Explore top 10 tips to secure your open-source projects now. Read More
×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 36 articles for you...
100
security advisorysecurity updateimportantSUSE Linux Kernel Important Security Update 2026-22087-1
An update that solves 38 vulnerabilities and has seven fixes can now be installed.. # Security update for the Linux Kernel Announcement ID: SUSE-SU-2026:22087-1 Release Date: 2026-06-05T18:24:53Z Rating: important References: * bsc#1243603 * bsc#1260539 * bsc#1260584 * bsc#1261590 * bsc#1262634 * bsc#1262656 * bsc#1262668 * bsc#1262754 * bsc#1262755 * bsc#1262771 * bsc#1263067 * bsc#1263068 * bsc#1263102 * bsc#1263169 * bsc#1263769 * bsc#1263774 * bsc#1263908 * bsc#1264011 * bsc#1264014 * bsc#1264016 * bsc#1264063 * bsc#1264112 * bsc#1264300 * bsc#1264409 * bsc#1264437 * bsc#1264669 * bsc#1264716 * bsc#1264719 * bsc#1264720 * bsc#1264722 * bsc#1264726 * bsc#1264832 * bsc#1264989 * bsc#1265044 * bsc#1265110 * bsc#1265925 * bsc#1265928 * bsc#1266001 * bsc#1266238 * bsc#1266307 * bsc#1266395 * bsc#1266402 * bsc#1266414 * bsc#1266759 * bsc#1266765 Cross-References: * CVE-2023-20585 * CVE-2026-23359 * CVE-2026-23380 * CVE-2026-23444 * CVE-2026-31464 * CVE-2026-31480 * CVE-2026-31483 * CVE-2026-31493 * CVE-2026-3150 * CVE-2026-31516 * CVE-2026-31521 * CVE-2026-31568 * CVE-2026-31575 * CVE-2026-31613 * CVE-2026-31614 * CVE-2026-31729 * CVE-2026-31736 * CVE-2026-43009 * CVE-2026-43012 * CVE-2026-43013 * CVE-2026-43054 * CVE-2026-43112 * CVE-2026-43234 * CVE-2026-43252 * CVE-2026-43325 * CVE-2026-43328 * CVE-2026-43333 * CVE-2026-43338 * CVE-2026-43341 * CVE-2026-43359 * CVE-2026-43360 * CVE-2026-43361 * CVE-2026-43362 * CVE-2026-43414 * CVE-2026-43499 * CVE-2026-45843 * CVE-2026-46110 * CVE-2026-46243 CVSS scores: * CVE-2023-20585 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2023-20585 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N * CVE-2023-20585 ( NVD ): 5.6 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-23359 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-23359 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-23359 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23380 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23380 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23380 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23444 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-23444 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-23444 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-23444 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31464 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2026-31464 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2026-31464 ( NVD ): 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H * CVE-2026-31480 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31480 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31480 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31483 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31483 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2026-31483 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31493 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-31493 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31493 ( NVD ): 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-3150 ( NVD ): 2.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2026-3150 ( NVD ): 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2026-3150 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31516 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-31516 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31516 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31521 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31521 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31521 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31568 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31568 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31568 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-31575 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31575 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31575 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31613 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31613 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-31613 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H * CVE-2026-31614 ( SUSE ): 6.1 CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-31614 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H * CVE-2026-31614 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2026-31729 ( SUSE ): 7.1 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-31729 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31729 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-31736 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-31736 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-31736 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43009 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43009 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43012 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43012 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43013 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43013 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43054 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43054 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43112 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43112 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43112 ( NVD ): 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H * CVE-2026-43234 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43234 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43252 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43252 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43325 ( SUSE ): 6.0 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43325 ( SUSE ): 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43325 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43328 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43328 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43333 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-43333 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H * CVE-2026-43333 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43338 ( SUSE ): 6.7 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43338 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43338 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43341 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43341 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43359 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-43359 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-43359 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43360 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43360 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43360 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43361 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N * CVE-2026-43361 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H * CVE-2026-43361 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43362 ( SUSE ): 7.1 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N * CVE-2026-43362 ( SUSE ): 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L * CVE-2026-43362 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H * CVE-2026-43414 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-43414 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-43414 ( NVD ): 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43499 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-43499 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-43499 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-45843 ( SUSE ): 7.0 CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2026-45843 ( SUSE ): 6.3 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L * CVE-2026-45843 ( NVD ): 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N * CVE-2026-46110 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2026-46110 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46110 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2026-46243 ( SUSE ): 8.5 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2026-46243 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46243 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2026-46243 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N Affected Products: * SUSE Linux Enterprise Server 16.0 * SUSE Linux Enterprise Server for SAP applications 16.0 An update that solves 38 vulnerabilities and has seven fixes can now be installed. ## Description: The SUSE Linux Enterprise 16.0 kernel was updated to fix various security issues The following security issues were fixed: * CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 (bsc#1243603). * CVE-2026-3150: bcache: fix cached_dev.sb_bio use-after-free and crash (bsc#1263169). * CVE-2026-23359: bpf: Fix stack-out-of-bounds write in devmap (bsc#1260584). * CVE-2026-23380: tracing: Fix WARN_ON in tracing_buffers_mmap_close (bsc#1260539). * CVE-2026-23444: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure (bsc#1266307). * CVE-2026-31464: scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() (bsc#1262656). *CVE-2026-31480: tracing: Fix potential deadlock in cpu hotplug with osnoise (bsc#1262634). * CVE-2026-31483: s390/barrier: Make array_index_mask_nospec() __always_inline (bsc#1261590 bsc#1262771). * CVE-2026-31493: RDMA/efa: Fix use of completion ctx after free (bsc#1262668). * CVE-2026-31516: xfrm: prevent policy_hthresh.work from racing with netns teardown (bsc#1262755). * CVE-2026-31521: module: Fix kernel panic when a symbol st_shndx is out of bounds (bsc#1263102). * CVE-2026-31568: s390/mm: Add missing secure storage access fixups for donated memory (bsc#1263068). * CVE-2026-31575: mm/userfaultfd: fix hugetlb fault mutex hash calculation (bsc#1263067). * CVE-2026-31613: smb: client: fix OOB reads parsing symlink error response (bsc#1263769). * CVE-2026-31614: smb: client: fix off-by-8 bounds check in check_wsl_eas() (bsc#1263774). * CVE-2026-31729: usb: typec: ucsi: validate connector number in ucsi_notify_common() (bsc#1264112). * CVE-2026-31736: net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled (bsc#1263908). * CVE-2026-43012: net/mlx5: Fix switchdev mode rollback in case of failure (bsc#1264016). * CVE-2026-43013: net/mlx5: lag: Check for LAG device before creating debugfs (bsc#1264011). * CVE-2026-43054: scsi: target: tcm_loop: Drain commands in target_reset handler (bsc#1264063). * CVE-2026-43112: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (bsc#1264437). * CVE-2026-43234: team: avoid NETDEV_CHANGEMTU event when unregistering slave (bsc#1264409). * CVE-2026-43252: mptcp: pm: in-kernel: always set ID as avail when rm endp (bsc#1264300). * CVE-2026-43325: wifi: iwlwifi: mvm: don't send a 6E related command when not supported (bsc#1265110). * CVE-2026-43328: cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path (bsc#1264832). * CVE-2026-43333: bpf: reject direct access to nullable PTR_TO_BUF pointers (bsc#1264726). * CVE-2026-43338:btrfs: reserve enough transaction items for qgroup ioctls (bsc#1264716). * CVE-2026-43341: net/ipv6: ioam6: prevent schema length wraparound in trace fill (bsc#1265044). * CVE-2026-43359: btrfs: fix transaction abort on set received ioctl due to item overflow (bsc#1264719). * CVE-2026-43360: btrfs: fix transaction abort on file creation due to name hash collision (bsc#1264720). * CVE-2026-43361: btrfs: fix transaction abort when snapshotting received subvolumes (bsc#1264722). * CVE-2026-43362: smb: client: fix in-place encryption corruption in SMB2_write() (bsc#1264989). * CVE-2026-43414: scsi: qla2xxx: Completely fix fcport double free (bsc#1264669). * CVE-2026-43499: rtmutex: Use waiter::task instead of current in remove_waiter() (bsc#1266001). * CVE-2026-45843: slip: bound decode() reads against the compressed packet length (bsc#1266395). * CVE-2026-46110: net: stmmac: rename STMMAC_GET_ENTRY() -> STMMAC_NEXT_ENTRY() (bsc#1266759). The following non security issues were fixed: * ACPI: x86: cmos_rtc: Clean up address space handler driver (stable-fixes). * ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver (git-fixes). * ALSA: asihpi: Fix potential OOB array access at reading cache (stable- fixes). * ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87 (stable-fixes). * ALSA: pcm: Don't setup bogus iov_iter for silencing (git-fixes). * ALSA: pcm: oss: Fix setup list UAF on proc write error (git-fixes). * ALSA: scarlett2: Fix 2i2 Gen 4 direct monitor gain on firmware 2417 (git- fixes). * ALSA: seq: avoid past-the-end iterator in snd_seq_create_port() (git-fixes). * ALSA: seq: Serialize UMP output teardown with event_input (git-fixes). * ALSA: timer: avoid past-the-end iterator in snd_timer_dev_register() (git- fixes). * ALSA: ua101: Reject too-short USB descriptors (git-fixes). * arm64: tlb: Flush walk cache when unsharing PMD tables (git-fixes). * ASoC: codecs: simple-mux: Fixenum control bounds check (git-fixes). * ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove() (git-fixes). * ASoC: Intel: bytcht_es8316: Fix MCLK leak on init errors (git-fixes). * ASoC: qcom: q6asm-dai: close stream only when running (git-fixes). * ASoC: qcom: q6asm-dai: do not set stream state in event and trigger callbacks (git-fixes). * ASoC: qcom: q6asm-dai: fix error handling in prepare and set_params (git- fixes). * ASoC: SOF: ipc3: Use standard dev_dbg API (stable-fixes). * auxdisplay: line-display: fix OOB read on zero-length message_store() (git- fixes). * bcache: fix uninitialized closure object (git-fixes). * Bluetooth: 6lowpan: check skb_clone() return value in send_mcast_pkt() (git- fixes). * Bluetooth: bnep: Fix