Vulnerability-Lookup

SUSE-SU-2024:3559-1

Vulnerability from csaf_suse - Published: 2024-10-09 08:19 - Updated: 2024-10-09 08:19

Summary

Security update for the Linux Kernel

Severity

Important

Notes

Title of the patch: Security update for the Linux Kernel

Description of the patch: The SUSE Linux Enterprise 12 SP5 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47387: cpufreq: schedutil: Destroy mutex before kobject_put() frees the memory (bsc#1225316). - CVE-2022-48788: nvme-rdma: fix possible use-after-free in transport error_recovery work (bsc#1227952). - CVE-2022-48789: nvme-tcp: fix possible use-after-free in transport error_recovery work (bsc#1228000). - CVE-2022-48790: nvme: fix a possible use-after-free in controller reset during load (bsc#1227941). - CVE-2022-48791: Fix use-after-free for aborted TMF sas_task (bsc#1228002) - CVE-2022-48799: perf: Fix list corruption in perf_cgroup_switch() (bsc#1227953). - CVE-2022-48844: Bluetooth: hci_core: Fix leaking sent_cmd skb (bsc#1228068). - CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633). - CVE-2022-48943: KVM: x86/mmu: make apf token non-zero to fix bug (bsc#1229645). - CVE-2022-48945: media: vivid: fix compose size exceed boundary (bsc#1230398). - CVE-2023-52915: media: dvb-usb-v2: af9035: fix missing unlock (bsc#1230270). - CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846). - CVE-2024-41073: nvme: avoid double free special payload (bsc#1228635). - CVE-2024-41079: nvmet: always initialize cqe.result (bsc#1228615). - CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082). - CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507). - CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334). - CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363). - CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362). - CVE-2024-43884: Add error handling to pair_device() (bsc#1229739) - CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764). - CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753). - CVE-2024-43912: wifi: nl80211: disallow setting special AP channel widths (bsc#1229830) - CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790). - CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015). - CVE-2024-44948: x86/mtrr: Check if fixed MTRRs exist before saving them (bsc#1230174). - CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180). - CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (bsc#1230178). - CVE-2024-44954: ALSA: line6: Fix racy access to midibuf (bsc#1230176). - CVE-2024-44969: s390/sclp: Prevent release of buffer in I/O (bsc#1230200). - CVE-2024-44982: drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails (bsc#1230204). - CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185). - CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171). - CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233). - CVE-2024-45008: Input: MT - limit max slots (bsc#1230248). - CVE-2024-46673: scsi: aacraid: Fix double-free on probe failure (bsc#1230506). - CVE-2024-46675: usb: dwc3: core: Prevent USB core invalid event buffer address access (bsc#1230533). - CVE-2024-46676: nfc: pn533: Add poll mod list filling check (bsc#1230535). - CVE-2024-46677: gtp: fix a potential NULL pointer dereference (bsc#1230549). - CVE-2024-46679: ethtool: check device is present when getting link settings (bsc#1230556). - CVE-2024-46685: pinctrl: single: fix potential NULL dereference in pcs_get_function() (bsc#1230515) - CVE-2024-46686: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() (bsc#1230517). - CVE-2024-46702: thunderbolt: Mark XDomain as unplugged when router is removed (bsc#1230589) - CVE-2024-46707: KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 (bsc#1230582). - CVE-2024-46715: driver: iio: add missing checks on iio_info's callback access (bsc#1230700). - CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710) - CVE-2024-46722: drm/amdgpu: fix mc_data out-of-bounds read warning (bsc#1230712). - CVE-2024-46723: drm/amdgpu: fix ucode out-of-bounds read warning (bsc#1230702). - CVE-2024-46731: drm/amd/pm: fix the Out-of-bounds read warning (bsc#1230709). - CVE-2024-46738: VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (bsc#1230731). - CVE-2024-46743: of/irq: Prevent device address out-of-bounds read in interrupt map walk (bsc#1230756). - CVE-2024-46744: Squashfs: sanity check symbolic link size (bsc#1230747). - CVE-2024-46745: Input: uinput - reject requests with unreasonable number of slots (bsc#1230748). - CVE-2024-46750: PCI: Add missing bridge lock to pci_bus_lock() (bsc#1230783). - CVE-2024-46753: btrfs: handle errors from btrfs_dec_ref() properly (bsc#1230796). - CVE-2024-46759: hwmon: (adc128d818) Fix underflows seen when writing limit attributes (bsc#1230814). - CVE-2024-46761: pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv (bsc#1230761). - CVE-2024-46770: ice: Add netif_device_attach/detach into PF reset flow (bsc#1230763). - CVE-2024-46783: tcp_bpf: fix return value of tcp_bpf_sendmsg() (bsc#1230810). - CVE-2024-46787: userfaultfd: fix checks for huge PMDs (bsc#1230815). - CVE-2024-46822: arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (bsc#1231120). - CVE-2024-46853: spi: nxp-fspi: fix the KASAN report out-of-bounds bug (bsc#1231083). - CVE-2024-46854: net: dpaa: Pad packets to ETH_ZLEN (bsc#1231084). - CVE-2024-46859: platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses (bsc#1231089). The following non-security bugs were fixed: - ACPI / EC: Clean up EC GPE mask flag (git-fixes). - ACPI: EC: Avoid printing confusing messages in acpi_ec_setup() (git-fixes). - ACPI: EC: Fix an EC event IRQ storming issue (git-fixes). - ACPI: EC: tweak naming in preparation for GpioInt support (git-fixes). - ACPI: SPCR: Consider baud rate 0 as preconfigured state (git-fixes). - ACPI: SPCR: Workaround for APM X-Gene 8250 UART 32-alignment errata (git-fixes). - ACPI: SPCR: work around clock issue on xgene UART (git-fixes). - ACPI: blacklist: fix clang warning for unused DMI table (git-fixes). - ACPI: video: Add new hw_changes_brightness quirk, set it on PB Easynote MZ35 (git-fixes). - Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic (git-fixes). - Fix bsc#1054914 reference. - PCI: xilinx-nwl: Clean up clock on probe failure/removal (git-fixes). - RDMA/core: Remove unused declaration rdma_resolve_ip_route() (git-fixes) - RDMA/cxgb4: Added NULL check for lookup_atid (git-fixes) - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (git-fixes) - Revert 'ACPI / EC: Remove old CLEAR_ON_RESUME quirk' (git-fixes). - af_unix: Fix data races around sk->sk_shutdown (bsc#1226846). - af_unix: Fix data-races around sk->sk_shutdown (git-fixes). - af_unix: annotate lockless accesses to sk->sk_err (bsc#1226846). - autofs4: use wait_event_killable (bsc#1207341). - ceph: remove the incorrect Fw reference check when dirtying pages (bsc#1231184). - fuse: use unsigned type for getxattr/listxattr size truncation (bsc#1230151). - kabi fix for proc/mounts: add cursor (bsc#1207341). - kabi/severities: Ignore ppc instruction emulation (bsc#1230826 ltc#205848) These are lowlevel functions not used outside of exception handling and kernel debugging facilities. - kthread: Fix task state in kthread worker if being frozen (bsc#1231146). - media: vivid: avoid integer overflow (git-fixes). - media: vivid: dev->bitmap_cap wasn't freed in all cases (git-fixes). - media: vivid: fix assignment of dev->fbuf_out_flags (git-fixes). - media: vivid: s_fbuf: add more sanity checks (git-fixes). - net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup (git-fixes). - net: mana: Fix race of mana_hwc_post_rx_wqe and new hwc response (git-fixes). - net: usb: sr9700: fix uninitialized variable use in sr_mdio_read (git-fixes). - nvmet-tcp: fix kernel crash if commands allocation fails (git-fixes). - nvmet: Identify-Active Namespace ID List command should reject invalid nsid (git-fixes). - ocfs2: fix null-ptr-deref when journal load failed (git-fixes). - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate (git-fixes). - ocfs2: remove unreasonable unlock in ocfs2_read_blocks (git-fixes). - powerpc sstep: Add support for cnttzw, cnttzd instructions (bsc#1230826 ltc#205848). - powerpc sstep: Add support for extswsli instruction (bsc#1230826 ltc#205848). - powerpc sstep: Add support for modsd, modud instructions (bsc#1230826 ltc#205848). - powerpc sstep: Add support for modsw, moduw instructions (bsc#1230826 ltc#205848). - powerpc/32: Move the inline keyword at the beginning of function declaration (bsc#1230826 ltc#205848). - powerpc/64: Fix update forms of loads and stores to write 64-bit EA (bsc#1230826 ltc#205848). - powerpc/fpu: Drop cvt_fd() and cvt_df() (bsc#1230826 ltc#205848). - powerpc/imc-pmu: Fix use of mutex in IRQs disabled section (bsc#1054914 git-fixes). - powerpc/imc-pmu: Revert nest_init_lock to being a mutex (bsc#1065729). - powerpc/iommu: Annotate nested lock for lockdep (bsc#1065729). - powerpc/kprobes: Blacklist emulate_update_regs() from kprobes (bsc#1230826 ltc#205848). - powerpc/kprobes: Update optprobes to use emulate_update_regs() (bsc#1230826 ltc#205848). - powerpc/lib/sstep: Add XER bits introduced in POWER ISA v3.0 (bsc#1230826 ltc#205848). - powerpc/lib/sstep: Add bpermd instruction emulation (bsc#1230826 ltc#205848). - powerpc/lib/sstep: Add cmpb instruction emulation (bsc#1230826 ltc#205848). - powerpc/lib/sstep: Add isel instruction emulation (bsc#1230826 ltc#205848). - powerpc/lib/sstep: Add popcnt instruction emulation (bsc#1230826 ltc#205848). - powerpc/lib/sstep: Add prty instruction emulation (bsc#1230826 ltc#205848). - powerpc/lib/sstep: Fix 'sthcx' instruction (bsc#1230826 ltc#205848). - powerpc/lib/sstep: Fix count leading zeros instructions (bsc#1230826 ltc#205848). - powerpc/lib/sstep: Fix fixed-point arithmetic instructions that set CA32 (bsc#1230826 ltc#205848). - powerpc/lib/sstep: Fix fixed-point shift instructions that set CA32 (bsc#1230826 ltc#205848). - powerpc/lib/sstep: fix 'ptesync' build error (bsc#1230826 ltc#205848). - powerpc/lib: Fix 'integer constant is too large' build failure (bsc#1230826 ltc#205848). - powerpc/lib: fix redundant inclusion of quad.o (bsc#1230826 ltc#205848). - powerpc/ppc-opcode: Add divde and divdeu opcodes (bsc#1230826 ltc#205848). - powerpc/pseries: fix possible memory leak in ibmebus_bus_init() (bsc#1065729). - powerpc/sstep: Add support for divde[.] and divdeu[.] instructions (bsc#1230826 ltc#205848). - powerpc/sstep: Avoid used uninitialized error (bsc#1230826 ltc#205848). - powerpc/sstep: Check instruction validity against ISA version before emulation (bsc#1230826 ltc#205848). - powerpc/sstep: Fix darn emulation (bsc#1230826 ltc#205848). - powerpc/sstep: Fix incorrect return from analyze_instr() (bsc#1230826 ltc#205848). - powerpc/sstep: Fix issues with mcrf (bsc#1230826 ltc#205848). - powerpc/sstep: Fix issues with set_cr0() (bsc#1230826 ltc#205848). - powerpc/sstep: Fix kernel crash if VSX is not present (bsc#1230826 ltc#205848). - powerpc/sstep: Introduce GETTYPE macro (bsc#1230826 ltc#205848). - powerpc/sstep: mullw should calculate a 64 bit signed result (bsc#1230826 ltc#205848). - powerpc/xmon: Fix disassembly CPU feature checks (bsc#1065729). - powerpc: Add emulation for the addpcis instruction (bsc#1230826 ltc#205848). - powerpc: Change analyse_instr so it does not modify *regs (bsc#1230826 ltc#205848). - powerpc: Do not check MSR FP/VMX/VSX enable bits in analyse_instr() (bsc#1230826 ltc#205848). - powerpc: Do not update CR0 in emulation of popcnt, prty, bpermd instructions (bsc#1230826 ltc#205848). - powerpc: Emulate FP/vector/VSX loads/stores correctly when regs not live (bsc#1230826 ltc#205848). - powerpc: Emulate load/store floating double pair instructions (bsc#1230826 ltc#205848). - powerpc: Emulate load/store floating point as integer word instructions (bsc#1230826 ltc#205848). - powerpc: Emulate the dcbz instruction (bsc#1230826 ltc#205848). - powerpc: Emulate vector element load/store instructions (bsc#1230826 ltc#205848). - powerpc: Fix emulation of the isel instruction (bsc#1230826 ltc#205848). - powerpc: Fix handling of alignment interrupt on dcbz instruction (bsc#1230826 ltc#205848). - powerpc: Fix kernel crash in emulation of vector loads and stores (bsc#1230826 ltc#205848). - powerpc: Handle most loads and stores in instruction emulation code (bsc#1230826 ltc#205848). - powerpc: Handle opposite-endian processes in emulation code (bsc#1230826 ltc#205848). - powerpc: Make load/store emulation use larger memory accesses (bsc#1230826 ltc#205848). - powerpc: Remove support for PowerPC 601 (Remove unused and malformed assembly causing build error). - powerpc: Separate out load/store emulation into its own function (bsc#1230826 ltc#205848). - powerpc: Set regs->dar if memory access fails in emulate_step() (bsc#1230826 ltc#205848). - powerpc: Use instruction emulation infrastructure to handle alignment faults (bsc#1230826 ltc#205848). - powerpc: Wrap register number correctly for string load/store instructions (bsc#1230826 ltc#205848). - powerpc: sstep: Add support for darn instruction (bsc#1230826 ltc#205848). - powerpc: sstep: Add support for maddhd, maddhdu, maddld instructions (bsc#1230826 ltc#205848). - proc/mounts: add cursor (bsc#1207341). - profiling: fix shift too large makes kernel panic (git-fixes). - tracing: Avoid possible softlockup in tracing_iter_reset() (git-fixes). - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind (git-fixes). - usbnet: fix cyclical race on disconnect with work queue (git-fixes). - usbnet: modern method to get random MAC (git-fixes).

