arbitrary routed network.\nAC:L - The attacker controls both sides of the race: keep I/O in flight on the qpair while inducing the link/firmware error that makes qla2x00_chip_is_down() true, and the unlocked window spans a full DMA unmap plus scsi_done(), making it wide and repeatable. No memory layout or victim state outside the attacker\u0027s influence is required.\nPR:N - Fibre Channel has no authentication in practice (zoning only, FC-SP rarely deployed), so a peer on the fabric needs no credentials on the target host; in target mode the initiator drives the outstanding commands pre-authentication. This matches the scoring of CVE-2025-68818, the revert of the same 0367076b0817 commit.\nUI:N - No action by a local user or administrator is needed \u2014 the chip-down condition and the concurrent completions are both produced by the attacker\u0027s fabric traffic and error injection.\nS:U - The corruption is confined to kernel memory managed by the same security authority; there is no VM, IOMMU, or sandbox boundary crossed.\nC:H - Double completion drops two references on sp-\u003ecmd_kref and lets qla2xxx_eh_abort()/__qla2x00_eh_wait_for_pending_commands() dereference an srb_t whose backing scsi_cmnd has been freed and recycled, giving a use-after-free read of attacker-groomable heap contents that can be leveraged to disclose kernel memory.\nI:H - The same UAF yields writes through stale pointers \u2014 a second scsi_dma_unmap()/dma_unmap_sg() on a reused scatterlist, sp-\u003ecomp writes into a recycled scsi_cmnd, and a duplicate scsi_done() completing a block-layer request that now belongs to another I/O \u2014 which is exploitable for heap corruption and control-flow hijack.\nA:H - The reported failure is an immediate kernel NULL pointer dereference oops in dma_direct_unmap_sg() from qla2xxx_qpair_sp_free_dma(), and the double kref_put/double free reliably panics the storage host."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:36:23.425Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/af46649304b0c9cede4ccfc2be2561ce8ed6a2ea"
        },
        {
          "url": "https://git.kernel.org/stable/c/57ba7563712227647f82a92547e82c96cd350553"
        },
        {
          "url": "https://git.kernel.org/stable/c/9117337b04d789bd08fdd9854a40bec2815cd3f6"
        },
        {
          "url": "https://git.kernel.org/stable/c/814f4a53cc86f7ea8b501bfb1723f24fd29ef5ee"
        },
        {
          "url": "https://git.kernel.org/stable/c/314efe3f87949a568f512f05df20bf47b81cf232"
        },
        {
          "url": "https://git.kernel.org/stable/c/36fdc5319c4d0ec8b8938ec4769764098a246bfb"
        },
        {
          "url": "https://git.kernel.org/stable/c/4475afa2646d3fec176fc4d011d3879b26cb26e3"
        }
      ],
      "title": "scsi: qla2xxx: Complete command early within lock",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-42287",
    "datePublished": "2024-08-17T09:08:52.762Z",
    "dateReserved": "2024-07-30T07:40:12.262Z",
    "dateUpdated": "2026-08-05T11:36:23.425Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-42288 (GCVE-0-2024-42288)

Vulnerability from cvelistv5 – Published: 2024-08-17 09:08 – Updated: 2026-08-05 11:36

Title

scsi: qla2xxx: Fix for possible memory corruption

Summary

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Fix for possible memory corruption Init Control Block is dereferenced incorrectly. Correctly dereference ICB