UAF read of dev-> name (git-fixes). * Bluetooth: btmtk: accept too short WMT FUNC_CTRL events (git-fixes). * Bluetooth: btmtk: fix urb-> setup_packet leak in error paths (git-fixes). * Bluetooth: btusb: Allow firmware re-download when version matches (git- fixes). * Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() (git- fixes). * Bluetooth: hci_sync: fix UAF in hci_le_create_cis_sync (git-fixes). * Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close (git- fixes). * Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths (git-fixes). * Bluetooth: HIDP: fix missing length checks in hidp_input_report() (git- fixes). * Bluetooth: ISO: drop ISO_END frames received without prior ISO_START (git- fixes). * Bluetooth: ISO: fix UAF in iso_recv_frame (git-fixes). * Bluetooth: ISO: serialize iso_sock_clear_timer with socket lock (git-fixes). * Bluetooth: l2cap: clear chan-> ident on ECRED reconfiguration success (git- fixes). * Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer (git-fixes). * Bluetooth: L2CAP: fix chan ref leak in l2cap_chan_timeout() on !conn (git- fixes). * Bluetooth: L2CAP: Fix possible crash onl2cap_ecred_conn_rsp (git-fixes). * Bluetooth: L2CAP: use chan timer to close channels in cleanup_listen() (git- fixes). * Bluetooth: MGMT: validate Add Extended Advertising Data length (git-fixes). * Bluetooth: serialize accept_q access (git-fixes). * btrfs: do not mark inode incompressible after inline attempt fails (git- fixes). * comedi: comedi_test: fix check for valid scan_begin_src in waveform_ai_cmdtest() (git-fixes). * comedi: comedi_test: Fix limiting of convert_arg in waveform_ai_cmdtest() (git-fixes). * device property: set fwnode-> secondary to NULL in fwnode_init() (git-fixes). * dm: fix a buffer overflow in ioctl processing (git-fixes). * drm/amd/display: Fix integer overflow in bios_get_image() (stable-fixes). * drm/amd/display: Validate GPIO pin LUT table size before iterating (stable- fixes). * drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (stable-fixes). * drm/amd/pm/si: Disregard vblank time when no displays are connected (git- fixes). * drm/amdgpu/uvd3.1: Don't validate the firmware when already validated (git- fixes). * drm/amdgpu/uvd4.2: Don't initialize UVD 4.2 when DPM is disabled (git- fixes). * drm/amdgpu/vce2: Fix VCE 2 firmware size and offsets (git-fixes). * drm/amdgpu/vce3: Fix VCE 3 firmware size and offsets (git-fixes). * drm/amdgpu/vpe: Force collaborate sync after TRAP (stable-fixes). * drm/amdgpu: add amdgpu_device reference in ip block (stable-fixes). * drm/amdgpu: fix spelling typos (stable-fixes). * drm/amdgpu: update the handle ptr in dump_ip_state (stable-fixes). * drm/amdgpu: update the handle ptr in early_init (stable-fixes). * drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe (git- fixes). * drm/bridge: it66121: acquire reset GPIO in probe (git-fixes). * drm/bridge: megachips: remove bridge when irq request fails (git-fixes). * drm/hyperv: validate resolution_count and fix WIN8 fallback (git-fixes). * drm/hyperv:validate VMBus packet size in receive callback (git-fixes). * drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP (git-fixes). * drm/i915: Fix potential UAF in TTM object purge (git-fixes). * drm/msm/dsi: don't dump registers past the mapped region (git-fixes). * drm/msm/snapshot: fix dumping of the unaligned regions (git-fixes). * drm/radeon/evergreen_cs: Add missing NULL prefix check in surface check (git-fixes). * drm/virtio: use uninterruptible resv lock for plane updates (git-fixes). * drm/xe/gsc: Fix double-free of managed BO in error path (git-fixes). * drm/xe/oa: Fix exec_queue leak on width check in stream open (git-fixes). * drm/xe/pf: Fix CFI failure in debugfs access (git-fixes). * drm/xe/vf: Fix signature of print functions (git-fixes). * drm/xe: Define CACHE_MODE_1 as MCR register (git-fixes). * efi: Allocate runtime workqueue before ACPI init (git-fixes). * firmware: arm_ffa: Align RxTx buffer size before mapping (git-fixes). * firmware: arm_ffa: Check for NULL FF-A ID table while driver registration (git-fixes). * firmware: arm_ffa: Fix per-vcpu self notifications handling in workqueue (git-fixes). * firmware: arm_ffa: Skip free_pages on RX buffer alloc failure (git-fixes). * gve: Add RSS cache for non RSS device option scenario (bsc#1265925). * gve: add XDP DROP and PASS support for DQ (bsc#1265925). * gve: Enable reading max ring size from the device in DQO-QPL mode (bsc#1265925). * gve: introduce config-based allocation for XDP (bsc#1265925). * gve: merge packet buffer size fields (bsc#1265925). * gve: remove xdp_xsk_done and xdp_xsk_wakeup statistics (bsc#1265925). * gve: update GQ RX to use buf_size (bsc#1265925). * gve: Update QPL page registration logic (bsc#1265925). * gve: update XDP allocation path support RX buffer posting (bsc#1265925). * HID: playstation: Clamp num_touch_reports (git-fixes). * HID: quirks: really enable the intended work around for appledisplay (git- fixes). * HID: uclogic: Fixregression of input name assignment (git-fixes). * hwmon: (lenovo-ec-sensors): Convert to devm_request_region() (git-fixes). * hwmon: (lenovo-ec-sensors): Fix EC "MCHP" signature validation logic (git- fixes). * hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer (git-fixes). * hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR (git-fixes). * hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple (git-fixes). * hwmon: (pmbus/adm1266) include adapter number in GPIO line label (git- fixes). * hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer (git-fixes). * hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe() (git- fixes). * hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe() (git-fixes). * hwmon: (pmbus/adm1266) reject implausible blackbox record_count (git-fixes). * hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors (git-fixes). * hwmon: (pmbus/adm1266) seed timestamp from the real-time clock (git-fixes). * hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX (git-fixes). * iio: adc: mt6359: fix unchecked return value in mt6358_read_imp (git-fixes). * iio: adc: npcm: fix unbalanced clk_disable_unprepare() (git-fixes). * iio: adc: viperboard: Fix error handling in vprbrd_iio_read_raw (git-fixes). * iio: adc: xilinx-xadc: Fix sequencer mode in postdisable for dual mux (git- fixes). * iio: buffer: Fix DMA fence leak in iio_buffer_enqueue_dmabuf() (git-fixes). * iio: buffer: hw-consumer: fix use-after-free in error path (git-fixes). * iio: dac: ad5686: acquire lock when doing powerdown control (git-fixes). * iio: dac: ad5686: fix input raw value check (git-fixes). * iio: dac: max5821: fix return value check in powerdown sync (git-fixes). * iio: gyro: adis16260: fix division by zero in write_raw (git-fixes). * iio: gyro: itg3200: fix i2c read into thewrong stack location (git-fixes). * iio: imu: st_lsm6dsx: fix stack leak in tagged FIFO buffer (git-fixes). * iio: light: cm3323: fix reg_conf not being initialized correctly (git- fixes). * iio: magnetometer: st_magn: fix default DRDY pin selection for LIS2MDL (git- fixes). * iio: ssp_sensors: cancel delayed work_refresh on remove (git-fixes). * iio: temperature: tsys01: fix broken PROM checksum validation (git-fixes). * Input: atmel_mxt_ts - fix boundary check in mxt_prepare_cfg_mem (git-fixes). * Input: ims-pcu - fix usb_free_coherent() size in ims_pcu_buffers_free() (git-fixes). * Input: usbtouchscreen - clamp NEXIO data_len/x_len to URB buffer size (git- fixes). * Input: xpad - fix out-of-bounds access for Share button (git-fixes). * KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE (git-fixes). * KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation (git-fixes). * KVM: SVM: Inject #UD for INVLPGA if EFER.SVME=0 (git-fixes). * KVM: x86: Fix Xen hypercall tracepoint argument assignment (git-fixes). * KVM: x86: Return the VM's configured APIC bus frequency when queried (git- fixes). * media: i2c: og01a1b: Fix V4L2 subdevice data initialization on probe (git- fixes). * media: i2c: og01a1b: Replace client-> dev usage (stable-fixes). * net: mana: Add NULL guards in teardown path to prevent panic on attach failure (git-fixes). * net: mana: Expose hardware diagnostic info via debugfs (bsc#1266414). * net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (bsc#1265928). * net: mana: hardening: Reject zero max_num_queues from GDMA_QUERY_MAX_RESOURCES (git-fixes). * net: mana: hardening: Reject zero max_num_queues from MANA_QUERY_VPORT_CONFIG (git-fixes). * net: mana: Skip redundant detach on already-detached port (git-fixes). * net: mana: Use kvmalloc for large RX queue and buffer allocations (bsc#1266765). * net: mana: Use per-queue allocation for tx_qp to reduce allocation size (bsc#1266765). * net: mana: validate rx_req_idx to prevent out-of-bounds array access (bsc#1266402). * parport: Fix race between port and client registration (git-fixes). * platform/surface: aggregator_registry: omit battery & AC nodes on Surface Laptop 7 (git-fixes). * platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL (git-fixes). * platform/x86: hp_accel: Check ACPI_COMPANION() against NULL (git-fixes). * platform/x86: intel-hid: Check ACPI_HANDLE() against NULL (git-fixes). * platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL (git-fixes). * RDMA/efa: Check stored completion CTX command ID with received one (git- fixes). * RDMA/efa: Extend admin timeout error print (git-fixes). * RDMA/efa: Fix possible deadlock (git-fixes). * RDMA/efa: Improve admin completion context state machine (git-fixes). * RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port (git-fixes). * Revert "ACPI: CPPC: Adjust debug messages in amd_set_max_freq_ratio() to warn" (git-fixes). * s390/pfault: Fix virtual vs physical address confusion (bsc#1262754). * scsi: devinfo: Add BLIST_SKIP_IO_HINTS for Iomega ZIP (git-fixes). * scsi: mpi3mr: Clear reset history on ready and recheck state after timeout (git-fixes). * scsi: ses: Handle positive SCSI error from ses_recv_diag() (git-fixes). * scsi: ufs: core: Fix shift out of bounds when MAXQ=32 (git-fixes). * security/keys: fix missed RCU read section on lookup (stable-fixes). * serial: fsl_lpuart: fix rx buffer and DMA map leaks in start_rx_dma (git- fixes). * serial: qcom-geni: fix UART_RX_PAR_EN bit position (git-fixes). * serial: qcom_geni: fix kfifo underflow when flush precedes DMA completion IRQ (git-fixes). * smb: client: reject userspace cifs.spnego descriptions (bsc#1266238). * spi: ep93xx: fix error pointer deref after DMA setup failure (git-fixes). * spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache() (git-fixes). * spi: qup: fix error pointer deref after DMA setup failure(git-fixes). * spi: sprd: fix error pointer deref after DMA setup failure (git-fixes). * spi: ti-qspi: fix use-after-free after DMA setup failure (git-fixes). * thunderbolt: property: Reject dir_len < 4 to prevent size_t underflow (git- fixes). * thunderbolt: property: Reject u32 wrap in tb_property_entry_valid() (git- fixes). * tracing: Switch trace_osnoise.c code over to use guard() and __free() (bsc#1262634). * tty: serial: pch_uart: add check for dma_alloc_coherent() (git-fixes). * tty: serial: samsung: Remove redundant port lock acquisition in rx helpers (git-fixes). * USB: cdc-acm: Fix bit overlap and move quirk definitions to header (git- fixes). * usb: cdns3: gadget: fix request skipping after clearing halt (git-fixes). * usb: cdns3: plat: fix leaked usb2_phy initialization on usb3_phy acquisition failure (git-fixes). * usb: chipidea: core: convert ci_role_switch to local variable (git-fixes). * usb: dwc2: Fix use after free in debug code (git-fixes). * usb: gadget: composite: fix integer underflow in WebUSB GET_URL handling (git-fixes). * usb: gadget: dummy_hcd: Reject hub port requests for non-existent ports (git-fixes). * usb: gadget: f_fs: copy only received bytes on short ep0 read (git-fixes). * usb: gadget: f_fs: serialize DMABUF cancel against request completion (git- fixes). * usb: gadget: f_hid: fix device reference leak in hidg_alloc() (git-fixes). * usb: gadget: net2280: Fix double free in probe error path (git-fixes). * usb: gadget: uvc: hold opts-> lock across XU walks in uvc_function_bind (git- fixes). * USB: serial: belkin_sa: validate interrupt status length (git-fixes). * USB: serial: cypress_m8: validate interrupt packet headers (git-fixes). * USB: serial: keyspan: fix missing indat transfer sanity check (git-fixes). * USB: serial: mct_u232: fix missing interrupt-in transfer sanity check (git- fixes). * USB: serial: mxuport: fix memory corruption with small endpoint (git-fixes). * USB: serial:omninet: fix memory corruption with small endpoint (git-fixes). * USB: serial: option: add missing RSVD(5) flag for Rolling RW135R-GL (git- fixes). * USB: serial: safe_serial: fix memory corruption with small endpoint (git- fixes). * usb: typec: tcpm: improve handling of DISCOVER_MODES failures (git-fixes). * usb: typec: ucsi: Don't update power_supply on power role change if not connected (git-fixes). * usb: usbtmc: check URB actual_length for interrupt-IN notifications (git- fixes). * usb: usbtmc: reject interrupt endpoints with small wMaxPacketSize (git- fixes). * usbip: vudc: Fix use after free bug in vudc_remove due to race condition (git-fixes). * virt: sev-guest: Explicitly leak pages in unknown state (git-fixes). * wifi: ath10k: skip WMI and beacon transmission when device is wedged (git- fixes). * wifi: ath11k: clear shared SRNG pointer state on restart (git-fixes). * wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm() (git-fixes). * wifi: ath11k: fix error path leaks in some WMI calls (git-fixes). * wifi: ath11k: fix error path leaks in some WMI WOW calls (git-fixes). * wifi: ath11k: fix peer resolution on rx path when peer_id=0 (git-fixes). * wifi: ath11k: fix use after free in ath11k_dp_rx_msdu_coalesce() (git- fixes). * wifi: cfg80211: advance loop vars in cfg80211_merge_profile() (git-fixes). * wifi: mac80211: consume only present negotiated TTLM maps (git-fixes). * wifi: mac80211: fix MLE defragmentation (git-fixes). * wifi: mac80211: fix multi-link element inheritance (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 16.0 zypper in -t patch SUSE-SLES-16.0-897=1 * SUSE Linux Enterprise Server for SAP applications16.0 zypper in -t patch SUSE-SLES-16.0-897=1 ## Package List: * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le x86_64) * kernel-kvmsmall-debuginfo-6.12.0-160000.34.1 * kernel-kvmsmall-devel-6.12.0-160000.34.1 * kernel-default-base-6.12.0-160000.34.1.160000.2.15 * kernel-kvmsmall-debugsource-6.12.0-160000.34.1 * SUSE Linux Enterprise Server 16.0 (noarch) * kernel-source-vanilla-6.12.0-160000.34.1 * kernel-docs-html-6.12.0-160000.34.1 * kernel-source-6.12.0-160000.34.1 * kernel-macros-6.12.0-160000.34.1 * kernel-devel-6.12.0-160000.34.1 * SUSE Linux Enterprise Server 16.0 (aarch64 nosrc) * kernel-64kb-6.12.0-160000.34.1 * SUSE Linux Enterprise Server 16.0 (aarch64) * kernel-64kb-debugsource-6.12.0-160000.34.1 * kernel-64kb-devel-6.12.0-160000.34.1 * kernel-64kb-extra-6.12.0-160000.34.1 * kernel-64kb-extra-debuginfo-6.12.0-160000.34.1 * kernel-64kb-debuginfo-6.12.0-160000.34.1 * SUSE Linux Enterprise Server 16.0 (aarch64 nosrc x86_64) * kernel-azure-6.12.0-160000.34.1 * SUSE Linux Enterprise Server 16.0 (aarch64 x86_64) * kernel-azure-debuginfo-6.12.0-160000.34.1 * kernel-azure-extra-debuginfo-6.12.0-160000.34.1 * kernel-azure-debugsource-6.12.0-160000.34.1 * kernel-azure-devel-6.12.0-160000.34.1 * kernel-azure-extra-6.12.0-160000.34.