Patchnames: SUSE-2024-3559,SUSE-SLE-HA-12-SP5-2024-3559,SUSE-SLE-Live-Patching-12-SP5-2024-3559,SUSE-SLE-SDK-12-SP5-2024-3559,SUSE-SLE-SERVER-12-SP5-2024-3559,SUSE-SLE-WE-12-SP5-2024-3559

CVE-2021-47387

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products

Product	Version	Remediation
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.231.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.231.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.231.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.231.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.231.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.231.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.231.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.231.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.231.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.231.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.231.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.231.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.231.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.231.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.231.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.231.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.231.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.231.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_231-default-1-8.3.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_231-default-1-8.3.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_231-default-1-8.3.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.231.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.231.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.231.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.231.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.231.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.231.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.231.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.231.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.231.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.231.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.231.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.231.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.231.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.231.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.231.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.231.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.231.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.231.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.231.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.231.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.231.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.231.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.231.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.231.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.231.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.231.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.231.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.231.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.231.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.231.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.231.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.231.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.231.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.231.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.231.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.231.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.231.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.231.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.231.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.231.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.231.1.noarch	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.231.1.aarch64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.231.1.ppc64le	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.231.1.s390x	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.231.1.x86_64	—	Vendor Fix
Unresolved product id: SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.231.1.x86_64	—	Vendor Fix

Threats

Impact moderate

CVE-2022-48788

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2022-48789

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2022-48790

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2022-48791

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact important

CVE-2022-48799

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2022-48844

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2022-48911

7 (High)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact important

CVE-2022-48943

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2022-48945

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact important

CVE-2023-52915

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-38381

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-38596

2.5 (Low)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-38632

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-41073

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-41079

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-41082

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-42154

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-42265

5.3 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-42305

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-42306

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-43884

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-43890

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-43898

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-43912

3.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-43914

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-44946

7.8 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact important

CVE-2024-44947

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-44948

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-44950

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-44952

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-44954

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-44969

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-44982

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-44987

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-44998

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-44999

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-45008

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46673

6.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46675

5.8 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46676

4.3 (Medium)