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-10 16:11 UTC

Assigner

Linux mitre root

References

9 references

URL	Tags
https://git.kernel.org/stable/c/dae67169cb35a37ec…
https://git.kernel.org/stable/c/87db8d7b7520e99de…
https://git.kernel.org/stable/c/b0302ffc74123b6a9…
https://git.kernel.org/stable/c/2a15b59a2c5afac89…
https://git.kernel.org/stable/c/571d7f2a08836698c…
https://git.kernel.org/stable/c/8192c533e89d9fb69…
https://git.kernel.org/stable/c/c03d740152f78e869…
https://lists.debian.org/debian-lts-announce/2025…
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 0645cb8350cdb60bfbf91caa722984b81c215add , < dae67169cb35a37ecccf60cfcd6bf93a1f4f5efb (git) Affected: 0645cb8350cdb60bfbf91caa722984b81c215add , < 87db8d7b7520e99de71791260989f06f9c94953d (git) Affected: 0645cb8350cdb60bfbf91caa722984b81c215add , < b0302ffc74123b6a99d7d1896fcd9b2e4072d9ce (git) Affected: 0645cb8350cdb60bfbf91caa722984b81c215add , < 2a15b59a2c5afac89696e44acf5bbfc0599c6c5e (git) Affected: 0645cb8350cdb60bfbf91caa722984b81c215add , < 571d7f2a08836698c2fb0d792236424575b9829b (git) Affected: 0645cb8350cdb60bfbf91caa722984b81c215add , < 8192c533e89d9fb69b2490398939236b78cda79b (git) Affected: 0645cb8350cdb60bfbf91caa722984b81c215add , < c03d740152f78e86945a75b2ad541bf972fab92a (git)
Linux	Linux	Affected: 4.20 Unaffected: 0 , < 4.20 (semver) Unaffected: 5.4.282 , ≤ 5.4.* (semver) Unaffected: 5.10.224 , ≤ 5.10.* (semver) Unaffected: 5.15.165 , ≤ 5.15.* (semver) Unaffected: 6.1.103 , ≤ 6.1.* (semver) Unaffected: 6.6.44 , ≤ 6.6.* (semver) Unaffected: 6.10.3 , ≤ 6.10.* (semver) Unaffected: 6.11 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-42288",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:11:13.401777Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-12T17:33:30.047Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:03:40.875Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/scsi/qla2xxx/qla_os.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "dae67169cb35a37ecccf60cfcd6bf93a1f4f5efb",
              "status": "affected",
              "version": "0645cb8350cdb60bfbf91caa722984b81c215add",
              "versionType": "git"
            },
            {
              "lessThan": "87db8d7b7520e99de71791260989f06f9c94953d",
              "status": "affected",
              "version": "0645cb8350cdb60bfbf91caa722984b81c215add",
              "versionType": "git"
            },
            {
              "lessThan": "b0302ffc74123b6a99d7d1896fcd9b2e4072d9ce",
              "status": "affected",
              "version": "0645cb8350cdb60bfbf91caa722984b81c215add",
              "versionType": "git"
            },
            {
              "lessThan": "2a15b59a2c5afac89696e44acf5bbfc0599c6c5e",
              "status": "affected",
              "version": "0645cb8350cdb60bfbf91caa722984b81c215add",
              "versionType": "git"
            },
            {
              "lessThan": "571d7f2a08836698c2fb0d792236424575b9829b",
              "status": "affected",
              "version": "0645cb8350cdb60bfbf91caa722984b81c215add",
              "versionType": "git"
            },
            {
              "lessThan": "8192c533e89d9fb69b2490398939236b78cda79b",
              "status": "affected",
              "version": "0645cb8350cdb60bfbf91caa722984b81c215add",
              "versionType": "git"
            },
            {
              "lessThan": "c03d740152f78e86945a75b2ad541bf972fab92a",
              "status": "affected",
              "version": "0645cb8350cdb60bfbf91caa722984b81c215add",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/scsi/qla2xxx/qla_os.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.20"
            },
            {
              "lessThan": "4.20",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.282",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.224",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.165",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.103",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.44",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.282",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.224",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.165",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.103",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.44",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.3",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11",
                  "versionStartIncluding": "4.20",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: Fix for possible memory corruption\n\nInit Control Block is dereferenced incorrectly.  Correctly dereference ICB"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The corrupting write lives on the qla2xxx adapter-initialization path, driven by locally-set module parameters/sysfs attributes and firmware-reported exchange limits, not by any remotely supplied data. Reaching it requires local access to the host that owns the FC HBA.\nAC:L - The bad dereference is unconditional and deterministic once the adapter is in target or dual mode with exchange offload enabled \u2014 no race, no timing window, and no dependence on memory layout the attacker cannot influence.\nPR:L - On an FC target deployment already configured for exchange offload (target/dual mode with counts above 2048), no elevated capability is needed to reach the corrupting path \u2014 it re-executes on every adapter re-initialization, which an ordinary local user with storage-stack access can induce via host-reset/ISP-abort paths.\nUI:N - The corruption occurs automatically during adapter initialization and re-initialization; no victim action of any kind is required.\nS:U - The corrupted `init_cb_size` and the resulting out-of-bounds writes and mismatched DMA frees all stay within the kernel\u0027s own security authority. No VM, IOMMU, or sandbox boundary is crossed.\nC:H - An inflated `init_cb_size` is passed straight to `qla2x00_init_firmware()`, causing the HBA to DMA-read far past the ~5.2 KB coherent ICB allocation and expose adjacent kernel memory to the device; the page-allocator corruption from the mismatched `dma_free_coherent()` further yields read primitives over reused memory.\nI:H - The bug is a direct 16-bit write into an adjacent kernel struct field, which then drives `memset(ha-\u003einit_cb, 0, ha-\u003einit_cb_size)` out of bounds and frees page frames that were never allocated \u2014 classic heap/page-allocator corruption leveragable into a controlled write and control-flow hijack.\nA:H - Out-of-bounds writes and freeing unowned pages readily produce allocator corruption and kernel panics, and a malformed Init Control Block also leaves the HBA misconfigured, taking down storage connectivity on the affected host."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:36:24.496Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/dae67169cb35a37ecccf60cfcd6bf93a1f4f5efb"
        },
        {
          "url": "https://git.kernel.org/stable/c/87db8d7b7520e99de71791260989f06f9c94953d"
        },
        {
          "url": "https://git.kernel.org/stable/c/b0302ffc74123b6a99d7d1896fcd9b2e4072d9ce"
        },
        {
          "url": "https://git.kernel.org/stable/c/2a15b59a2c5afac89696e44acf5bbfc0599c6c5e"
        },
        {
          "url": "https://git.kernel.org/stable/c/571d7f2a08836698c2fb0d792236424575b9829b"
        },
        {
          "url": "https://git.kernel.org/stable/c/8192c533e89d9fb69b2490398939236b78cda79b"
        },
        {
          "url": "https://git.kernel.org/stable/c/c03d740152f78e86945a75b2ad541bf972fab92a"
        }
      ],
      "title": "scsi: qla2xxx: Fix for possible memory corruption",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-42288",
    "datePublished": "2024-08-17T09:08:53.466Z",
    "dateReserved": "2024-07-30T07:40:12.262Z",
    "dateUpdated": "2026-08-05T11:36:24.496Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-42289 (GCVE-0-2024-42289)

Vulnerability from cvelistv5 – Published: 2024-08-17 09:08 – Updated: 2026-05-23 15:52