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64 nosrc) * kernel-default-6.12.0-160000.34.1 * SUSE Linux Enterprise Server 16.0 (aarch64 ppc64le s390x x86_64) * kernel-default-debuginfo-6.12.0-160000.34.1 * kernel-syms-6.12.0-160000.34.1 * kernel-default-extra-debuginfo-6.12.0-160000.34.1 * kernel-default-debugsource-6.12.0-160000.34.1 * kernel-obs-qa-6.12.0-160000.34.1 * kernel-default-extra-6.12.0-160000.34.1 * kernel-default-devel-6.12.0-160000.34.1 * SUSE Linux Enterprise Server 16.0 (noarch nosrc) * kernel-docs-6.12.0-160000.34.1 * SUSE Linux Enterprise Server 16.0 (aarch64 nosrc ppc64le x86_64) *kernel-kvmsmall-6.12.0-160000.34.1 * SUSE Linux Enterprise Server 16.0 (x86_64) * kernel-kvmsmall-vdso-6.12.0-160000.34.1 * kernel-default-vdso-6.12.0-160000.34.1 * kernel-kvmsmall-vdso-debuginfo-6.12.0-160000.34.1 * kernel-azure-vdso-debuginfo-6.12.0-160000.34.1 * kernel-azure-devel-debuginfo-6.12.0-160000.34.1 * kernel-azure-vdso-6.12.0-160000.34.1 * kernel-default-vdso-debuginfo-6.12.0-160000.34.1 * kernel-kvmsmall-devel-debuginfo-6.12.0-160000.34.1 * kernel-default-devel-debuginfo-6.12.0-160000.34.1 * SUSE Linux Enterprise Server 16.0 (ppc64le s390x x86_64) * kernel-default-livepatch-6.12.0-160000.34.1 * SUSE Linux Enterprise Server 16.0 (nosrc s390x) * kernel-zfcpdump-6.12.0-160000.34.1 * SUSE Linux Enterprise Server 16.0 (s390x) * kernel-zfcpdump-debuginfo-6.12.0-160000.34.1 * kernel-zfcpdump-debugsource-6.12.0-160000.34.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (ppc64le x86_64) * cluster-md-kmp-default-debuginfo-6.12.0-160000.34.1 * cluster-md-kmp-default-6.12.0-160000.34.1 * kernel-default-debuginfo-6.12.0-160000.34.1 * kernel-kvmsmall-debuginfo-6.12.0-160000.34.1 * kernel-kvmsmall-devel-6.12.0-160000.34.1 * dlm-kmp-default-6.12.0-160000.34.1 * gfs2-kmp-default-debuginfo-6.12.0-160000.34.1 * kernel-default-extra-6.12.0-160000.34.1 * kernel-kvmsmall-debugsource-6.12.0-160000.34.1 * kernel-syms-6.12.0-160000.34.1 * dlm-kmp-default-debuginfo-6.12.0-160000.34.1 * kernel-default-extra-debuginfo-6.12.0-160000.34.1 * kernel-default-debugsource-6.12.0-160000.34.1 * kernel-default-livepatch-6.12.0-160000.34.1 * kernel-obs-qa-6.12.0-160000.34.1 * gfs2-kmp-default-6.12.0-160000.34.1 * kernel-default-base-6.12.0-160000.34.1.160000.2.15 * kernel-default-devel-6.12.0-160000.34.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch) * kernel-source-vanilla-6.12.0-160000.34.1 * kernel-docs-html-6.12.0-160000.34.1 *kernel-source-6.12.0-160000.34.1 * kernel-macros-6.12.0-160000.34.1 * kernel-devel-6.12.0-160000.34.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (nosrc x86_64) * kernel-azure-6.12.0-160000.34.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (x86_64) * kernel-azure-debuginfo-6.12.0-160000.34.1 * kernel-kvmsmall-vdso-6.12.0-160000.34.1 * kernel-azure-extra-debuginfo-6.12.0-160000.34.1 * kernel-default-vdso-6.12.0-160000.34.1 * kernel-kvmsmall-vdso-debuginfo-6.12.0-160000.34.1 * kernel-azure-debugsource-6.12.0-160000.34.1 * kernel-azure-vdso-debuginfo-6.12.0-160000.34.1 * kernel-azure-devel-6.12.0-160000.34.1 * kernel-azure-devel-debuginfo-6.12.0-160000.34.1 * kernel-azure-vdso-6.12.0-160000.34.1 * kernel-default-vdso-debuginfo-6.12.0-160000.34.1 * kernel-kvmsmall-devel-debuginfo-6.12.0-160000.34.1 * kernel-default-devel-debuginfo-6.12.0-160000.34.1 * kernel-azure-extra-6.12.0-160000.34.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (nosrc ppc64le x86_64) * kernel-default-6.12.0-160000.34.1 * kernel-kvmsmall-6.12.0-160000.34.1 * SUSE Linux Enterprise Server for SAP applications 16.0 (noarch nosrc) * kernel-docs-6.12.0-160000.34.1 ## References: * https://www.suse.com/security/cve/CVE-2023-20585.html * https://www.suse.com/security/cve/CVE-2026-23359.html * https://www.suse.com/security/cve/CVE-2026-23380.html * https://www.suse.com/security/cve/CVE-2026-23444.html * https://www.suse.com/security/cve/CVE-2026-31464.html * https://www.suse.com/security/cve/CVE-2026-31480.html * https://www.suse.com/security/cve/CVE-2026-31483.html * https://www.suse.com/security/cve/CVE-2026-31493.html * https://www.suse.com/security/cve/CVE-2026-3150.html * https://www.suse.com/security/cve/CVE-2026-31516.html * https://www.suse.com/security/cve/CVE-2026-31521.html * https://www.suse.com/security/cve/CVE-2026-31568.html * https://www.suse.com/security/cve/CVE-2026-31575.html *https://www.suse.com/security/cve/CVE-2026-31613.html * https://www.suse.com/security/cve/CVE-2026-31614.html * https://www.suse.com/security/cve/CVE-2026-31729.html * https://www.suse.com/security/cve/CVE-2026-31736.html * https://www.suse.com/security/cve/CVE-2026-43009.html * https://www.suse.com/security/cve/CVE-2026-43012.html * https://www.suse.com/security/cve/CVE-2026-43013.html * https://www.suse.com/security/cve/CVE-2026-43054.html * https://www.suse.com/security/cve/CVE-2026-43112.html * https://www.suse.com/security/cve/CVE-2026-43234.html * https://www.suse.com/security/cve/CVE-2026-43252.html * https://www.suse.com/security/cve/CVE-2026-43325.html * https://www.suse.com/security/cve/CVE-2026-43328.html * https://www.suse.com/security/cve/CVE-2026-43333.html * https://www.suse.com/security/cve/CVE-2026-43338.html * https://www.suse.com/security/cve/CVE-2026-43341.html * https://www.suse.com/security/cve/CVE-2026-43359.html * https://www.suse.com/security/cve/CVE-2026-43360.html * https://www.suse.com/security/cve/CVE-2026-43361.html * https://www.suse.com/security/cve/CVE-2026-43362.html * https://www.suse.com/security/cve/CVE-2026-43414.html * https://www.suse.com/security/cve/CVE-2026-43499.html * https://www.suse.com/security/cve/CVE-2026-45843.html * https://www.suse.com/security/cve/CVE-2026-46110.html * https://www.suse.com/security/cve/CVE-2026-46243.html * https://bugzilla.suse.com/show_bug.cgi?id=1243603 * https://bugzilla.suse.com/show_bug.cgi?id=1260539 * https://bugzilla.suse.com/show_bug.cgi?id=1260584 * https://bugzilla.suse.com/show_bug.cgi?id=1261590 * https://bugzilla.suse.com/show_bug.cgi?id=1262634 * https://bugzilla.suse.com/show_bug.cgi?id=1262656 * https://bugzilla.suse.com/show_bug.cgi?id=1262668 * https://bugzilla.suse.com/show_bug.cgi?id=1262754 * https://bugzilla.suse.com/show_bug.cgi?id=1262755 * https://bugzilla.suse.com/show_bug.cgi?id=1262771 * https://bugzilla.suse.com/show_bug.cgi?id=1263067 *https://bugzilla.suse.com/show_bug.cgi?id=1263068 * https://bugzilla.suse.com/show_bug.cgi?id=1263102 * https://bugzilla.suse.com/show_bug.cgi?id=1263169 * https://bugzilla.suse.com/show_bug.cgi?id=1263769 * https://bugzilla.suse.com/show_bug.cgi?id=1263774 * https://bugzilla.suse.com/show_bug.cgi?id=1263908 * https://bugzilla.suse.com/show_bug.cgi?id=1264011 * https://bugzilla.suse.com/show_bug.cgi?id=1264014 * https://bugzilla.suse.com/show_bug.cgi?id=1264016 * https://bugzilla.suse.com/show_bug.cgi?id=1264063 * https://bugzilla.suse.com/show_bug.cgi?id=1264112 * https://bugzilla.suse.com/show_bug.cgi?id=1264300 * https://bugzilla.suse.com/show_bug.cgi?id=1264409 * https://bugzilla.suse.com/show_bug.cgi?id=1264437 * https://bugzilla.suse.com/show_bug.cgi?id=1264669 * https://bugzilla.suse.com/show_bug.cgi?id=1264716 * https://bugzilla.suse.com/show_bug.cgi?id=1264719 * https://bugzilla.suse.com/show_bug.cgi?id=1264720 * https://bugzilla.suse.com/show_bug.cgi?id=1264722 * https://bugzilla.suse.com/show_bug.cgi?id=1264726 * https://bugzilla.suse.com/show_bug.cgi?id=1264832 * https://bugzilla.suse.com/show_bug.cgi?id=1264989 * https://bugzilla.suse.com/show_bug.cgi?id=1265044 * https://bugzilla.suse.com/show_bug.cgi?id=1265110 * https://bugzilla.suse.com/show_bug.cgi?id=1265925 * https://bugzilla.suse.com/show_bug.cgi?id=1265928 * https://bugzilla.suse.com/show_bug.cgi?id=1266001 * https://bugzilla.suse.com/show_bug.cgi?id=1266238 * https://bugzilla.suse.com/show_bug.cgi?id=1266307 * https://bugzilla.suse.com/show_bug.cgi?id=1266395 * https://bugzilla.suse.com/show_bug.cgi?id=1266402 * https://bugzilla.suse.com/show_bug.cgi?id=1266414 * https://bugzilla.suse.com/show_bug.cgi?id=1266759 * https://bugzilla.suse.com/show_bug.cgi?id=1266765 . Install security patch for SUSE Linux kernel addressing 38 critical issues. Seven vital fixes enhance system safety.. SUSE kernel update, important security patch, Linux vulnerabilities, kernel security fixes.. Severity: Important. LinuxSecurity.com Team
Jun 15, 2026
•Important
SuSE
100
security advisorycritical issuesecurity updateSUSE 15 SP5: 2024:4124-1 Important: Kernel RT Live Patch Critical Fixes
* bsc#1221302 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521 . # Security update for the Linux Kernel RT (Live Patch 13 for SLE 15 SP5) Announcement ID: SUSE-SU-2024:4124-1 Release Date: 2024-12-02T09:15:06Z Rating: important References: * bsc#1221302 * bsc#1223059 * bsc#1223363 * bsc#1223514 * bsc#1223521 * bsc#1223683 * bsc#1225011 * bsc#1225012 * bsc#1225013 * bsc#1225099 * bsc#1225309 * bsc#1225310 * bsc#1225311 * bsc#1225312 * bsc#1225429 * bsc#1225733 * bsc#1225739 * bsc#1225819 * bsc#1226325 * bsc#1226327 * bsc#1227471 * bsc#1228573 * bsc#1228786 * bsc#1229273 * bsc#1229553 Cross-References: * CVE-2021-47517 * CVE-2021-47598 * CVE-2022-48651 * CVE-2022-48662 * CVE-2023-52752 * CVE-2023-52846 * CVE-2024-26610 * CVE-2024-26828 * CVE-2024-26852 * CVE-2024-26923 * CVE-2024-27398 * CVE-2024-35861 * CVE-2024-35862 * CVE-2024-35863 * CVE-2024-35864 * CVE-2024-35867 * CVE-2024-35905 * CVE-2024-35949 * CVE-2024-35950 * CVE-2024-36899 * CVE-2024-36904 * CVE-2024-36964 * CVE-2024-40954 * CVE-2024-41059 * CVE-2024-43861 CVSS scores: * CVE-2021-47517 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H * CVE-2021-47598 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2021-47598 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48651 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48662 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52752 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-52846 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26610 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H * CVE-2024-26828 ( SUSE ): 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H *CVE-2024-26828 ( NVD ): 6.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H * CVE-2024-26852 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26852 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-26923 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-27398 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35861 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35862 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35863 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35864 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35867 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35905 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35949 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-35950 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36899 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36904 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-36964 ( SUSE ): 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40954 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41059 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-41059 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2024-43861 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2024-43861 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux EnterpriseReal Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves 25 vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_13_47 fixes several issues. The following security issues were fixed: * CVE-2021-47517: Fix panic when interrupt coaleceing is set via ethtool (bsc#1225429). * CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225733). * CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229553). * CVE-2024-35905: Fixed int overflow for stack access size (bsc#1226327). * CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1227471). * CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1229273). * CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1225011). * CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225819). * CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1225311). * CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1225012). * CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1225309). * CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1225312). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1231353). * CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225739). * CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) * CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228573). * CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1226325). * CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225099). * CVE-2022-48662: Fixed a general protection fault (GPF) in i915_perf_open_ioctl (bsc#1223521). * CVE-2022-48662: Update for 'really move i915_gem_context.link under ref protection' (bsc#1223521) * CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1225013). * CVE-2024-35950: drm/client: Fully protect modes with dev-> mode_config.mutex (bsc#1225310). * CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223683). * CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223363). * CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223059). * CVE-2024-26610: Fixed memory corruption in wifi/iwlwifi (bsc#1221302). * CVE-2022-48651: Fixed an out-of-bound bug in ipvlan caused by unset skb-> mac_header (bsc#1223514). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch SUSE-2024-4124=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-4124=1 ## Package List: * openSUSE Leap 15.5 (x86_64) * kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo-9-150500.11.6.1 * kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource-9-150500.11.6.1 * kernel-livepatch-5_14_21-150500_13_47-rt-9-150500.11.6.1 * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-5_14_21-150500_13_47-rt-debuginfo-9-150500.11.6.1 * kernel-livepatch-SLE15-SP5-RT_Update_13-debugsource-9-150500.11.6.1 * kernel-livepatch-5_14_21-150500_13_47-rt-9-150500.11.6.1 ## References: * https://www.suse.com/security/cve/CVE-2021-47517.html * https://www.suse.com/security/cve/CVE-2021-47598.html * https://www.suse.com/security/cve/CVE-2022-48651.html * https://www.suse.com/security/cve/CVE-2022-48662.html * https://www.suse.com/security/cve/CVE-2023-52752.html *https://www.suse.com/security/cve/CVE-2023-52846.html * https://www.suse.com/security/cve/CVE-2024-26610.html * https://www.suse.com/security/cve/CVE-2024-26828.html * https://www.suse.com/security/cve/CVE-2024-26852.html * https://www.suse.com/security/cve/CVE-2024-26923.html * https://www.suse.com/security/cve/CVE-2024-27398.html * https://www.suse.com/security/cve/CVE-2024-35861.html * https://www.suse.com/security/cve/CVE-2024-35862.html * https://www.suse.com/security/cve/CVE-2024-35863.html * https://www.suse.com/security/cve/CVE-2024-35864.html * https://www.suse.com/security/cve/CVE-2024-35867.html * https://www.suse.com/security/cve/CVE-2024-35905.html * https://www.suse.com/security/cve/CVE-2024-35949.html * https://www.suse.com/security/cve/CVE-2024-35950.html * https://www.suse.com/security/cve/CVE-2024-36899.html * https://www.suse.com/security/cve/CVE-2024-36904.html * https://www.suse.com/security/cve/CVE-2024-36964.html * https://www.suse.com/security/cve/CVE-2024-40954.html * https://www.suse.com/security/cve/CVE-2024-41059.html * https://www.suse.com/security/cve/CVE-2024-43861.html * https://bugzilla.suse.com/show_bug.cgi?id=1221302 * https://bugzilla.suse.com/show_bug.cgi?id=1223059 * https://bugzilla.suse.com/show_bug.cgi?id=1223363 * https://bugzilla.suse.com/show_bug.cgi?id=1223514 * https://bugzilla.suse.com/show_bug.cgi?id=1223521 * https://bugzilla.suse.com/show_bug.cgi?id=1223683 * https://bugzilla.suse.com/show_bug.cgi?id=1225011 * https://bugzilla.suse.com/show_bug.cgi?id=1225012 * https://bugzilla.suse.com/show_bug.cgi?id=1225013 * https://bugzilla.suse.com/show_bug.cgi?id=1225099 * https://bugzilla.suse.com/show_bug.cgi?id=1225309 * https://bugzilla.suse.com/show_bug.cgi?id=1225310 * https://bugzilla.suse.com/show_bug.cgi?id=1225311 * https://bugzilla.suse.com/show_bug.cgi?id=1225312 * https://bugzilla.suse.com/show_bug.cgi?id=1225429 * https://bugzilla.suse.com/show_bug.cgi?id=1225733 *https://bugzilla.suse.com/show_bug.cgi?id=1225739 * https://bugzilla.suse.com/show_bug.cgi?id=1225819 * https://bugzilla.suse.com/show_bug.cgi?id=1226325 * https://bugzilla.suse.com/show_bug.cgi?id=1226327 * https://bugzilla.suse.com/show_bug.cgi?id=1227471 * https://bugzilla.suse.com/show_bug.cgi?id=1228573 * https://bugzilla.suse.com/show_bug.cgi?id=1228786 * https://bugzilla.suse.com/show_bug.cgi?id=1229273 * https://bugzilla.suse.com/show_bug.cgi?id=1229553 . An important update for the Kernel RT addresses 25 security issues in SUSE, offering crucial fixes for users.. Kernel Live Patch, SUSE Security, Linux Kernel Update, Security Fixes, Kernel Issues. . Severity: Important. LinuxSecurity.com Team
Dec 02, 2024
•Important
SuSE
100
security advisorysecurity updatecritical patchSUSE: 2024:3592-1 important: Linux Kernel multiple security fixes
* bsc#1199769 * bsc#1216223 * bsc#1220382 * bsc#1221610 * bsc#1221650 . # Security update for the Linux Kernel Announcement ID: SUSE-SU-2024:3592-1 Release Date: 2024-10-10T16:03:56Z Rating: important References: * bsc#1199769 * bsc#1216223 * bsc#1220382 * bsc#1221610 * bsc#1221650 * bsc#1222629 * bsc#1222973 * bsc#1223600 * bsc#1223848 * bsc#1224085 * bsc#1225903 * bsc#1226003 * bsc#1226606 * bsc#1226662 * bsc#1226666 * bsc#1226846 * bsc#1226860 * bsc#1226875 * bsc#1226915 * bsc#1227487 * bsc#1227726 * bsc#1227819 * bsc#1227832 * bsc#1227890 * bsc#1228507 * bsc#1228576 * bsc#1228620 * bsc#1228771 * bsc#1229031 * bsc#1229034 * bsc#1229086 * bsc#1229156 * bsc#1229289 * bsc#1229334 * bsc#1229362 * bsc#1229363 * bsc#1229364 * bsc#1229394 * bsc#1229429 * bsc#1229453 * bsc#1229572 * bsc#1229573 * bsc#1229585 * bsc#1229607 * bsc#1229619 * bsc#1229633 * bsc#1229662 * bsc#1229753 * bsc#1229764 * bsc#1229790 * bsc#1229810 * bsc#1229830 * bsc#1229899 * bsc#1229928 * bsc#1229947 * bsc#1230015 * bsc#1230129 * bsc#1230130 * bsc#1230170 * bsc#1230171 * bsc#1230174 * bsc#1230175 * bsc#1230176 * bsc#1230178 * bsc#1230180 * bsc#1230185 * bsc#1230192 * bsc#1230193 * bsc#1230194 * bsc#1230200 * bsc#1230204 * bsc#1230209 * bsc#1230211 * bsc#1230212 * bsc#1230217 * bsc#1230224 * bsc#1230230 * bsc#1230233 * bsc#1230244 * bsc#1230245 * bsc#1230247 * bsc#1230248 * bsc#1230269 * bsc#1230339 * bsc#1230340 * bsc#1230392 * bsc#1230398 * bsc#1230431 * bsc#1230433 * bsc#1230434 * bsc#1230440 * bsc#1230442 * bsc#1230444 * bsc#1230450 * bsc#1230451 * bsc#1230454 * bsc#1230506 * bsc#1230507 * bsc#1230511 * bsc#1230515 * bsc#1230517 * bsc#1230524 * bsc#1230533 * bsc#1230535 * bsc#1230549 * bsc#1230556 * bsc#1230582 * bsc#1230589 * bsc#1230591 * bsc#1230592 * bsc#1230699 * bsc#1230700 * bsc#1230701 *bsc#1230702 * bsc#1230703 * bsc#1230705 * bsc#1230706 * bsc#1230707 * bsc#1230709 * bsc#1230710 * bsc#1230711 * bsc#1230712 * bsc#1230719 * bsc#1230724 * bsc#1230725 * bsc#1230730 * bsc#1230731 * bsc#1230732 * bsc#1230733 * bsc#1230747 * bsc#1230748 * bsc#1230751 * bsc#1230752 * bsc#1230756 * bsc#1230761 * bsc#1230766 * bsc#1230767 * bsc#1230768 * bsc#1230771 * bsc#1230772 * bsc#1230776 * bsc#1230783 * bsc#1230786 * bsc#1230791 * bsc#1230794 * bsc#1230796 * bsc#1230802 * bsc#1230806 * bsc#1230808 * bsc#1230810 * bsc#1230812 * bsc#1230813 * bsc#1230814 * bsc#1230815 * bsc#1230821 * bsc#1230825 * bsc#1230830 * bsc#1231013 * bsc#1231017 * bsc#1231116 * bsc#1231120 * bsc#1231146 * bsc#1231180 * bsc#1231181 Cross-References: * CVE-2022-48901 * CVE-2022-48911 * CVE-2022-48923 * CVE-2022-48935 * CVE-2022-48944 * CVE-2022-48945 * CVE-2023-52610 * CVE-2023-52916 * CVE-2024-26640 * CVE-2024-26759 * CVE-2024-26767 * CVE-2024-26804 * CVE-2024-26837 * CVE-2024-37353 * CVE-2024-38538 * CVE-2024-38596 * CVE-2024-38632 * CVE-2024-40910 * CVE-2024-40973 * CVE-2024-40983 * CVE-2024-41062 * CVE-2024-41082 * CVE-2024-42154 * CVE-2024-42259 * CVE-2024-42265 * CVE-2024-42304 * CVE-2024-42305 * CVE-2024-42306 * CVE-2024-43828 * CVE-2024-43835 * CVE-2024-43890 * CVE-2024-43898 * CVE-2024-43912 * CVE-2024-43914 * CVE-2024-44935 * CVE-2024-44944 * CVE-2024-44946 * CVE-2024-44948 * CVE-2024-44950 * CVE-2024-44952 * CVE-2024-44954 * CVE-2024-44967 * CVE-2024-44969 * CVE-2024-44970 * CVE-2024-44971 * CVE-2024-44972 * CVE-2024-44977 * CVE-2024-44982 * CVE-2024-44986 * CVE-2024-44987 * CVE-2024-44988 * CVE-2024-44989 * CVE-2024-44990 * CVE-2024-44998 * CVE-2024-44999 * CVE-2024-45000 * CVE-2024-45001 * CVE-2024-45003 * CVE-2024-45006 * CVE-2024-45007 * CVE-2024-45008 * CVE-2024-45011 * CVE-2024-45013 *CVE-2024-45015 * CVE-2024-45018 * CVE-2024-45020 * CVE-2024-45021 * CVE-2024-45026 * CVE-2024-45028 * CVE-2024-45029 * CVE-2024-46673 * CVE-2024-46674 * CVE-2024-46675 * CVE-2024-46676 * CVE-2024-46677 * CVE-2024-46679 * CVE-2024-46685 * CVE-2024-46686 * CVE-2024-46689 * CVE-2024-46694 * CVE-2024-46702 * CVE-2024-46707 * CVE-2024-46714 * CVE-2024-46715 * CVE-2024-46717 * CVE-2024-46720 * CVE-2024-46721 * CVE-2024-46722 * CVE-2024-46723 * CVE-2024-46724 * CVE-2024-46725 * CVE-2024-46726 * CVE-2024-46727 * CVE-2024-46728 * CVE-2024-46730 * CVE-2024-46731 * CVE-2024-46732 * CVE-2024-46737 * CVE-2024-46738 * CVE-2024-46739 * CVE-2024-46743 * CVE-2024-46744 * CVE-2024-46745 * CVE-2024-46746 * CVE-2024-46747 * CVE-2024-46750 * CVE-2024-46751 * CVE-2024-46752 * CVE-2024-46753 * CVE-2024-46755 * CVE-2024-46756 * CVE-2024-46758 * CVE-2024-46759 * CVE-2024-46761 * CVE-2024-46771 * CVE-2024-46772 * CVE-2024-46773 * CVE-2024-46774 * CVE-2024-46778 * CVE-2024-46780 * CVE-2024-46781 * CVE-2024-46783 * CVE-2024-46784 * CVE-2024-46786 * CVE-2024-46787 * CVE-2024-46791 * CVE-2024-46794 * CVE-2024-46798 * CVE-2024-46822 * CVE-2024-46830 CVSS scores: * CVE-2022-48901 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2022-48901 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2022-48911 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48911 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2022-48923 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2022-48923 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2022-48923 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2022-48935 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2022-48935 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2022-48944 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2022-48944 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2022-48944 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2023-52610 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2023-52916 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26640 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26759 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26767 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2024-26767 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26804 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-26837 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2024-37353 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:L * CVE-2024-38538 ( SUSE ): 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2024-38538 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2024-38596 ( SUSE ): 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N * CVE-2024-38632 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-38632 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-40910 ( SUSE ): 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H * CVE-2024-40910 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-40973 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-40973 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-40973 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-40983 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-41062 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N * CVE-2024-41062 ( SUSE ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H *CVE-2024-41082 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-42154 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-42154 ( NVD ): 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N * CVE-2024-42259 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-42259 ( SUSE ): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H * CVE-2024-42259 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-42265 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L * CVE-2024-42304 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-42305 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-42306 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-43828 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-43828 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-43835 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-43890 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-43890 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-43890 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-43898 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-43898 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-43912 ( SUSE ): 4.