                
                  CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46677

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46679

4.1 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46685

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46686

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46702

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46707

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46715

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46721

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46722

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46723

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46731

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46737

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46738

6.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46739

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46743

4.4 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46744

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46745

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46750

4.7 (Medium)


                
                  CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46753

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46759

2.3 (Low)


                
                  CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46761

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46770

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46774

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46783

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46784

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46787

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46822

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46853

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46854

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

CVE-2024-46859

5.5 (Medium)


                
                  CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected products

Recommended 67 products, the same list as for CVE-2021-47387

Threats

Impact moderate

References

302 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/s…	self
https://www.suse.com/support/update/announcement/…	self
https://lists.suse.com/pipermail/sle-updates/2024…	self
https://bugzilla.suse.com/1054914	self
https://bugzilla.suse.com/1065729	self
https://bugzilla.suse.com/1207341	self
https://bugzilla.suse.com/1225316	self
https://bugzilla.suse.com/1226846	self
https://bugzilla.suse.com/1226860	self
https://bugzilla.suse.com/1226878	self
https://bugzilla.suse.com/1227487	self
https://bugzilla.suse.com/1227941	self
https://bugzilla.suse.com/1227952	self
https://bugzilla.suse.com/1227953	self
https://bugzilla.suse.com/1228000	self
https://bugzilla.suse.com/1228002	self
https://bugzilla.suse.com/1228068	self
https://bugzilla.suse.com/1228507	self
https://bugzilla.suse.com/1228615	self
https://bugzilla.suse.com/1228620	self
https://bugzilla.suse.com/1228635	self
https://bugzilla.suse.com/1229334	self
https://bugzilla.suse.com/1229362	self
https://bugzilla.suse.com/1229363	self
https://bugzilla.suse.com/1229456	self
https://bugzilla.suse.com/1229457	self
https://bugzilla.suse.com/1229633	self
https://bugzilla.suse.com/1229645	self
https://bugzilla.suse.com/1229739	self
https://bugzilla.suse.com/1229753	self
https://bugzilla.suse.com/1229764	self
https://bugzilla.suse.com/1229790	self
https://bugzilla.suse.com/1229830	self
https://bugzilla.suse.com/1230015	self
https://bugzilla.suse.com/1230151	self
https://bugzilla.suse.com/1230171	self
https://bugzilla.suse.com/1230174	self
https://bugzilla.suse.com/1230176	self
https://bugzilla.suse.com/1230178	self
https://bugzilla.suse.com/1230180	self
https://bugzilla.suse.com/1230185	self
https://bugzilla.suse.com/1230200	self
https://bugzilla.suse.com/1230204	self
https://bugzilla.suse.com/1230233	self
https://bugzilla.suse.com/1230248	self
https://bugzilla.suse.com/1230270	self
https://bugzilla.suse.com/1230398	self
https://bugzilla.suse.com/1230506	self
https://bugzilla.suse.com/1230515	self
https://bugzilla.suse.com/1230517	self
https://bugzilla.suse.com/1230533	self
https://bugzilla.suse.com/1230535	self
https://bugzilla.suse.com/1230549	self
https://bugzilla.suse.com/1230556	self
https://bugzilla.suse.com/1230582	self
https://bugzilla.suse.com/1230589	self
https://bugzilla.suse.com/1230700	self
https://bugzilla.suse.com/1230702	self
https://bugzilla.suse.com/1230709	self
https://bugzilla.suse.com/1230710	self
https://bugzilla.suse.com/1230712	self
https://bugzilla.suse.com/1230730	self
https://bugzilla.suse.com/1230731	self
https://bugzilla.suse.com/1230732	self
https://bugzilla.suse.com/1230747	self
https://bugzilla.suse.com/1230748	self
https://bugzilla.suse.com/1230756	self
https://bugzilla.suse.com/1230761	self
https://bugzilla.suse.com/1230763	self
https://bugzilla.suse.com/1230767	self
https://bugzilla.suse.com/1230771	self
https://bugzilla.suse.com/1230783	self
https://bugzilla.suse.com/1230796	self
https://bugzilla.suse.com/1230810	self
https://bugzilla.suse.com/1230814	self
https://bugzilla.suse.com/1230815	self
https://bugzilla.suse.com/1230826	self
https://bugzilla.suse.com/1231083	self
https://bugzilla.suse.com/1231084	self
https://bugzilla.suse.com/1231089	self
https://bugzilla.suse.com/1231120	self
https://bugzilla.suse.com/1231146	self
https://bugzilla.suse.com/1231184	self
https://www.suse.com/security/cve/CVE-2021-47387/	self
https://www.suse.com/security/cve/CVE-2022-48788/	self