Title

scsi: qla2xxx: During vport delete send async logout explicitly

Summary

In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: During vport delete send async logout explicitly During vport delete, it is observed that during unload we hit a crash because of stale entries in outstanding command array. For all these stale I/O entries, eh_abort was issued and aborted (fast_fail_io = 2009h) but I/Os could not complete while vport delete is in process of deleting. BUG: kernel NULL pointer dereference, address: 000000000000001c #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP NOPTI Workqueue: qla2xxx_wq qla_do_work [qla2xxx] RIP: 0010:dma_direct_unmap_sg+0x51/0x1e0 RSP: 0018:ffffa1e1e150fc68 EFLAGS: 00010046 RAX: 0000000000000000 RBX: 0000000000000021 RCX: 0000000000000001 RDX: 0000000000000021 RSI: 0000000000000000 RDI: ffff8ce208a7a0d0 RBP: ffff8ce208a7a0d0 R08: 0000000000000000 R09: ffff8ce378aac9c8 R10: ffff8ce378aac8a0 R11: ffffa1e1e150f9d8 R12: 0000000000000000 R13: 0000000000000000 R14: ffff8ce378aac9c8 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8d217f000000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000000000001c CR3: 0000002089acc000 CR4: 0000000000350ee0 Call Trace: <TASK> qla2xxx_qpair_sp_free_dma+0x417/0x4e0 ? qla2xxx_qpair_sp_compl+0x10d/0x1a0 ? qla2x00_status_entry+0x768/0x2830 ? newidle_balance+0x2f0/0x430 ? dequeue_entity+0x100/0x3c0 ? qla24xx_process_response_queue+0x6a1/0x19e0 ? __schedule+0x2d5/0x1140 ? qla_do_work+0x47/0x60 ? process_one_work+0x267/0x440 ? process_one_work+0x440/0x440 ? worker_thread+0x2d/0x3d0 ? process_one_work+0x440/0x440 ? kthread+0x156/0x180 ? set_kthread_struct+0x50/0x50 ? ret_from_fork+0x22/0x30 </TASK> Send out async logout explicitly for all the ports during vport delete.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-10 16:11 UTC