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N * CVE-2024-43912 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L * CVE-2024-43912 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-43914 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-43914 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-43914 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44935 ( SUSE ): 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44935 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44944 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-44944 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44944 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44946 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-44946 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44948 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44950 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44950 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44952 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44952 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44954 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44954 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44967 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-44967 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-44969 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44969 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44970 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44970 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44971 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44971 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44972 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44972 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44977 ( SUSE ): 6.9 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-44977 ( SUSE ): 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44977 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-44982 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44982 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44986 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44986 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-44987 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-44987 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-44988 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44988 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44989 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44989 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44990 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44990 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44998 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44998 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-44999 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-44999 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2024-45000 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45000 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45001 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45001 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45003 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45003 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45006 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45006 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45007 ( SUSE ): 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45008 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45011 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45011 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45013 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45013 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45015 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45015 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45018 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-45018 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45020 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45020 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45021 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45021 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45026 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45026 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-45028 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45028 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45029 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-45029 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46673 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46673 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46674 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46674 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46675 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:L/VI:L/VA:H/SC:L/SI:L/SA:L * CVE-2024-46675 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H *CVE-2024-46675 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46676 ( SUSE ): 2.4 CVSS:4.0/AV:P/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L * CVE-2024-46676 ( SUSE ): 4.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L * CVE-2024-46676 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46677 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2024-46677 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46677 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46679 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L * CVE-2024-46679 ( SUSE ): 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46679 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46685 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46685 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46686 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46686 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46689 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46689 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46694 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46694 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46702 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L * CVE-2024-46702 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46702 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46707 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-46707 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46707 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46714 ( SUSE ): 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46714 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46715 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46717 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46720 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46720 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46721 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46721 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46722 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46722 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2024-46723 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46723 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2024-46724 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2024-46724 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-46724 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2024-46725 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46725 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46726 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46726 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46727 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46727 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46728 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46728 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46730 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46730 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46731 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H *CVE-2024-46731 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2024-46732 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46732 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46737 ( SUSE ): 7.0 CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2024-46737 ( SUSE ): 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46737 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46738 ( SUSE ): 8.7 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2024-46738 ( SUSE ): 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46738 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46739 ( SUSE ): 8.2 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2024-46739 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46739 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46743 ( SUSE ): 5.6 CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2024-46743 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N * CVE-2024-46743 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2024-46744 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2024-46744 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-46744 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46745 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46746 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2024-46746 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-46746 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46747 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2024-46747 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2024-46747 ( NVD ): 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2024-46750 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-46750 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46750 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46751 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-46751 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46751 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46752 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-46752 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46753 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-46753 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46755 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-46755 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46755 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46756 ( SUSE ): 1.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-46756 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N * CVE-2024-46756 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46758 ( SUSE ): 1.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-46758 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N * CVE-2024-46758 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46759 ( SUSE ): 1.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N * CVE-2024-46759 ( SUSE ): 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N * CVE-2024-46759 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46761 ( SUSE ): 5.9 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-46761 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46761 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46771 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46772 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46772 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46773 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-46773 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46773 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46774 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46778 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46780 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-46780 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46781 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46781 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46783 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-46783 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46784 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46784 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46786 ( SUSE ): 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-46786 ( SUSE ): 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H * CVE-2024-46786 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46787 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-46787 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46791 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-46791 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46791 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46794 ( SUSE ): 2.0 CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2024-46794 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N * CVE-2024-46798 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N * CVE-2024-46798 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46798 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2024-46822 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46822 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H * CVE-2024-46830 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.5 * openSUSE Leap Micro 5.5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 * SUSE Real Time Module 15-SP5 An update that solves 130 vulnerabilities and has 34 security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: * CVE-2022-48901: btrfs: do not start relocation until in progress drops are done (bsc#1229607). * CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633). * CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (bsc#1229662) * CVE-2022-48935: Fixed an unregister flowtable hooks on netns exit (bsc#1229619) * CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610). * CVE-2023-52916: media: aspeed:Fix memory overwrite if timing is 1600x900 (bsc#1230269). * CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650). * CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340). * CVE-2024-26767: drm/amd/display: fixed integer types and null check locations (bsc#1230339). * CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629). * CVE-2024-26837: net: bridge: switchdev: race between creation of new group memberships and generation of the list of MDB events to replay (bsc#1222973). * CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875). * CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606). * CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846). * CVE-2024-40910: Fix refcount imbalance on inbound connections (bsc#1227832). * CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890). * CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819). * CVE-2024-41062: Sync sock recv cb and release (bsc#1228576). * CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082). * CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507). * CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156) * CVE-2024-42265: protect the fetch of -> fd[fd] in do_dup2() from mispredictions (bsc#1229334). * CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364). * CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363). * CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362). * CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394). * CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764). * CVE-2024-43898: ext4:sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753). * CVE-2024-43912: wifi: nl80211: disallow setting special AP channel widths (bsc#1229830) * CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790). * CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810). * CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899). * CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015). * CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180). * CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (bsc#1230178). * CVE-2024-44954: ALSA: line6: Fix racy access to midibuf (bsc#1230176). * CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209). * CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211). * CVE-2024-44986: ipv6: fix possible UAF in ip6_finish_output2() (bsc#1230230) * CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185). * CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192). * CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193). * CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194). * CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171). * CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233). * CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245). * CVE-2024-45007: char: xillybus: Refine workqueue handling (bsc#1230175). * CVE-2024-45008: Input: MT - limit max slots (bsc#1230248). * CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442). * CVE-2024-45015: drm/msm/dpu: move dpu_encoder's connector assignment to (bsc#1230444) * CVE-2024-45018: netfilter: flowtable: initialise extack before use (bsc#1230431). * CVE-2024-45021: memcg_write_event_control(): fix a user-triggerable oops (bsc#1230434). * CVE-2024-45029: i2c: tegra: Do not mark ACPI devices as irq safe (bsc#1230451). * CVE-2024-46673: scsi: aacraid: Fix double-free on probe failure (bsc#1230506). * CVE-2024-46674: usb: dwc3: st: fix probed platform device ref count on probe error path (bsc#1230507). * CVE-2024-46677: gtp: fix a potential NULL pointer dereference (bsc#1230549). * CVE-2024-46679: ethtool: check device is present when getting link settings (bsc#1230556). * CVE-2024-46685: pinctrl: single: fix potential NULL dereference in pcs_get_function() (bsc#1230515) * CVE-2024-46686: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() (bsc#1230517). * CVE-2024-46689: soc: qcom: cmd-db: Map shared memory as WC, not WB (bsc#1230524) * CVE-2024-46702: thunderbolt: Mark XDomain as unplugged when router is removed (bsc#1230589) * CVE-2024-46707: KVM: arm64: Make ICC_ _SGI_ _EL1 undef in the absence of a vGICv3 (bsc#1230582). * CVE-2024-46715: driver: iio: add missing checks on iio_info's callback access (bsc#1230700). * CVE-2024-46717: net/mlx5e: SHAMPO, Fix incorrect page release (bsc#1230719). * CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710) * CVE-2024-46728: drm/amd/display: Check index for aux_rd_interval before using (bsc#1230703) * CVE-2024-46730: drm/amd/display: Ensure array index tg_inst won't be -1 (bsc#1230701) * CVE-2024-46743: of/irq: Prevent device address out-of-bounds read in interrupt map walk (bsc#1230756). * CVE-2024-46750: PCI: Add missing bridge lock to pci_bus_lock() (bsc#1230783). * CVE-2024-46751: btrfs: do not BUG_ON() when 0 reference count at btrfs_lookup_extent_info() (bsc#1230786). * CVE-2024-46752: btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info()(bsc#1230794). * CVE-2024-46753: btrfs: handle errors from btrfs_dec_ref() properly (bsc#1230796). * CVE-2024-46772: drm/amd/display: Check denominator crb_pipes before used (bsc#1230772). * CVE-2024-46783: tcp_bpf: fix return value of tcp_bpf_sendmsg() (bsc#1230810). * CVE-2024-46787: userfaultfd: fix checks for huge PMDs (bsc#1230815). * CVE-2024-46794: x86/tdx: Fix data leak in mmio_read() (bsc#1230825). * CVE-2024-46822: arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (bsc#1231120). * CVE-2024-46830: KVM: x86: Acquire kvm-> srcu when handling KVM_SET_VCPU_EVENTS (bsc#1231116). The following non-security bugs were fixed: * ACPI: battery: create alarm sysfs attribute atomically (git-fixes). * ACPI: CPPC: Fix MASK_VAL() usage (git-fixes). * ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe() (git- fixes). * ACPI: processor: Fix memory leaks in error paths of processor_add() (stable- fixes). * ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add() (stable-fixes). * ACPI: SBS: manage alarm sysfs attribute through psy core (git-fixes). * ACPI: sysfs: validate return type of _STR method (git-fixes). * af_unix: annotate lockless accesses to sk-> sk_err (bsc#1226846). * af_unix: Fix data races around sk-> sk_shutdown (bsc#1226846). * af_unix: Fix data-races around sk-> sk_shutdown (git-fixes). * ALSA: hda: Add input value sanity checks to HDMI channel map controls (stable-fixes). * ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices (stable-fixes). * ALSA: hda/conexant: Mute speakers at suspend / shutdown (stable-fixes). * ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown (stable-fixes). * ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx (stable-fixes). * apparmor: fix possible NULL pointer dereference (stable-fixes). * arm64: acpi: Move get_cpu_for_acpi_id() to a header (git-fixes). * arm64: dts:rockchip: Correct the Pinebook Pro battery design capacity (git- fixes). * arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E (git- fixes). * arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency (git-fixes). * arm64/mm: Modify range-based tlbi to decrement scale (bsc#1229585) * arm64/mm: Update tlb invalidation routines for FEAT_LPA2 (bsc#1229585) * arm64: tlb: Allow range operation for MAX_TLBI_RANGE_PAGES (bsc#1229585) * arm64: tlb: Fix TLBI RANGE operand (bsc#1229585) * arm64: tlb: Improve __TLBI_VADDR_RANGE() (bsc#1229585) * ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object (git-fixes). * ASoC: meson: axg-card: fix 'use-after-free' (git-fixes). * ASoc: SOF: topology: Clear SOF link platform name upon unload (git-fixes). * ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode (git-fixes). * ASoC: tegra: Fix CBB error during probe() (git-fixes). * ASoC: topology: Properly initialize soc_enum values (stable-fixes). * ata: libata: Fix memory leak for error path in ata_host_alloc() (git-fixes). * ata: pata_macio: Use WARN instead of BUG (stable-fixes). * blk-mq: add helper for checking if one CPU is mapped to specified hctx (bsc#1223600). * blk-mq: add number of queue calc helper (bsc#1229034). * blk-mq: Build default queue map via group_cpus_evenly() (bsc#1229031). * blk-mq: do not schedule block kworker on isolated CPUs (bsc#1223600). * blk-mq: introduce blk_mq_dev_map_queues (bsc#1229034). * blk-mq: issue warning when offlining hctx with online isolcpus (bsc#1229034). * blk-mq: use hk cpus only when isolcpus=io_queue is enabled (bsc#1229034). * Bluetooth: btusb: Fix not handling ZPL/short-transfer (git-fixes). * Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED (git-fixes). * Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL (git- fixes). * Bluetooth: L2CAP: Fix deadlock (git-fixes). * Bluetooth: MGMT: Ignore keys being loaded with invalid type (git-fixes). *cachefiles: fix dentry leak in cachefiles_open_file() (bsc#1231181). * cachefiles: Fix non-taking of sb_writers around set/removexattr (bsc#1231013). * can: bcm: Clear bo-> bcm_proc_read after remove_proc_entry() (git-fixes). * can: bcm: Remove proc entry when dev is unregistered (git-fixes). * can: j1939: use correct function name in comment (git-fixes). * can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open (git- fixes). * cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller (git-fixes). * ceph: remove the incorrect Fw reference check when dirtying pages (bsc#1231180). * char: xillybus: Check USB endpoints when probing device (git-fixes). * clk: qcom: clk-alpha-pll: Fix the pll post div mask (git-fixes). * clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API (git- fixes). * clk: qcom: clk-alpha-pll: Fix zonda set_rate failure when PLL is disabled (git-fixes). * cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately (git-fixes). * crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure (git-fixes). * crypto: virtio - Handle dataq logic with tasklet (git-fixes). * crypto: virtio - Wait for tasklet to complete on device remove (git-fixes). * crypto: xor - fix template benchmarking (git-fixes). * devres: Initialize an uninitialized struct member (stable-fixes). * driver core: Add debug logs when fwnode links are added/deleted (git-fixes). * driver core: Add missing parameter description to __fwnode_link_add() (git- fixes). * driver core: Create __fwnode_link_del() helper function (git-fixes). * driver core: fw_devlink: Allow marking a fwnode link as being part of a cycle (git-fixes). * driver core: fw_devlink: Consolidate device link flag computation (git- fixes). * driver core: Set deferred probe reason when deferred by driver core (git- fixes). * drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind() (git-fixes). * Drivers: hv: vmbus:Fix rescind handling in uio_hv_generic (git-fixes). * Drivers: hv: vmbus: Fix the misplaced function description (git-fixes). * drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error (git-fixes). * drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error (git-fixes). * drm/amd/amdgpu: Check tbo resource pointer (stable-fixes). * drm/amd/amdgpu: Properly tune the size of struct (git-fixes). * drm/amd/display: Add array index check for hdcp ddc access (stable-fixes). * drm/amd/display: added NULL check at start of dc_validate_stream (stable- fixes). * drm/amd/display: Assign linear_pitch_alignment even for VM (stable-fixes). * drm/amd/display: Check denominator pbn_div before used (stable-fixes). * drm/amd/display: Check gpio_id before used as array index (stable-fixes). * drm/amd/display: Check HDCP returned status (stable-fixes). * drm/amd/display: Check msg_id before processing transcation (stable-fixes). * drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] (stable-fixes). * drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX (stable-fixes). * drm/amd/display: Ensure index calculation will not overflow (stable-fixes). * drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create (stable-fixes). * drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration (stable-fixes). * drm/amd/display: Skip wbscl_set_scaler_filter if filter is null (stable- fixes). * drm/amd/display: Spinlock before reading event (stable-fixes). * drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 (stable-fixes). * drm/amdgpu/atomfirmware: Silence UBSAN warning (stable-fixes). * drm/amdgpu: avoid reading vf2pf info size from FB (stable-fixes). * drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6 (stable-fixes). * drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts (stable-fixes). *drm/amdgpu: fix a possible null pointer dereference (git-fixes). * drm/amdgpu: fix dereference after null check (stable-fixes). * drm/amdgpu: fix mc_data out-of-bounds read warning (stable-fixes). * drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number (stable-fixes). * drm/amdgpu: Fix out-of-bounds write warning (stable-fixes). * drm/amdgpu: fix overflowed array index read warning (stable-fixes). * drm/amdgpu: Fix smatch static checker warning (stable-fixes). * drm/amdgpu: fix the waring dereferencing hive (stable-fixes). * drm/amdgpu: fix ucode out-of-bounds read warning (stable-fixes). * drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr (stable- fixes). * drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs (stable-fixes). * drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc (stable- fixes). * drm/amdgpu/pm: Fix uninitialized variable agc_btc_response (stable-fixes). * drm/amdgpu/pm: Fix uninitialized variable warning for smu10 (stable-fixes). * drm/amdgpu: Set no_hw_access when VF request full GPU fails (stable-fixes). * drm/amdgpu: the warning dereferencing obj for nbio_v7_4 (stable-fixes). * drm/amdgpu: update type of buf size to u32 for eeprom functions (stable- fixes). * drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device (stable-fixes). * drm/amd/pm: check negtive return for table entries (stable-fixes). * drm/amd/pm: check specific index for aldebaran (stable-fixes). * drm/amd/pm: Fix negative array index read (stable-fixes). * drm/amd/pm: fix the Out-of-bounds read warning (stable-fixes). * drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr (stable- fixes). * drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt (stable- fixes). * drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr (stable- fixes). * drm/amd/pm: fix uninitialized variable warning (stable-fixes). * drm/amd/pm: fix warning usinguninitialized value of max_vid_step (stable- fixes). * drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid() (git-fixes). * drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ (stable-fixes). * drm/i915/fence: Mark debug_fence_free() with __maybe_unused (git-fixes). * drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused (git- fixes). * drm/i915/guc: prevent a possible int overflow in wq offsets (git-fixes). * drm/meson: plane: Add error handling (stable-fixes). * drm/msm/a5xx: disable preemption in submits by default (git-fixes). * drm/msm/a5xx: fix races in preemption evaluation stage (git-fixes). * drm/msm/a5xx: properly clear preemption records on resume (git-fixes). * drm/msm/a5xx: workaround early ring-buffer emptiness check (git-fixes). * drm/msm/adreno: Fix error return if missing firmware-name (stable-fixes). * drm/msm/disp/dpu: use atomic enable/disable callbacks for encoder (bsc#1230444) * drm/msm: Fix incorrect file name output in adreno_request_fw() (git-fixes). * drm/msm: fix %s null argument error (git-fixes). * drm: omapdrm: Add missing check for alloc_ordered_workqueue (git-fixes). * drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets (git- fixes). * drm/radeon: fix null pointer dereference in radeon_add_common_modes (git- fixes). * drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode (git- fixes). * drm/rockchip: vop: Allow 4096px width scaling (git-fixes). * drm/stm: ltdc: check memory returned by devm_kzalloc() (git-fixes). * exfat: fix memory leak in exfat_load_bitmap() (git-fixes). * fbdev: hpfb: Fix an error handling path in hpfb_dio_probe() (git-fixes). * filemap: remove use of wait bookmarks (bsc#1224085). * firmware_loader: Block path traversal (git-fixes). * fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF (bsc#1230592). * fuse: update stats for pages in dropped aux writebacklist (bsc#1230130). * fuse: use unsigned type for getxattr/listxattr size truncation (bsc#1230129). * genirq/affinity: Do not pass irq_affinity_desc array to irq_build_affinity_masks (bsc#1229031). * genirq/affinity: Move group_cpus_evenly() into lib/ (bsc#1229031). * genirq/affinity: Only build SMP-only helper functions on SMP kernels (bsc#1229031). * genirq/affinity: Pass affinity managed mask array to irq_build_affinity_masks (bsc#1229031). * genirq/affinity: Remove the 'firstvec' parameter from irq_build_affinity_masks (bsc#1229031). * genirq/affinity: Rename irq_build_affinity_masks as group_cpus_evenly (bsc#1229031). * genirq/affinity: Replace cpumask_weight() with cpumask_empty() where appropriate (bsc#1229031). * gfs2: setattr_chown: Add missing initialization (git-fixes). * HID: amd_sfh: free driver_data after destroying hid device (stable-fixes). * HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup (stable- fixes). * hwmon: (adc128d818) Fix underflows seen when writing limit attributes (stable-fixes). * hwmon: (lm95234) Fix underflows seen when writing limit attributes (stable- fixes). * hwmon: (max16065) Fix overflows seen when writing limits (git-fixes). * hwmon: (ntc_thermistor) fix module autoloading (git-fixes). * hwmon: (w83627ehf) Fix underflows seen when writing limit attributes (stable-fixes). * hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init (git- fixes). * hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume (git- fixes). * hwrng: mtk - Use devm_pm_runtime_enable (git-fixes). * i2c: aspeed: Update the stop sw state when the bus recovery occurs (git- fixes). * i2c: Fix conditional for substituting empty ACPI functions (stable-fixes). * i2c: isch: Add missed 'else' (git-fixes). * i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes). * i2c: Use IS_REACHABLE() for substituting empty ACPI functions (git-fixes). * i2c: xiic:Wait for TX empty to avoid missed TX NAKs (git-fixes). * i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup (stable- fixes). * IB/core: Fix ib_cache_setup_one error flow cleanup (git-fixes) * IB/hfi1: Fix potential deadlock on &irq_src_lock and &dd-> uctxt_lock (git- fixes) * iio: adc: ad7124: fix chip ID mismatch (git-fixes). * iio: adc: ad7124: fix config comparison (git-fixes). * iio: adc: ad7606: fix oversampling gpio array (git-fixes). * iio: adc: ad7606: fix standby gpio state to match the documentation (git- fixes). * iio: buffer-dmaengine: fix releasing dma channel on error (git-fixes). * iio: chemical: bme680: Fix read/write ops to device by adding mutexes (git- fixes). * iio: fix scale application in iio_convert_raw_to_processed_unlocked (git- fixes). * iio: magnetometer: ak8975: Fix reading for ak099xx sensors (git-fixes). * Input: ilitek_ts_i2c - add report id message validation (git-fixes). * Input: ilitek_ts_i2c - avoid wrong input subsystem sync (git-fixes). * Input: ps2-gpio - use IRQF_NO_AUTOEN flag in request_irq() (git-fixes). * Input: uinput - reject requests with unreasonable number of slots (stable- fixes). * ipmi: docs: do not advertise deprecated sysfs entries (git-fixes). * ipmi:ssif: Improve detecting during probing (bsc#1228771) * ipmi:ssif: Improve detecting during probing (bsc#1228771) * jfs: fix out-of-bounds in dbNextAG() and diAlloc() (git-fixes). * kabi: add __nf_queue_get_refs() for kabi compliance. * kABI, crypto: virtio - Handle dataq logic with tasklet (git-fixes). * kthread: Fix task state in kthread worker if being frozen (bsc#1231146). * lib/group_cpus.c: avoid acquiring cpu hotplug lock in group_cpus_evenly (bsc#1229031). * lib/group_cpus.c: honor housekeeping config when grouping CPUs (bsc#1229034). * lib/group_cpus: Export group_cpus_evenly() (bsc#1229031). * lirc: rc_dev_get_from_fd(): fix file leak (git-fixes). * mailbox: bcm2835: Fix timeout during suspend mode(git-fixes). * mailbox: rockchip: fix a typo in module autoloading (git-fixes). * media: aspeed: Fix no complete irq for non-64-aligned width (bsc#1230269) * media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse (stable-fixes). * media: qcom: camss: Fix ordering of pm_runtime_enable (git-fixes). * media: Revert "media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()" (git-fixes). * media: sun4i_csi: Implement link validate for sun4i_csi subdev (git-fixes). * media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags (git-fixes). * media: uvcvideo: Enforce alignment of frame and interval (stable-fixes). * media: venus: fix use after free bug in venus_remove due to race condition (git-fixes). * media: vicodec: allow en/decoder cmd w/o CAPTURE (git-fixes). * media: vivid: do not set HDMI TX controls if there are no HDMI outputs (stable-fixes). * media: vivid: fix wrong sizeimage value for mplane (stable-fixes). * mmc: cqhci: Fix checking of CQHCI_HALT state (git-fixes). * mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K (git-fixes). * mmc: sdhci-of-aspeed: fix module autoloading (git-fixes). * mtd: powernv: Add check devm_kasprintf() returned value (git-fixes). * mtd: slram: insert break after errors in parsing the map (git-fixes). * net: drop bad gso csum_start and offset in virtio_net_hdr (git-fixes). * net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup (git- fixes). * net: missing check virtio (git-fixes). * net: tighten bad gso csum offset check in virtio_net_hdr (git-fixes). * nf_conntrack_proto_udp: do not accept packets with IPS_NAT_CLASH (bsc#1199769). * NFSD: Fix frame size warning in svc_export_parse() (git-fixes). * NFS: Do not re-read the entire page cache to find the next cookie (bsc#1226662). * NFSD: Rewrite synopsis of nfsd_percpu_counters_init() (git-fixes). * NFS: never reuse a NFSv4.0 lock-owner (bsc#1227726). * NFS: Reduce use of uncached readdir (bsc#1226662). *NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations (git-fixes). * nilfs2: Constify struct kobj_type (git-fixes). * nilfs2: determine empty node blocks as corrupted (git-fixes). * nilfs2: fix missing cleanup on rollforward recovery error (git-fixes). * nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() (git-fixes). * nilfs2: fix potential oob read in nilfs_btree_check_delete() (git-fixes). * nilfs2: fix state management in error path of log writing function (git- fixes). * nilfs2: protect references to superblock parameters exposed in sysfs (git- fixes). * nilfs2: replace snprintf in show functions with sysfs_emit (git-fixes). * nilfs2: use default_groups in kobj_type (git-fixes). * nvme: move stopping keep-alive into nvme_uninit_ctrl() (git-fixes). * nvme/pci: Add APST quirk for Lenovo N60z laptop (git-fixes). * nvme-pci: Add sleep quirk for Samsung 990 Evo (git-fixes). * nvme-pci: use block layer helpers to calculate num of queues (bsc#1229034). * nvme: replace blk_mq_pci_map_queues with blk_mq_dev_map_queues (bsc#1229034). * nvmet: Identify-Active Namespace ID List command should reject invalid nsid (git-fixes). * nvmet-rdma: fix possible bad dereference when freeing rsps (git-fixes). * nvmet-tcp: do not continue for invalid icreq (git-fixes). * nvmet-tcp: fix kernel crash if commands allocation fails (git-fixes). * nvmet-trace: avoid dereferencing pointer too early (git-fixes). * ocfs2: cancel dqi_sync_work before freeing oinfo (git-fixes). * ocfs2: fix null-ptr-deref when journal load failed (git-fixes). * ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate (git-fixes). * ocfs2: remove unreasonable unlock in ocfs2_read_blocks (git-fixes). * PCI: Add missing bridge lock to pci_bus_lock() (stable-fixes). * PCI: al: Check IORESOURCE_BUS existence during probe (git-fixes). * PCI/ASPM: Move pci_function_0() upward (bsc#1226915) * PCI/ASPM: Remove struct aspm_latency (bsc#1226915) *PCI/ASPM: Stop caching device L0s, L1 acceptable exit latencies (bsc#1226915) * PCI/ASPM: Stop caching link L0s, L1 exit latencies (bsc#1226915) * PCI: dra7xx: Fix error handling when IRQ request fails in probe (git-fixes). * PCI: dwc: Expose dw_pcie_ep_exit() to module (git-fixes). * PCI: dwc: Restore MSI Receiver mask during resume (git-fixes). * pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv (stable-fixes). * PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) (stable- fixes). * PCI: keystone: Fix if-statement expression in ks_pcie_quirk() (git-fixes). * PCI: Support BAR sizes up to 8TB (bsc#1231017) * PCI: Wait for Link before restoring Downstream Buses (git-fixes). * PCI: xilinx-nwl: Clean up clock on probe failure/removal (git-fixes). * PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler (git-fixes). * PCI: xilinx-nwl: Fix register misspelling (git-fixes). * pcmcia: Use resource_size function on resource object (stable-fixes). * pinctrl: single: fix missing error code in pcs_probe() (git-fixes). * pinctrl: single: fix potential NULL dereference in pcs_get_function() (git- fixes). * PKCS#7: Check codeSigning EKU of certificates in PKCS#7 (bsc#1226666). * platform/x86: dell-smbios: Fix error path in dell_smbios_init() (git-fixes). * platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array (git-fixes). * platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses (git- fixes). * power: supply: axp20x_battery: Remove design from min and max voltage (git- fixes). * power: supply: Drop use_cnt check from power_supply_property_is_writeable() (git-fixes). * power: supply: hwmon: Fix missing temp1_max_alarm attribute (git-fixes). * power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense (git-fixes). * RDMA/core: Remove unused declaration rdma_resolve_ip_route() (git-fixes) * RDMA/cxgb4: Added NULL check for lookup_atid (git-fixes) * RDMA/efa: Properly handleunexpected AQ completions (git-fixes) * RDMA/hns: Do not modify rq next block addr in HIP09 QPC (git-fixes) * RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled (git-fixes) * RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range() (git-fixes) * RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler (git- fixes) * RDMA/hns: Optimize hem allocation performance (git-fixes) * RDMA/irdma: fix error message in irdma_modify_qp_roce() (git-fixes) * RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (git- fixes) * RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds (git-fixes) * RDMA/rtrs: Fix the problem of variable not initialized fully (git-fixes) * RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer (git- fixes) * Restore dropped fields for bluetooth MGMT/SMP structs (git-fixes). * Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE" (git-fixes). * Revert "media: tuners: fix error return code of hybrid_tuner_request_state()" (git-fixes). * Revert "media: tuners: fix error return code of hybrid_tuner_request_state()" (stable-fixes). * rtc: at91sam9: fix OF node leak in probe() error path (git-fixes). * scsi: ibmvfc: Add max_sectors module parameter (bsc#1216223). * scsi: lpfc: Change diagnostic log flag during receipt of unknown ELS cmds (bsc#1229429). * scsi: lpfc: Copyright updates for 14.4.0.4 patches (bsc#1229429). * scsi: lpfc: Fix overflow build issue (bsc#1229429). * scsi: lpfc: Fix unintentional double clearing of vmid_flag (bsc#1229429). * scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (bsc#1229429). * scsi: lpfc: Remove redundant vport assignment when building an abort request (bsc#1229429). * scsi: lpfc: Update lpfc version to 14.4.0.4 (bsc#1229429). * scsi: lpfc: Update PRLO handling in direct attached topology (bsc#1229429). * scsi: lpfc: Validate hdwq pointers before dereferencing inreset/errata paths (bsc#1229429). * scsi: pm8001: do not overwrite PCI queue mapping (bsc#1229034). * scsi: replace blk_mq_pci_map_queues with blk_mq_dev_map_queues (bsc#1229034). * scsi: sd: Fix off-by-one error in sd_read_block_characteristics() (bsc#1223848). * scsi: use block layer helpers to calculate num of queues (bsc#1229034). * spi: nxp-fspi: fix the KASAN report out-of-bounds bug (git-fixes). * Squashfs: sanity check symbolic link size (git-fixes). * staging: iio: frequency: ad9834: Validate frequency parameter value (git- fixes). * thunderbolt: Mark XDomain as unplugged when router is removed (stable- fixes). * tomoyo: fallback to realpath if symlink's pathname does not exist (git- fixes). * tools/virtio: fix build (git-fixes). * tpm: Clean up TPM space after command failure (git-fixes). * tracing: Avoid possible softlockup in tracing_iter_reset() (git-fixes). * tty: rp2: Fix reset with non forgiving PCIe host bridges (git-fixes). * udp: fix receiving fraglist GSO packets (git-fixes). * uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind (git- fixes). * usb: cdnsp: Fix incorrect usb_request status (git-fixes). * USB: class: CDC-ACM: fix race between get_serial and set_serial (git-fixes). * usb: dwc2: drd: fix clock gating on USB role switch (git-fixes). * usb: dwc2: Skip clock gating on Broadcom SoCs (git-fixes). * usb: dwc3: core: Prevent USB core invalid event buffer address