https://www.suse.com/security/cve/CVE-2022-48789/	self
https://www.suse.com/security/cve/CVE-2022-48790/	self
https://www.suse.com/security/cve/CVE-2022-48791/	self
https://www.suse.com/security/cve/CVE-2022-48799/	self
https://www.suse.com/security/cve/CVE-2022-48844/	self
https://www.suse.com/security/cve/CVE-2022-48911/	self
https://www.suse.com/security/cve/CVE-2022-48943/	self
https://www.suse.com/security/cve/CVE-2022-48945/	self
https://www.suse.com/security/cve/CVE-2023-52915/	self
https://www.suse.com/security/cve/CVE-2024-38381/	self
https://www.suse.com/security/cve/CVE-2024-38596/	self
https://www.suse.com/security/cve/CVE-2024-38632/	self
https://www.suse.com/security/cve/CVE-2024-41073/	self
https://www.suse.com/security/cve/CVE-2024-41079/	self
https://www.suse.com/security/cve/CVE-2024-41082/	self
https://www.suse.com/security/cve/CVE-2024-42154/	self
https://www.suse.com/security/cve/CVE-2024-42265/	self
https://www.suse.com/security/cve/CVE-2024-42305/	self
https://www.suse.com/security/cve/CVE-2024-42306/	self
https://www.suse.com/security/cve/CVE-2024-43884/	self
https://www.suse.com/security/cve/CVE-2024-43890/	self
https://www.suse.com/security/cve/CVE-2024-43898/	self
https://www.suse.com/security/cve/CVE-2024-43912/	self
https://www.suse.com/security/cve/CVE-2024-43914/	self
https://www.suse.com/security/cve/CVE-2024-44946/	self
https://www.suse.com/security/cve/CVE-2024-44947/	self
https://www.suse.com/security/cve/CVE-2024-44948/	self
https://www.suse.com/security/cve/CVE-2024-44950/	self
https://www.suse.com/security/cve/CVE-2024-44952/	self
https://www.suse.com/security/cve/CVE-2024-44954/	self
https://www.suse.com/security/cve/CVE-2024-44969/	self
https://www.suse.com/security/cve/CVE-2024-44982/	self
https://www.suse.com/security/cve/CVE-2024-44987/	self
https://www.suse.com/security/cve/CVE-2024-44998/	self
https://www.suse.com/security/cve/CVE-2024-44999/	self
https://www.suse.com/security/cve/CVE-2024-45008/	self
https://www.suse.com/security/cve/CVE-2024-46673/	self
https://www.suse.com/security/cve/CVE-2024-46675/	self
https://www.suse.com/security/cve/CVE-2024-46676/	self
https://www.suse.com/security/cve/CVE-2024-46677/	self
https://www.suse.com/security/cve/CVE-2024-46679/	self
https://www.suse.com/security/cve/CVE-2024-46685/	self
https://www.suse.com/security/cve/CVE-2024-46686/	self
https://www.suse.com/security/cve/CVE-2024-46702/	self
https://www.suse.com/security/cve/CVE-2024-46707/	self
https://www.suse.com/security/cve/CVE-2024-46715/	self
https://www.suse.com/security/cve/CVE-2024-46721/	self
https://www.suse.com/security/cve/CVE-2024-46722/	self
https://www.suse.com/security/cve/CVE-2024-46723/	self
https://www.suse.com/security/cve/CVE-2024-46731/	self
https://www.suse.com/security/cve/CVE-2024-46737/	self
https://www.suse.com/security/cve/CVE-2024-46738/	self
https://www.suse.com/security/cve/CVE-2024-46739/	self
https://www.suse.com/security/cve/CVE-2024-46743/	self
https://www.suse.com/security/cve/CVE-2024-46744/	self
https://www.suse.com/security/cve/CVE-2024-46745/	self
https://www.suse.com/security/cve/CVE-2024-46750/	self
https://www.suse.com/security/cve/CVE-2024-46753/	self
https://www.suse.com/security/cve/CVE-2024-46759/	self
https://www.suse.com/security/cve/CVE-2024-46761/	self
https://www.suse.com/security/cve/CVE-2024-46770/	self
https://www.suse.com/security/cve/CVE-2024-46774/	self
https://www.suse.com/security/cve/CVE-2024-46783/	self
https://www.suse.com/security/cve/CVE-2024-46784/	self
https://www.suse.com/security/cve/CVE-2024-46787/	self
https://www.suse.com/security/cve/CVE-2024-46822/	self
https://www.suse.com/security/cve/CVE-2024-46853/	self
https://www.suse.com/security/cve/CVE-2024-46854/	self
https://www.suse.com/security/cve/CVE-2024-46859/	self
https://www.suse.com/security/cve/CVE-2021-47387	external
https://bugzilla.suse.com/1225316	external
https://www.suse.com/security/cve/CVE-2022-48788	external
https://bugzilla.suse.com/1227952	external
https://www.suse.com/security/cve/CVE-2022-48789	external
https://bugzilla.suse.com/1228000	external
https://www.suse.com/security/cve/CVE-2022-48790	external
https://bugzilla.suse.com/1227941	external
https://www.suse.com/security/cve/CVE-2022-48791	external
https://bugzilla.suse.com/1228002	external
https://bugzilla.suse.com/1228012	external
https://www.suse.com/security/cve/CVE-2022-48799	external
https://bugzilla.suse.com/1227953	external
https://www.suse.com/security/cve/CVE-2022-48844	external
https://bugzilla.suse.com/1228068	external
https://www.suse.com/security/cve/CVE-2022-48911	external
https://bugzilla.suse.com/1229633	external
https://bugzilla.suse.com/1229640	external
https://www.suse.com/security/cve/CVE-2022-48943	external
https://bugzilla.suse.com/1229645	external
https://www.suse.com/security/cve/CVE-2022-48945	external
https://bugzilla.suse.com/1230398	external
https://bugzilla.suse.com/1235889	external
https://www.suse.com/security/cve/CVE-2023-52915	external
https://bugzilla.suse.com/1230270	external
https://www.suse.com/security/cve/CVE-2024-38381	external
https://bugzilla.suse.com/1226878	external
https://www.suse.com/security/cve/CVE-2024-38596	external
https://bugzilla.suse.com/1226846	external
https://www.suse.com/security/cve/CVE-2024-38632	external
https://bugzilla.suse.com/1226860	external
https://www.suse.com/security/cve/CVE-2024-41073	external
https://bugzilla.suse.com/1228635	external
https://www.suse.com/security/cve/CVE-2024-41079	external
https://bugzilla.suse.com/1228615	external
https://www.suse.com/security/cve/CVE-2024-41082	external