Assigner

Linux mitre root

References

10 references

URL	Tags
https://git.kernel.org/stable/c/086489256696eb774…
https://git.kernel.org/stable/c/171ac4b495f9473bc…
https://git.kernel.org/stable/c/e5ed6a26ffdec0c91…
https://git.kernel.org/stable/c/b12c54e51ba83c1fb…
https://git.kernel.org/stable/c/d28a2075bb5304897…
https://git.kernel.org/stable/c/87c25fcb95aafabb6…
https://git.kernel.org/stable/c/b35d6d5a2f38605cd…
https://git.kernel.org/stable/c/76f480d7c717368f2…
https://lists.debian.org/debian-lts-announce/2025…
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: efa93f48fa9d423fda166bc3b6c0cbb09682492e , < 086489256696eb774654a5410e86381c346356fe (git) Affected: efa93f48fa9d423fda166bc3b6c0cbb09682492e , < 171ac4b495f9473bc134356a00095b47e6409e52 (git) Affected: efa93f48fa9d423fda166bc3b6c0cbb09682492e , < e5ed6a26ffdec0c91cf0b6138afbd675c00ad5fc (git) Affected: efa93f48fa9d423fda166bc3b6c0cbb09682492e , < b12c54e51ba83c1fbc619d35083d7872e42ecdef (git) Affected: efa93f48fa9d423fda166bc3b6c0cbb09682492e , < d28a2075bb530489715a3b011e1dd8765ba20313 (git) Affected: efa93f48fa9d423fda166bc3b6c0cbb09682492e , < 87c25fcb95aafabb6a4914239f4ab41b07a4f9b7 (git) Affected: efa93f48fa9d423fda166bc3b6c0cbb09682492e , < b35d6d5a2f38605cddea7d5c64cded894fbe8ede (git) Affected: efa93f48fa9d423fda166bc3b6c0cbb09682492e , < 76f480d7c717368f29a3870f7d64471ce0ff8fb2 (git) Affected: 01cda405c88b5ce1ff8c7d4006ec23ade2b0a507 (git) Affected: 030680c5b21d4ec33234d17503827800e4550345 (git) Affected: 4.14.62 , < 4.15 (semver) Affected: 4.17.14 , < 4.18 (semver)
Linux	Linux	Affected: 4.18 Unaffected: 0 , < 4.18 (semver) Unaffected: 4.19.320 , ≤ 4.19.* (semver) Unaffected: 5.4.282 , ≤ 5.4.* (semver) Unaffected: 5.10.224 , ≤ 5.10.* (semver) Unaffected: 5.15.165 , ≤ 5.15.* (semver) Unaffected: 6.1.103 , ≤ 6.1.* (semver) Unaffected: 6.6.44 , ≤ 6.6.* (semver) Unaffected: 6.10.3 , ≤ 6.10.* (semver) Unaffected: 6.11 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-42289",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:11:10.283568Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-12T17:33:29.913Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:03:43.787Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/scsi/qla2xxx/qla_mid.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "086489256696eb774654a5410e86381c346356fe",
              "status": "affected",
              "version": "efa93f48fa9d423fda166bc3b6c0cbb09682492e",
              "versionType": "git"
            },
            {
              "lessThan": "171ac4b495f9473bc134356a00095b47e6409e52",
              "status": "affected",
              "version": "efa93f48fa9d423fda166bc3b6c0cbb09682492e",
              "versionType": "git"
            },
            {
              "lessThan": "e5ed6a26ffdec0c91cf0b6138afbd675c00ad5fc",
              "status": "affected",
              "version": "efa93f48fa9d423fda166bc3b6c0cbb09682492e",
              "versionType": "git"
            },
            {
              "lessThan": "b12c54e51ba83c1fbc619d35083d7872e42ecdef",
              "status": "affected",
              "version": "efa93f48fa9d423fda166bc3b6c0cbb09682492e",
              "versionType": "git"
            },
            {
              "lessThan": "d28a2075bb530489715a3b011e1dd8765ba20313",
              "status": "affected",
              "version": "efa93f48fa9d423fda166bc3b6c0cbb09682492e",
              "versionType": "git"
            },
            {
              "lessThan": "87c25fcb95aafabb6a4914239f4ab41b07a4f9b7",
              "status": "affected",
              "version": "efa93f48fa9d423fda166bc3b6c0cbb09682492e",
              "versionType": "git"
            },
            {
              "lessThan": "b35d6d5a2f38605cddea7d5c64cded894fbe8ede",
              "status": "affected",
              "version": "efa93f48fa9d423fda166bc3b6c0cbb09682492e",
              "versionType": "git"
            },
            {
              "lessThan": "76f480d7c717368f29a3870f7d64471ce0ff8fb2",
              "status": "affected",
              "version": "efa93f48fa9d423fda166bc3b6c0cbb09682492e",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "01cda405c88b5ce1ff8c7d4006ec23ade2b0a507",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "030680c5b21d4ec33234d17503827800e4550345",
              "versionType": "git"
            },
            {
              "lessThan": "4.15",
              "status": "affected",
              "version": "4.14.62",
              "versionType": "semver"
            },
            {
              "lessThan": "4.18",
              "status": "affected",
              "version": "4.17.14",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/scsi/qla2xxx/qla_mid.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.18"