https://bugzilla.suse.com/1228620	external
https://www.suse.com/security/cve/CVE-2024-42154	external
https://bugzilla.suse.com/1228507	external
https://www.suse.com/security/cve/CVE-2024-42265	external
https://bugzilla.suse.com/1229334	external
https://www.suse.com/security/cve/CVE-2024-42305	external
https://bugzilla.suse.com/1229363	external
https://www.suse.com/security/cve/CVE-2024-42306	external
https://bugzilla.suse.com/1229362	external
https://www.suse.com/security/cve/CVE-2024-43884	external
https://bugzilla.suse.com/1229739	external
https://www.suse.com/security/cve/CVE-2024-43890	external
https://bugzilla.suse.com/1229764	external
https://www.suse.com/security/cve/CVE-2024-43898	external
https://bugzilla.suse.com/1229753	external
https://www.suse.com/security/cve/CVE-2024-43912	external
https://bugzilla.suse.com/1229830	external
https://www.suse.com/security/cve/CVE-2024-43914	external
https://bugzilla.suse.com/1229790	external
https://www.suse.com/security/cve/CVE-2024-44946	external
https://bugzilla.suse.com/1230015	external
https://bugzilla.suse.com/1230016	external
https://www.suse.com/security/cve/CVE-2024-44947	external
https://bugzilla.suse.com/1229456	external
https://bugzilla.suse.com/1230098	external
https://www.suse.com/security/cve/CVE-2024-44948	external
https://bugzilla.suse.com/1230174	external
https://www.suse.com/security/cve/CVE-2024-44950	external
https://bugzilla.suse.com/1230180	external
https://www.suse.com/security/cve/CVE-2024-44952	external
https://bugzilla.suse.com/1230178	external
https://www.suse.com/security/cve/CVE-2024-44954	external
https://bugzilla.suse.com/1230176	external
https://www.suse.com/security/cve/CVE-2024-44969	external
https://bugzilla.suse.com/1230200	external
https://www.suse.com/security/cve/CVE-2024-44982	external
https://bugzilla.suse.com/1230204	external
https://www.suse.com/security/cve/CVE-2024-44987	external
https://bugzilla.suse.com/1230185	external
https://www.suse.com/security/cve/CVE-2024-44998	external
https://bugzilla.suse.com/1230171	external
https://www.suse.com/security/cve/CVE-2024-44999	external
https://bugzilla.suse.com/1230233	external
https://www.suse.com/security/cve/CVE-2024-45008	external
https://bugzilla.suse.com/1230248	external
https://www.suse.com/security/cve/CVE-2024-46673	external
https://bugzilla.suse.com/1230506	external
https://www.suse.com/security/cve/CVE-2024-46675	external
https://bugzilla.suse.com/1230533	external
https://www.suse.com/security/cve/CVE-2024-46676	external
https://bugzilla.suse.com/1230535	external
https://www.suse.com/security/cve/CVE-2024-46677	external
https://bugzilla.suse.com/1230549	external
https://www.suse.com/security/cve/CVE-2024-46679	external
https://bugzilla.suse.com/1230556	external
https://www.suse.com/security/cve/CVE-2024-46685	external
https://bugzilla.suse.com/1230515	external
https://www.suse.com/security/cve/CVE-2024-46686	external
https://bugzilla.suse.com/1230517	external
https://www.suse.com/security/cve/CVE-2024-46702	external
https://bugzilla.suse.com/1230589	external
https://www.suse.com/security/cve/CVE-2024-46707	external
https://bugzilla.suse.com/1230582	external
https://www.suse.com/security/cve/CVE-2024-46715	external
https://bugzilla.suse.com/1230700	external
https://www.suse.com/security/cve/CVE-2024-46721	external
https://bugzilla.suse.com/1230710	external
https://www.suse.com/security/cve/CVE-2024-46722	external
https://bugzilla.suse.com/1230712	external
https://www.suse.com/security/cve/CVE-2024-46723	external
https://bugzilla.suse.com/1230702	external
https://www.suse.com/security/cve/CVE-2024-46731	external
https://bugzilla.suse.com/1230709	external
https://www.suse.com/security/cve/CVE-2024-46737	external
https://bugzilla.suse.com/1230730	external
https://www.suse.com/security/cve/CVE-2024-46738	external
https://bugzilla.suse.com/1230731	external
https://www.suse.com/security/cve/CVE-2024-46739	external
https://bugzilla.suse.com/1230732	external
https://www.suse.com/security/cve/CVE-2024-46743	external
https://bugzilla.suse.com/1230756	external
https://www.suse.com/security/cve/CVE-2024-46744	external
https://bugzilla.suse.com/1230747	external
https://www.suse.com/security/cve/CVE-2024-46745	external
https://bugzilla.suse.com/1230748	external
https://www.suse.com/security/cve/CVE-2024-46750	external
https://bugzilla.suse.com/1230783	external
https://www.suse.com/security/cve/CVE-2024-46753	external
https://bugzilla.suse.com/1230796	external
https://www.suse.com/security/cve/CVE-2024-46759	external
https://bugzilla.suse.com/1230814	external
https://www.suse.com/security/cve/CVE-2024-46761	external
https://bugzilla.suse.com/1230761	external
https://www.suse.com/security/cve/CVE-2024-46770	external
https://bugzilla.suse.com/1230763	external
https://www.suse.com/security/cve/CVE-2024-46774	external
https://bugzilla.suse.com/1230767	external
https://www.suse.com/security/cve/CVE-2024-46783	external
https://bugzilla.suse.com/1230810	external
https://www.suse.com/security/cve/CVE-2024-46784	external
https://bugzilla.suse.com/1230771	external
https://www.suse.com/security/cve/CVE-2024-46787	external
https://bugzilla.suse.com/1230815	external
https://www.suse.com/security/cve/CVE-2024-46822	external
https://bugzilla.suse.com/1231120	external
https://www.suse.com/security/cve/CVE-2024-46853	external
https://bugzilla.suse.com/1231083	external
https://www.suse.com/security/cve/CVE-2024-46854	external
https://bugzilla.suse.com/1231084	external
https://www.suse.com/security/cve/CVE-2024-46859	external
https://bugzilla.suse.com/1231089	external

JSON

To clipboard

Loading 1.7 MB of JSON…

CVE-2024-46859 (GCVE-0-2024-46859)

Vulnerability from cvelistv5 – Published: 2024-09-27 12:42 – Updated: 2026-08-05 11:39

Title

platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses

Summary

In the Linux kernel, the following vulnerability has been resolved: platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses The panasonic laptop code in various places uses the SINF array with index values of 0 - SINF_CUR_BRIGHT(0x0d) without checking that the SINF array is big enough. Not all panasonic laptops have this many SINF array entries, for example the Toughbook CF-18 model only has 10 SINF array entries. So it only supports the AC+DC brightness entries and mute. Check that the SINF array has a minimum size which covers all AC+DC brightness entries and refuse to load if the SINF array is smaller. For higher SINF indexes hide the sysfs attributes when the SINF array does not contain an entry for that attribute, avoiding show()/store() accessing the array out of bounds and add bounds checking to the probe() and resume() code accessing these.

Severity

7.8 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2024-09-29 13:57 UTC

Assigner

Linux mitre root

References

6 references

URL	Tags
https://git.kernel.org/stable/c/b7c2f692307fe704b…
https://git.kernel.org/stable/c/9291fadbd2720a869…
https://git.kernel.org/stable/c/6821a82616f60aa72…
https://git.kernel.org/stable/c/b38c19783286a7169…
https://git.kernel.org/stable/c/f52e98d16e9bd7dd2…
https://lists.debian.org/debian-lts-announce/2025…