            },
            {
              "lessThan": "4.18",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.320",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.282",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.224",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.165",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.103",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.44",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.320",
                  "versionStartIncluding": "4.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.282",
                  "versionStartIncluding": "4.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.224",
                  "versionStartIncluding": "4.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.165",
                  "versionStartIncluding": "4.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.103",
                  "versionStartIncluding": "4.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.44",
                  "versionStartIncluding": "4.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.3",
                  "versionStartIncluding": "4.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11",
                  "versionStartIncluding": "4.18",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.14.62",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "4.17.14",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qla2xxx: During vport delete send async logout explicitly\n\nDuring vport delete, it is observed that during unload we hit a crash\nbecause of stale entries in outstanding command array.  For all these stale\nI/O entries, eh_abort was issued and aborted (fast_fail_io = 2009h) but\nI/Os could not complete while vport delete is in process of deleting.\n\n  BUG: kernel NULL pointer dereference, address: 000000000000001c\n  #PF: supervisor read access in kernel mode\n  #PF: error_code(0x0000) - not-present page\n  PGD 0 P4D 0\n  Oops: 0000 [#1] PREEMPT SMP NOPTI\n  Workqueue: qla2xxx_wq qla_do_work [qla2xxx]\n  RIP: 0010:dma_direct_unmap_sg+0x51/0x1e0\n  RSP: 0018:ffffa1e1e150fc68 EFLAGS: 00010046\n  RAX: 0000000000000000 RBX: 0000000000000021 RCX: 0000000000000001\n  RDX: 0000000000000021 RSI: 0000000000000000 RDI: ffff8ce208a7a0d0\n  RBP: ffff8ce208a7a0d0 R08: 0000000000000000 R09: ffff8ce378aac9c8\n  R10: ffff8ce378aac8a0 R11: ffffa1e1e150f9d8 R12: 0000000000000000\n  R13: 0000000000000000 R14: ffff8ce378aac9c8 R15: 0000000000000000\n  FS:  0000000000000000(0000) GS:ffff8d217f000000(0000) knlGS:0000000000000000\n  CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n  CR2: 000000000000001c CR3: 0000002089acc000 CR4: 0000000000350ee0\n  Call Trace:\n  \u003cTASK\u003e\n  qla2xxx_qpair_sp_free_dma+0x417/0x4e0\n  ? qla2xxx_qpair_sp_compl+0x10d/0x1a0\n  ? qla2x00_status_entry+0x768/0x2830\n  ? newidle_balance+0x2f0/0x430\n  ? dequeue_entity+0x100/0x3c0\n  ? qla24xx_process_response_queue+0x6a1/0x19e0\n  ? __schedule+0x2d5/0x1140\n  ? qla_do_work+0x47/0x60\n  ? process_one_work+0x267/0x440\n  ? process_one_work+0x440/0x440\n  ? worker_thread+0x2d/0x3d0\n  ? process_one_work+0x440/0x440\n  ? kthread+0x156/0x180\n  ? set_kthread_struct+0x50/0x50\n  ? ret_from_fork+0x22/0x30\n  \u003c/TASK\u003e\n\nSend out async logout explicitly for all the ports during vport delete."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-23T15:52:43.808Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/086489256696eb774654a5410e86381c346356fe"
        },
        {
          "url": "https://git.kernel.org/stable/c/171ac4b495f9473bc134356a00095b47e6409e52"
        },
        {
          "url": "https://git.kernel.org/stable/c/e5ed6a26ffdec0c91cf0b6138afbd675c00ad5fc"
        },
        {
          "url": "https://git.kernel.org/stable/c/b12c54e51ba83c1fbc619d35083d7872e42ecdef"
        },
        {
          "url": "https://git.kernel.org/stable/c/d28a2075bb530489715a3b011e1dd8765ba20313"
        },
        {
          "url": "https://git.kernel.org/stable/c/87c25fcb95aafabb6a4914239f4ab41b07a4f9b7"
        },
        {
          "url": "https://git.kernel.org/stable/c/b35d6d5a2f38605cddea7d5c64cded894fbe8ede"
        },
        {
          "url": "https://git.kernel.org/stable/c/76f480d7c717368f29a3870f7d64471ce0ff8fb2"
        }
      ],
      "title": "scsi: qla2xxx: During vport delete send async logout explicitly",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-42289",
    "datePublished": "2024-08-17T09:08:59.113Z",
    "dateReserved": "2024-07-30T07:40:12.267Z",
    "dateUpdated": "2026-05-23T15:52:43.808Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-42291 (GCVE-0-2024-42291)