Impacted products

2 products

Vendor	Product	Version
Linux	Linux	Affected: e424fb8cc4e6634c10f8159b1ff5618cf7bab9c6 , < b7c2f692307fe704be87ea80d7328782b33c3cef (git) Affected: e424fb8cc4e6634c10f8159b1ff5618cf7bab9c6 , < 9291fadbd2720a869b1d2fcf82305648e2e62a16 (git) Affected: e424fb8cc4e6634c10f8159b1ff5618cf7bab9c6 , < 6821a82616f60aa72c5909b3e252ad97fb9f7e2a (git) Affected: e424fb8cc4e6634c10f8159b1ff5618cf7bab9c6 , < b38c19783286a71693c2194ed1b36665168c09c4 (git) Affected: e424fb8cc4e6634c10f8159b1ff5618cf7bab9c6 , < f52e98d16e9bd7dd2b3aef8e38db5cbc9899d6a4 (git)
Linux	Linux	Affected: 3.3 Unaffected: 0 , < 3.3 (semver) Unaffected: 5.15.168 , ≤ 5.15.* (semver) Unaffected: 6.1.111 , ≤ 6.1.* (semver) Unaffected: 6.6.52 , ≤ 6.6.* (semver) Unaffected: 6.10.11 , ≤ 6.10.* (semver) Unaffected: 6.11 , ≤ * (original_commit_for_fix)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2024-46859",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-09-29T13:57:08.389850Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-09-29T13:57:13.392Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      },
      {
        "providerMetadata": {
          "dateUpdated": "2025-11-03T22:19:46.186Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "url": "https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/platform/x86/panasonic-laptop.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "b7c2f692307fe704be87ea80d7328782b33c3cef",
              "status": "affected",
              "version": "e424fb8cc4e6634c10f8159b1ff5618cf7bab9c6",
              "versionType": "git"
            },
            {
              "lessThan": "9291fadbd2720a869b1d2fcf82305648e2e62a16",
              "status": "affected",
              "version": "e424fb8cc4e6634c10f8159b1ff5618cf7bab9c6",
              "versionType": "git"
            },
            {
              "lessThan": "6821a82616f60aa72c5909b3e252ad97fb9f7e2a",
              "status": "affected",
              "version": "e424fb8cc4e6634c10f8159b1ff5618cf7bab9c6",
              "versionType": "git"
            },
            {
              "lessThan": "b38c19783286a71693c2194ed1b36665168c09c4",
              "status": "affected",
              "version": "e424fb8cc4e6634c10f8159b1ff5618cf7bab9c6",
              "versionType": "git"
            },
            {
              "lessThan": "f52e98d16e9bd7dd2b3aef8e38db5cbc9899d6a4",
              "status": "affected",
              "version": "e424fb8cc4e6634c10f8159b1ff5618cf7bab9c6",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/platform/x86/panasonic-laptop.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.3"
            },
            {
              "lessThan": "3.3",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.168",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.111",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.52",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.10.*",
              "status": "unaffected",
              "version": "6.10.11",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "6.11",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.168",
                  "versionStartIncluding": "3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.111",
                  "versionStartIncluding": "3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.52",
                  "versionStartIncluding": "3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.10.11",
                  "versionStartIncluding": "3.3",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.11",
                  "versionStartIncluding": "3.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nplatform/x86: panasonic-laptop: Fix SINF array out of bounds accesses\n\nThe panasonic laptop code in various places uses the SINF array with index\nvalues of 0 - SINF_CUR_BRIGHT(0x0d) without checking that the SINF array\nis big enough.\n\nNot all panasonic laptops have this many SINF array entries, for example\nthe Toughbook CF-18 model only has 10 SINF array entries. So it only\nsupports the AC+DC brightness entries and mute.\n\nCheck that the SINF array has a minimum size which covers all AC+DC\nbrightness entries and refuse to load if the SINF array is smaller.\n\nFor higher SINF indexes hide the sysfs attributes when the SINF array\ndoes not contain an entry for that attribute, avoiding show()/store()\naccessing the array out of bounds and add bounds checking to the probe()\nand resume() code accessing these."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - The out-of-bounds accesses are reached through sysfs attribute files under /sys/bus/acpi/devices/MAT00xx:00/ on the affected Panasonic laptop, which require local access to the machine (an ordinary read()/write() on a device file). There is no network or remote-peer path into this ACPI platform driver.\nAC:L - On an affected system the attacker simply reads the sysfs attribute and the driver indexes past the end of pcc-\u003esinf every single time \u2014 no race, no timing window, and no memory-layout grooming is needed for the read primitive. The short SINF array is a fixed property of the target\u0027s firmware (the vulnerable configuration being scored), not a per-attempt condition the attacker must win.\nPR:L - The affected attributes are created with DEVICE_ATTR_RW, i.e. mode 0644, so mute_show(), eco_mode_show() and current_brightness_show() are world-readable and any unprivileged local account can trigger the out-of-bounds reads and have the leaked u32 returned to it. No capability, no group membership, and no namespace tricks are required.\nUI:N - Exploitation is a self-contained read (or write) of a sysfs file by the attacker\u0027s own process; no victim has to log in, open a file, mount anything, or take any other action. The probe-time and resume-time out-of-bounds accesses likewise occur without any deliberate user step.\nS:U - The corrupted and disclosed memory is kernel slab memory belonging to the same kernel security authority that hosts the driver. There is no crossing of a hypervisor, IOMMU, or sandbox boundary.\nC:H - current_brightness_show() and mute_show() emit the out-of-bounds u32 directly to userspace via sysfs_emit(), giving an unprivileged local user a repeatable kernel-heap read primitive that can be sampled arbitrarily often to harvest adjacent slab contents (kernel pointers, other objects\u0027 data) for KASLR defeat and further exploitation. When SQTY reports a very small count the read at index 0x0D lands dozens of bytes past a tiny kmalloc-8 allocation, spanning several neighbouring slab objects.\nI:H - eco_mode_store() performs an out-of-bounds heap write (pcc-\u003esinf[SINF_ECO_MODE] = 0/1) whenever the SINF array is shorter than 11 entries, corrupting adjacent slab objects; per kernel scoring guidance an out-of-bounds write is High because attacker-chosen heap grooming can place a security-relevant structure at the overwritten offset and turn it into a control-flow or privilege primitive.\nA:H - The out-of-bounds slab accesses trip KASAN/slub_debug redzone checks, which on hardened or panic_on_warn configurations bring the machine down, and the out-of-bounds write can corrupt neighbouring slab metadata or objects leading to an oops or panic. Per kernel guidance any such crash is scored High."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-05T11:39:04.276Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/b7c2f692307fe704be87ea80d7328782b33c3cef"
        },
        {
          "url": "https://git.kernel.org/stable/c/9291fadbd2720a869b1d2fcf82305648e2e62a16"
        },
        {
          "url": "https://git.kernel.org/stable/c/6821a82616f60aa72c5909b3e252ad97fb9f7e2a"
        },
        {
          "url": "https://git.kernel.org/stable/c/b38c19783286a71693c2194ed1b36665168c09c4"
        },
        {
          "url": "https://git.kernel.org/stable/c/f52e98d16e9bd7dd2b3aef8e38db5cbc9899d6a4"
        }
      ],
      "title": "platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2024-46859",
    "datePublished": "2024-09-27T12:42:49.801Z",
    "dateReserved": "2024-09-11T15:12:18.291Z",
    "dateUpdated": "2026-08-05T11:39:04.276Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

SUSE-SU-2024:3559-1

CVE-2024-46859 (GCVE-0-2024-46859)

Tags

Sightings

Nomenclature