Vulnerability from cvelistv5 – Published: 2024-08-17 09:09 – Updated: 2026-05-11 20:29

Title

ice: Add a per-VF limit on number of FDIR filters

Summary

In the Linux kernel, the following vulnerability has been resolved: ice: Add a per-VF limit on number of FDIR filters While the iavf driver adds a s/w limit (128) on the number of FDIR filters that the VF can request, a malicious VF driver can request more than that and exhaust the resources for other VFs. Add a similar limit in ice.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-10 16:11 UTC

Assigner

Linux mitre root

References

6 references

URL	Tags
https://git.kernel.org/stable/c/e81b674ead8e2172b…
https://git.kernel.org/stable/c/8e02cd98a6e24389d…
https://git.kernel.org/stable/c/d62389073a5b93741…
https://git.kernel.org/stable/c/292081c4e7f575a79…
https://git.kernel.org/stable/c/6ebbe97a488179f5d…
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: 1f7ea1cd6a3748427512ccc9582e18cd9efea966 , < e81b674ead8e2172b2a69e7b45e079239ace4dbc (git) Affected: 1f7ea1cd6a3748427512ccc9582e18cd9efea966 , < 8e02cd98a6e24389d476e28436d41e620ed8e559 (git) Affected: 1f7ea1cd6a3748427512ccc9582e18cd9efea966 , < d62389073a5b937413e2d1bc1da06ccff5103c0c (git) Affected: 1f7ea1cd6a3748427512ccc9582e18cd9efea966 , < 292081c4e7f575a79017d5cbe1a0ec042783976f (git) Affected: 1f7ea1cd6a3748427512ccc9582e18cd9efea966 , < 6ebbe97a488179f5dc85f2f1e0c89b486e99ee97 (git)
Linux	Linux	Affected: 5.13 Unaffected: 0 , < 5.13 (semver) Unaffected: 5.15.172 , ≤ 5.15.* (semver) Unaffected: 6.1.103 , ≤ 6.1.* (semver) Unaffected: 6.6.44 , ≤ 6.6.* (semver) Unaffected: 6.10.3 , ≤ 6.10.* (semver) Unaffected: 6.11 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-42291",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:11:03.788403Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-12T17:33:29.655Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:03:48.147Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/intel/ice/ice_ethtool_fdir.c",
            "drivers/net/ethernet/intel/ice/ice_fdir.h",
            "drivers/net/ethernet/intel/ice/ice_virtchnl_fdir.c",
            "drivers/net/ethernet/intel/ice/ice_virtchnl_fdir.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "e81b674ead8e2172b2a69e7b45e079239ace4dbc",
              "status": "affected",
              "version": "1f7ea1cd6a3748427512ccc9582e18cd9efea966",
              "versionType": "git"
            },
            {
              "lessThan": "8e02cd98a6e24389d476e28436d41e620ed8e559",
              "status": "affected",
              "version": "1f7ea1cd6a3748427512ccc9582e18cd9efea966",
              "versionType": "git"
            },
            {
              "lessThan": "d62389073a5b937413e2d1bc1da06ccff5103c0c",
              "status": "affected",
              "version": "1f7ea1cd6a3748427512ccc9582e18cd9efea966",
              "versionType": "git"
            },
            {
              "lessThan": "292081c4e7f575a79017d5cbe1a0ec042783976f",
              "status": "affected",
              "version": "1f7ea1cd6a3748427512ccc9582e18cd9efea966",
              "versionType": "git"
            },
            {
              "lessThan": "6ebbe97a488179f5dc85f2f1e0c89b486e99ee97",
              "status": "affected",
              "version": "1f7ea1cd6a3748427512ccc9582e18cd9efea966",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/intel/ice/ice_ethtool_fdir.c",
            "drivers/net/ethernet/intel/ice/ice_fdir.h",
            "drivers/net/ethernet/intel/ice/ice_virtchnl_fdir.c",
            "drivers/net/ethernet/intel/ice/ice_virtchnl_fdir.h"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.13"
            },
            {
              "lessThan": "5.13",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.172",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.103",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.44",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.172",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.103",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.44",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.3",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: Add a per-VF limit on number of FDIR filters\n\nWhile the iavf driver adds a s/w limit (128) on the number of FDIR\nfilters that the VF can request, a malicious VF driver can request more\nthan that and exhaust the resources for other VFs.\n\nAdd a similar limit in ice."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T20:29:32.041Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/e81b674ead8e2172b2a69e7b45e079239ace4dbc"
        },
        {
          "url": "https://git.kernel.org/stable/c/8e02cd98a6e24389d476e28436d41e620ed8e559"
        },
        {
          "url": "https://git.kernel.org/stable/c/d62389073a5b937413e2d1bc1da06ccff5103c0c"
        },
        {
          "url": "https://git.kernel.org/stable/c/292081c4e7f575a79017d5cbe1a0ec042783976f"
        },
        {
          "url": "https://git.kernel.org/stable/c/6ebbe97a488179f5dc85f2f1e0c89b486e99ee97"
        }
      ],
      "title": "ice: Add a per-VF limit on number of FDIR filters",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-42291",
    "datePublished": "2024-08-17T09:09:00.944Z",
    "dateReserved": "2024-07-30T07:40:12.268Z",
    "dateUpdated": "2026-05-11T20:29:32.041Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-42292 (GCVE-0-2024-42292)

Vulnerability from cvelistv5 – Published: 2024-08-17 09:09 – Updated: 2026-05-12 11:56

Title

kobject_uevent: Fix OOB access within zap_modalias_env()

Summary

In the Linux kernel, the following vulnerability has been resolved: kobject_uevent: Fix OOB access within zap_modalias_env() zap_modalias_env() wrongly calculates size of memory block to move, so will cause OOB memory access issue if variable MODALIAS is not the last one within its @env parameter, fixed by correcting size to memmove.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-10 16:11 UTC

Assigner

Linux mitre root

References

11 references

URL	Tags
https://git.kernel.org/stable/c/81a15d28f32af0149…
https://git.kernel.org/stable/c/b59a5e86a3934f1b6…
https://git.kernel.org/stable/c/648d5490460d38436…
https://git.kernel.org/stable/c/c5ee8adc8d98a4970…
https://git.kernel.org/stable/c/68d63ace80b76395e…
https://git.kernel.org/stable/c/57fe01d3d04276875…
https://git.kernel.org/stable/c/d4663536754defff7…
https://git.kernel.org/stable/c/dd6e9894b451e7c85…
https://lists.debian.org/debian-lts-announce/2025…
https://lists.debian.org/debian-lts-announce/2024…
https://cert-portal.siemens.com/productcert/html/…

Impacted products

3 products

Vendor	Product	Version
Linux	Linux	Affected: 9b3fa47d4a76b1d606a396455f9bbeee083ef008 , < 81a15d28f32af01493ae8c5457e0d55314a4167d (git) Affected: 9b3fa47d4a76b1d606a396455f9bbeee083ef008 , < b59a5e86a3934f1b6a5bd1368902dbc79bdecc90 (git) Affected: 9b3fa47d4a76b1d606a396455f9bbeee083ef008 , < 648d5490460d38436640da0812bf7f6351c150d2 (git) Affected: 9b3fa47d4a76b1d606a396455f9bbeee083ef008 , < c5ee8adc8d98a49703320d13878ba2b923b142f5 (git) Affected: 9b3fa47d4a76b1d606a396455f9bbeee083ef008 , < 68d63ace80b76395e7935687ecdb86421adc2168 (git) Affected: 9b3fa47d4a76b1d606a396455f9bbeee083ef008 , < 57fe01d3d04276875c7e3a6dc763517fc05b8762 (git) Affected: 9b3fa47d4a76b1d606a396455f9bbeee083ef008 , < d4663536754defff75ff1eca0aaebc41da165a8d (git) Affected: 9b3fa47d4a76b1d606a396455f9bbeee083ef008 , < dd6e9894b451e7c85cceb8e9dc5432679a70e7dc (git)
Linux	Linux	Affected: 4.15 Unaffected: 0 , < 4.15 (semver) Unaffected: 4.19.320 , ≤ 4.19.* (semver) Unaffected: 5.4.282 , ≤ 5.4.* (semver) Unaffected: 5.10.224 , ≤ 5.10.* (semver) Unaffected: 5.15.165 , ≤ 5.15.* (semver) Unaffected: 6.1.103 , ≤ 6.1.* (semver) Unaffected: 6.6.44 , ≤ 6.6.* (semver) Unaffected: 6.10.3 , ≤ 6.10.* (semver) Unaffected: 6.11 , ≤ * (original_commit_for_fix)
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	Affected: 0 , < * (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-42292",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:11:00.545656Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-12T17:33:29.474Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:03:51.105Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "affected": [
          {
            "defaultStatus": "unknown",
            "product": "SIMATIC S7-1500 TM MFP - GNU/Linux subsystem",
            "vendor": "Siemens",
            "versions": [
              {
                "lessThan": "*",
                "status": "affected",
                "version": "0",
                "versionType": "custom"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-12T11:56:47.996Z",
          "orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
          "shortName": "siemens-SADP"
        },
        "references": [
          {
            "url": "https://cert-portal.siemens.com/productcert/html/ssa-265688.html"
          }
        ],
        "x_adpType": "supplier"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "lib/kobject_uevent.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "81a15d28f32af01493ae8c5457e0d55314a4167d",
              "status": "affected",
              "version": "9b3fa47d4a76b1d606a396455f9bbeee083ef008",
              "versionType": "git"
            },
            {
              "lessThan": "b59a5e86a3934f1b6a5bd1368902dbc79bdecc90",
              "status": "affected",
              "version": "9b3fa47d4a76b1d606a396455f9bbeee083ef008",
              "versionType": "git"
            },
            {
              "lessThan": "648d5490460d38436640da0812bf7f6351c150d2",
              "status": "affected",
              "version": "9b3fa47d4a76b1d606a396455f9bbeee083ef008",
              "versionType": "git"
            },
            {
              "lessThan": "c5ee8adc8d98a49703320d13878ba2b923b142f5",
              "status": "affected",
              "version": "9b3fa47d4a76b1d606a396455f9bbeee083ef008",
              "versionType": "git"
            },
            {
              "lessThan": "68d63ace80b76395e7935687ecdb86421adc2168",
              "status": "affected",
              "version": "9b3fa47d4a76b1d606a396455f9bbeee083ef008",
              "versionType": "git"
            },
            {
              "lessThan": "57fe01d3d04276875c7e3a6dc763517fc05b8762",
              "status": "affected",
              "version": "9b3fa47d4a76b1d606a396455f9bbeee083ef008",
              "versionType": "git"
            },
            {
              "lessThan": "d4663536754defff75ff1eca0aaebc41da165a8d",
              "status": "affected",
              "version": "9b3fa47d4a76b1d606a396455f9bbeee083ef008",
              "versionType": "git"
            },
            {
              "lessThan": "dd6e9894b451e7c85cceb8e9dc5432679a70e7dc",
              "status": "affected",
              "version": "9b3fa47d4a76b1d606a396455f9bbeee083ef008",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "lib/kobject_uevent.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.15"
            },
            {
              "lessThan": "4.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.320",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.282",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.224",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.165",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.103",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.44",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.320",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.282",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.224",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.165",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.103",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.44",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.3",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11",
                  "versionStartIncluding": "4.15",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nkobject_uevent: Fix OOB access within zap_modalias_env()\n\nzap_modalias_env() wrongly calculates size of memory block to move, so\nwill cause OOB memory access issue if variable MODALIAS is not the last\none within its @env parameter, fixed by correcting size to memmove."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T20:29:33.196Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/81a15d28f32af01493ae8c5457e0d55314a4167d"
        },
        {
          "url": "https://git.kernel.org/stable/c/b59a5e86a3934f1b6a5bd1368902dbc79bdecc90"
        },
        {
          "url": "https://git.kernel.org/stable/c/648d5490460d38436640da0812bf7f6351c150d2"
        },
        {
          "url": "https://git.kernel.org/stable/c/c5ee8adc8d98a49703320d13878ba2b923b142f5"
        },
        {
          "url": "https://git.kernel.org/stable/c/68d63ace80b76395e7935687ecdb86421adc2168"
        },
        {
          "url": "https://git.kernel.org/stable/c/57fe01d3d04276875c7e3a6dc763517fc05b8762"
        },
        {
          "url": "https://git.kernel.org/stable/c/d4663536754defff75ff1eca0aaebc41da165a8d"
        },
        {
          "url": "https://git.kernel.org/stable/c/dd6e9894b451e7c85cceb8e9dc5432679a70e7dc"
        }
      ],
      "title": "kobject_uevent: Fix OOB access within zap_modalias_env()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-42292",
    "datePublished": "2024-08-17T09:09:01.586Z",
    "dateReserved": "2024-07-30T07:40:12.268Z",
    "dateUpdated": "2026-05-12T11:56:47.996Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2024-42295 (GCVE-0-2024-42295)

Vulnerability from cvelistv5 – Published: 2024-08-17 09:09 – Updated: 2026-05-11 20:29

Title

nilfs2: handle inconsistent state in nilfs_btnode_create_block()

Summary

In the Linux kernel, the following vulnerability has been resolved: nilfs2: handle inconsistent state in nilfs_btnode_create_block() Syzbot reported that a buffer state inconsistency was detected in nilfs_btnode_create_block(), triggering a kernel bug. It is not appropriate to treat this inconsistency as a bug; it can occur if the argument block address (the buffer index of the newly created block) is a virtual block number and has been reallocated due to corruption of the bitmap used to manage its allocation state. So, modify nilfs_btnode_create_block() and its callers to treat it as a possible filesystem error, rather than triggering a kernel bug.

Severity

No CVSS data available.

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-10 16:10 UTC

Assigner

Linux mitre root

References

10 references

URL	Tags
https://git.kernel.org/stable/c/19cce46238ffe3546…
https://git.kernel.org/stable/c/02b87e6334a38c65e…
https://git.kernel.org/stable/c/5f0a6800b8aec1b45…
https://git.kernel.org/stable/c/e34191cce3ee63dfa…
https://git.kernel.org/stable/c/012be828a118bf496…
https://git.kernel.org/stable/c/be56dfc9be0604291…
https://git.kernel.org/stable/c/366c3f688dd0288cb…
https://git.kernel.org/stable/c/4811f7af6090e8f5a…
https://lists.debian.org/debian-lts-announce/2025…
https://lists.debian.org/debian-lts-announce/2024…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: a60be987d45dd510aeb54389526f9957cfab106c , < 19cce46238ffe3546e44b9c74057103ff8b24c62 (git) Affected: a60be987d45dd510aeb54389526f9957cfab106c , < 02b87e6334a38c65eef49848d3f1ac422f0b2a44 (git) Affected: a60be987d45dd510aeb54389526f9957cfab106c , < 5f0a6800b8aec1b453c7fe4c44fcaac5ffe9d52e (git) Affected: a60be987d45dd510aeb54389526f9957cfab106c , < e34191cce3ee63dfa5fb241904aaf2a042d5b6d8 (git) Affected: a60be987d45dd510aeb54389526f9957cfab106c , < 012be828a118bf496e666ef1fc47fc0e7358ada2 (git) Affected: a60be987d45dd510aeb54389526f9957cfab106c , < be56dfc9be0604291267c07b0e27a69a6bda4899 (git) Affected: a60be987d45dd510aeb54389526f9957cfab106c , < 366c3f688dd0288cbe38af1d3a886b5c62372e4a (git) Affected: a60be987d45dd510aeb54389526f9957cfab106c , < 4811f7af6090e8f5a398fbdd766f903ef6c0d787 (git)
Linux	Linux	Affected: 2.6.30 Unaffected: 0 , < 2.6.30 (semver) Unaffected: 4.19.320 , ≤ 4.19.* (semver) Unaffected: 5.4.282 , ≤ 5.4.* (semver) Unaffected: 5.10.224 , ≤ 5.10.* (semver) Unaffected: 5.15.165 , ≤ 5.15.* (semver) Unaffected: 6.1.103 , ≤ 6.1.* (semver) Unaffected: 6.6.44 , ≤ 6.6.* (semver) Unaffected: 6.10.3 , ≤ 6.10.* (semver) Unaffected: 6.11 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-42295",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-10T16:10:50.851556Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-12T17:33:29.125Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:03:54.019Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          },
          {
            "url": "https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/nilfs2/btnode.c",
            "fs/nilfs2/btree.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "19cce46238ffe3546e44b9c74057103ff8b24c62",
              "status": "affected",
              "version": "a60be987d45dd510aeb54389526f9957cfab106c",
              "versionType": "git"
            },
            {
              "lessThan": "02b87e6334a38c65eef49848d3f1ac422f0b2a44",
              "status": "affected",
              "version": "a60be987d45dd510aeb54389526f9957cfab106c",
              "versionType": "git"
            },
            {
              "lessThan": "5f0a6800b8aec1b453c7fe4c44fcaac5ffe9d52e",
              "status": "affected",
              "version": "a60be987d45dd510aeb54389526f9957cfab106c",
              "versionType": "git"
            },
            {
              "lessThan": "e34191cce3ee63dfa5fb241904aaf2a042d5b6d8",
              "status": "affected",
              "version": "a60be987d45dd510aeb54389526f9957cfab106c",
              "versionType": "git"
            },
            {
              "lessThan": "012be828a118bf496e666ef1fc47fc0e7358ada2",
              "status": "affected",
              "version": "a60be987d45dd510aeb54389526f9957cfab106c",
              "versionType": "git"
            },
            {
              "lessThan": "be56dfc9be0604291267c07b0e27a69a6bda4899",
              "status": "affected",
              "version": "a60be987d45dd510aeb54389526f9957cfab106c",
              "versionType": "git"
            },
            {
              "lessThan": "366c3f688dd0288cbe38af1d3a886b5c62372e4a",
              "status": "affected",
              "version": "a60be987d45dd510aeb54389526f9957cfab106c",
              "versionType": "git"
            },
            {
              "lessThan": "4811f7af6090e8f5a398fbdd766f903ef6c0d787",
              "status": "affected",
              "version": "a60be987d45dd510aeb54389526f9957cfab106c",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/nilfs2/btnode.c",
            "fs/nilfs2/btree.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.30"
            },
            {
              "lessThan": "2.6.30",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "4.19.*",
              "status": "unaffected",
              "version": "4.19.320",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.4.*",
              "status": "unaffected",
              "version": "5.4.282",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.224",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.165",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.103",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.44",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "4.19.320",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.4.282",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.224",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.165",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.103",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.44",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.3",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11",
                  "versionStartIncluding": "2.6.30",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnilfs2: handle inconsistent state in nilfs_btnode_create_block()\n\nSyzbot reported that a buffer state inconsistency was detected in\nnilfs_btnode_create_block(), triggering a kernel bug.\n\nIt is not appropriate to treat this inconsistency as a bug; it can occur\nif the argument block address (the buffer index of the newly created\nblock) is a virtual block number and has been reallocated due to\ncorruption of the bitmap used to manage its allocation state.\n\nSo, modify nilfs_btnode_create_block() and its callers to treat it as a\npossible filesystem error, rather than triggering a kernel bug."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-11T20:29:36.690Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/19cce46238ffe3546e44b9c74057103ff8b24c62"
        },
        {
          "url": "https://git.kernel.org/stable/c/02b87e6334a38c65eef49848d3f1ac422f0b2a44"
        },
        {
          "url": "https://git.kernel.org/stable/c/5f0a6800b8aec1b453c7fe4c44fcaac5ffe9d52e"
        },
        {
          "url": "https://git.kernel.org/stable/c/e34191cce3ee63dfa5fb241904aaf2a042d5b6d8"
        },
        {
          "url": "https://git.kernel.org/stable/c/012be828a118bf496e666ef1fc47fc0e7358ada2"
        },
        {
          "url": "https://git.kernel.org/stable/c/be56dfc9be0604291267c07b0e27a69a6bda4899"
        },
        {
          "url": "https://git.kernel.org/stable/c/366c3f688dd0288cbe38af1d3a886b5c62372e4a"
        },
        {
          "url": "https://git.kernel.org/stable/c/4811f7af6090e8f5a398fbdd766f903ef6c0d787"
        }
      ],
      "title": "nilfs2: handle inconsistent state in nilfs_btnode_create_block()",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-42295",
    "datePublished": "2024-08-17T09:09:03.618Z",
    "dateReserved": "2024-07-30T07:40:12.269Z",
    "dateUpdated": "2026-05-11T20:29:36.690Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

SUSE-SU-2024:3190-1

CVE-2024-42283 (GCVE-0-2024-42283)

CVE-2024-42284 (GCVE-0-2024-42284)

CVE-2024-42285 (GCVE-0-2024-42285)

CVE-2024-42286 (GCVE-0-2024-42286)

CVE-2024-42287 (GCVE-0-2024-42287)

CVE-2024-42288 (GCVE-0-2024-42288)

CVE-2024-42289 (GCVE-0-2024-42289)

CVE-2024-42291 (GCVE-0-2024-42291)

CVE-2024-42292 (GCVE-0-2024-42292)

CVE-2024-42295 (GCVE-0-2024-42295)

Tags

Sightings

Nomenclature