access (git- fixes). * usb: dwc3: core: Skip setting event buffers for host only controllers (git- fixes). * usb: dwc3: core: update LC timer as per USB Spec V3.2 (git-fixes). * usb: dwc3: omap: add missing depopulate in probe error path (git-fixes). * usb: dwc3: st: add missing depopulate in probe error path (git-fixes). * usb: dwc3: st: fix probed platform device ref count on probe error path (git-fixes). * usbip: Do not submit special requests twice (stable-fixes). * usbnet: fix cyclical race on disconnect with workqueue (git-fixes). * usbnet: ipheth: race between ipheth_close and error handling (git-fixes). * usbnet: modern method to get random MAC (git-fixes). * USB: serial: kobil_sct: restore initial terminal settings (git-fixes). * USB: serial: option: add MeiG Smart SRM825L (git-fixes). * usb: typec: ucsi: Fix null pointer dereference in trace (stable-fixes). * usb: uas: set host status byte on data completion error (git-fixes). * usb: uas: set host status byte on data completion error (stable-fixes). * USB: usbtmc: prevent kernel-usb-infoleak (git-fixes). * usb: xhci: fix loss of data on Cadence xHC (git-fixes). * vhost: Add smp_rmb() in vhost_vq_avail_empty() (git-fixes). * vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler (git-fixes). * virito: add APIs for retrieving vq affinity (bsc#1229034). * virtio-blk: Ensure no requests in virtqueues before deleting vqs (git- fixes). * virtio: blk/scsi: use block layer helpers to calculate num of queues (bsc#1229034). * virtio: blk/scs: replace blk_mq_virtio_map_queues with blk_mq_dev_map_queues (bsc#1229034). * virtiofs: forbid newlines in tags (bsc#1230591). * virtio_net: checksum offloading handling fix (git-fixes). * virtio_net: Fix "'%d' directive writing between 1 and 11 bytes into a region of size 10" warnings (git-fixes). * virtio_net: use u64_stats_t infra to avoid data-races (git-fixes). * virtio: reenable config if freezing device failed (git-fixes). * virtio/vsock: fix logic which reduces credit update messages (git-fixes). * VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (git-fixes). * vsock/virtio: add support for device suspend/resume (git-fixes). * vsock/virtio: factor our the code to initialize and delete VQs (git-fixes). * vsock/virtio: initialize the_virtio_vsock before using VQs (git-fixes). * vsock/virtio: remove socket from connected/bound list on shutdown (git- fixes). * watchdog: imx_sc_wdt: Do not disable WDT in suspend (git-fixes). * wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3 (stable-fixes). * wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors (git- fixes). * wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan() (git-fixes). * wifi: iwlwifi: mvm: increase the time between ranging measurements (git- fixes). * wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() (git- fixes). * wifi: mt76: mt7615: check devm_kasprintf() returned value (git-fixes). * wifi: mt76: mt7915: fix rx filter setting for bfee functionality (git- fixes). * wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() (stable-fixes). * wifi: rtw88: 8822c: Fix reported RX band width (git-fixes). * wifi: rtw88: always wait for both firmware loading attempts (git-fixes). * wifi: rtw88: remove CPT execution branch never used (git-fixes). * wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param (git-fixes). * x86/hyperv: fix kexec crash due to VP assist page corruption (git-fixes). * x86/kexec: Add EFI config table identity mapping for kexec kernel (bsc#1220382). * x86/mm/ident_map: Use gbpages only where full GB page should be mapped (bsc#1220382). * x86/xen: Convert comma to semicolon (git-fixes). * xen: add capability to remap non-RAM pages to different PFNs (bsc#1226003). * xen: allow mapping ACPI data using a different physical address (bsc#1226003). * xen: introduce generic helper checking for memory map conflicts (bsc#1226003). * xen: move checks for e820 conflicts further up (bsc#1226003). * xen: move max_pfn in xen_memory_setup() out of function scope (bsc#1226003). * xen/swiotlb: add alignment check for dma buffers (bsc#1229928). * xen/swiotlb: fix allocated size (git-fixes). * xen: tolerate ACPI NVS memory overlapping with Xen allocated memory (bsc#1226003). * xen: use correct end address of kernel for conflict checking (bsc#1226003). * xfs: do not include bnobt blocks when reserving freeblock pool (git-fixes). * xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them (git- fixes). * xz: cleanup CRC32 edits from 2018 (git-fixes). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-3592=1 SUSE-2024-3592=1 * openSUSE Leap Micro 5.5 zypper in -t patch openSUSE-Leap-Micro-5.5-2024-3592=1 * SUSE Linux Enterprise Micro 5.5 zypper in -t patch SUSE-SLE-Micro-5.5-2024-3592=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-3592=1 * SUSE Real Time Module 15-SP5 zypper in -t patch SUSE-SLE-Module-RT-15-SP5-2024-3592=1 ## Package List: * openSUSE Leap 15.5 (noarch) * kernel-source-rt-5.14.21-150500.13.73.1 * kernel-devel-rt-5.14.21-150500.13.73.1 * openSUSE Leap 15.5 (x86_64) * kernel-syms-rt-5.14.21-150500.13.73.1 * kernel-livepatch-SLE15-SP5-RT_Update_21-debugsource-1-150500.11.3.1 * kernel-rt_debug-devel-debuginfo-5.14.21-150500.13.73.1 * ocfs2-kmp-rt-debuginfo-5.14.21-150500.13.73.1 * dlm-kmp-rt-debuginfo-5.14.21-150500.13.73.1 * kselftests-kmp-rt-debuginfo-5.14.21-150500.13.73.1 * dlm-kmp-rt-5.14.21-150500.13.73.1 * gfs2-kmp-rt-debuginfo-5.14.21-150500.13.73.1 * kernel-rt-livepatch-5.14.21-150500.13.73.1 * kselftests-kmp-rt-5.14.21-150500.13.73.1 * kernel-rt-devel-debuginfo-5.14.21-150500.13.73.1 * kernel-rt_debug-debuginfo-5.14.21-150500.13.73.1 * kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 * kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 * kernel-rt-optional-5.14.21-150500.13.73.1 * kernel-livepatch-5_14_21-150500_13_73-rt-debuginfo-1-150500.11.3.1 *kernel-rt-debugsource-5.14.21-150500.13.73.1 * kernel-rt-devel-5.14.21-150500.13.73.1 * kernel-rt-debuginfo-5.14.21-150500.13.73.1 * kernel-rt-optional-debuginfo-5.14.21-150500.13.73.1 * kernel-rt-vdso-debuginfo-5.14.21-150500.13.73.1 * reiserfs-kmp-rt-5.14.21-150500.13.73.1 * kernel-rt-vdso-5.14.21-150500.13.73.1 * reiserfs-kmp-rt-debuginfo-5.14.21-150500.13.73.1 * cluster-md-kmp-rt-5.14.21-150500.13.73.1 * kernel-rt_debug-devel-5.14.21-150500.13.73.1 * gfs2-kmp-rt-5.14.21-150500.13.73.1 * cluster-md-kmp-rt-debuginfo-5.14.21-150500.13.73.1 * kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 * ocfs2-kmp-rt-5.14.21-150500.13.73.1 * kernel-rt_debug-debugsource-5.14.21-150500.13.73.1 * kernel-rt_debug-vdso-5.14.21-150500.13.73.1 * kernel-rt_debug-vdso-debuginfo-5.14.21-150500.13.73.1 * kernel-rt-extra-5.14.21-150500.13.73.1 * kernel-rt-extra-debuginfo-5.14.21-150500.13.73.1 * openSUSE Leap 15.5 (nosrc x86_64) * kernel-rt_debug-5.14.21-150500.13.73.1 * kernel-rt-5.14.21-150500.13.73.1 * openSUSE Leap Micro 5.5 (nosrc x86_64) * kernel-rt-5.14.21-150500.13.73.1 * openSUSE Leap Micro 5.5 (x86_64) * kernel-rt-debuginfo-5.14.21-150500.13.73.1 * kernel-rt-debugsource-5.14.21-150500.13.73.1 * SUSE Linux Enterprise Micro 5.5 (nosrc x86_64) * kernel-rt-5.14.21-150500.13.73.1 * SUSE Linux Enterprise Micro 5.5 (x86_64) * kernel-rt-debuginfo-5.14.21-150500.13.73.1 * kernel-rt-debugsource-5.14.21-150500.13.73.1 * SUSE Linux Enterprise Micro 5.5 (noarch) * kernel-source-rt-5.14.21-150500.13.73.1 * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-SLE15-SP5-RT_Update_21-debugsource-1-150500.11.3.1 * kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 * kernel-livepatch-5_14_21-150500_13_73-rt-debuginfo-1-150500.11.3.1 * SUSE Real Time Module 15-SP5 (x86_64) * kernel-syms-rt-5.14.21-150500.13.73.1 * kernel-rt_debug-devel-debuginfo-5.14.21-150500.13.73.1 *ocfs2-kmp-rt-debuginfo-5.14.21-150500.13.73.1 * dlm-kmp-rt-debuginfo-5.14.21-150500.13.73.1 * dlm-kmp-rt-5.14.21-150500.13.73.1 * gfs2-kmp-rt-debuginfo-5.14.21-150500.13.73.1 * kernel-rt-devel-debuginfo-5.14.21-150500.13.73.1 * kernel-rt_debug-debuginfo-5.14.21-150500.13.73.1 * kernel-rt-debugsource-5.14.21-150500.13.73.1 * kernel-rt-devel-5.14.21-150500.13.73.1 * kernel-rt-debuginfo-5.14.21-150500.13.73.1 * kernel-rt-vdso-debuginfo-5.14.21-150500.13.73.1 * kernel-rt-vdso-5.14.21-150500.13.73.1 * cluster-md-kmp-rt-5.14.21-150500.13.73.1 * kernel-rt_debug-devel-5.14.21-150500.13.73.1 * gfs2-kmp-rt-5.14.21-150500.13.73.1 * cluster-md-kmp-rt-debuginfo-5.14.21-150500.13.73.1 * ocfs2-kmp-rt-5.14.21-150500.13.73.1 * kernel-rt_debug-debugsource-5.14.21-150500.13.73.1 * kernel-rt_debug-vdso-5.14.21-150500.13.73.1 * kernel-rt_debug-vdso-debuginfo-5.14.21-150500.13.73.1 * SUSE Real Time Module 15-SP5 (noarch) * kernel-source-rt-5.14.21-150500.13.73.1 * kernel-devel-rt-5.14.21-150500.13.73.1 * SUSE Real Time Module 15-SP5 (nosrc x86_64) * kernel-rt_debug-5.14.21-150500.13.73.1 * kernel-rt-5.14.21-150500.13.73.1 ## References: * https://www.suse.com/security/cve/CVE-2022-48901.html * https://www.suse.com/security/cve/CVE-2022-48911.html * https://www.suse.com/security/cve/CVE-2022-48923.html * https://www.suse.com/security/cve/CVE-2022-48935.html * https://www.suse.com/security/cve/CVE-2022-48944.html * https://www.suse.com/security/cve/CVE-2022-48945.html * https://www.suse.com/security/cve/CVE-2023-52610.html * https://www.suse.com/security/cve/CVE-2023-52916.html * https://www.suse.com/security/cve/CVE-2024-26640.html * https://www.suse.com/security/cve/CVE-2024-26759.html * https://www.suse.com/security/cve/CVE-2024-26767.html * https://www.suse.com/security/cve/CVE-2024-26804.html * https://www.suse.com/security/cve/CVE-2024-26837.html * https://www.suse.com/security/cve/CVE-2024-37353.html *https://www.suse.com/security/cve/CVE-2024-38538.html * https://www.suse.com/security/cve/CVE-2024-38596.html * https://www.suse.com/security/cve/CVE-2024-38632.html * https://www.suse.com/security/cve/CVE-2024-40910.html * https://www.suse.com/security/cve/CVE-2024-40973.html * https://www.suse.com/security/cve/CVE-2024-40983.html * https://www.suse.com/security/cve/CVE-2024-41062.html * https://www.suse.com/security/cve/CVE-2024-41082.html * https://www.suse.com/security/cve/CVE-2024-42154.html * https://www.suse.com/security/cve/CVE-2024-42259.html * https://www.suse.com/security/cve/CVE-2024-42265.html * https://www.suse.com/security/cve/CVE-2024-42304.html * https://www.suse.com/security/cve/CVE-2024-42305.html * https://www.suse.com/security/cve/CVE-2024-42306.html * https://www.suse.com/security/cve/CVE-2024-43828.html * https://www.suse.com/security/cve/CVE-2024-43835.html * https://www.suse.com/security/cve/CVE-2024-43890.html * https://www.suse.com/security/cve/CVE-2024-43898.html * https://www.suse.com/security/cve/CVE-2024-43912.html * https://www.suse.com/security/cve/CVE-2024-43914.html * https://www.suse.com/security/cve/CVE-2024-44935.html * https://www.suse.com/security/cve/CVE-2024-44944.html * https://www.suse.com/security/cve/CVE-2024-44946.html * https://www.suse.com/security/cve/CVE-2024-44948.html * https://www.suse.com/security/cve/CVE-2024-44950.html * https://www.suse.com/security/cve/CVE-2024-44952.html * https://www.suse.com/security/cve/CVE-2024-44954.html * https://www.suse.com/security/cve/CVE-2024-44967.html * https://www.suse.com/security/cve/CVE-2024-44969.html * https://www.suse.com/security/cve/CVE-2024-44970.html * https://www.suse.com/security/cve/CVE-2024-44971.html * https://www.suse.com/security/cve/CVE-2024-44972.html * https://www.suse.com/security/cve/CVE-2024-44977.html * https://www.suse.com/security/cve/CVE-2024-44982.html * https://www.suse.com/security/cve/CVE-2024-44986.html *https://www.suse.com/security/cve/CVE-2024-44987.html * https://www.suse.com/security/cve/CVE-2024-44988.html * https://www.suse.com/security/cve/CVE-2024-44989.html * https://www.suse.com/security/cve/CVE-2024-44990.html * https://www.suse.com/security/cve/CVE-2024-44998.html * https://www.suse.com/security/cve/CVE-2024-44999.html * https://www.suse.com/security/cve/CVE-2024-45000.html * https://www.suse.com/security/cve/CVE-2024-45001.html * https://www.suse.com/security/cve/CVE-2024-45003.html * https://www.suse.com/security/cve/CVE-2024-45006.html * https://www.suse.com/security/cve/CVE-2024-45007.html * https://www.suse.com/security/cve/CVE-2024-45008.html * https://www.suse.com/security/cve/CVE-2024-45011.html * https://www.suse.com/security/cve/CVE-2024-45013.html * https://www.suse.com/security/cve/CVE-2024-45015.html * https://www.suse.com/security/cve/CVE-2024-45018.html * https://www.suse.com/security/cve/CVE-2024-45020.html * https://www.suse.com/security/cve/CVE-2024-45021.html * https://www.suse.com/security/cve/CVE-2024-45026.html * https://www.suse.com/security/cve/CVE-2024-45028.html * https://www.suse.com/security/cve/CVE-2024-45029.html * https://www.suse.com/security/cve/CVE-2024-46673.html * https://www.suse.com/security/cve/CVE-2024-46674.html * https://www.suse.com/security/cve/CVE-2024-46675.html * https://www.suse.com/security/cve/CVE-2024-46676.html * https://www.suse.com/security/cve/CVE-2024-46677.html * https://www.suse.com/security/cve/CVE-2024-46679.html * https://www.suse.com/security/cve/CVE-2024-46685.html * https://www.suse.com/security/cve/CVE-2024-46686.html * https://www.suse.com/security/cve/CVE-2024-46689.html * https://www.suse.com/security/cve/CVE-2024-46694.html * https://www.suse.com/security/cve/CVE-2024-46702.html * https://www.suse.com/security/cve/CVE-2024-46707.html * https://www.suse.com/security/cve/CVE-2024-46714.html * https://www.suse.com/security/cve/CVE-2024-46715.html *https://www.suse.com/security/cve/CVE-2024-46717.html * https://www.suse.com/security/cve/CVE-2024-46720.html * https://www.suse.com/security/cve/CVE-2024-46721.html * https://www.suse.com/security/cve/CVE-2024-46722.html * https://www.suse.com/security/cve/CVE-2024-46723.html * https://www.suse.com/security/cve/CVE-2024-46724.html * https://www.suse.com/security/cve/CVE-2024-46725.html * https://www.suse.com/security/cve/CVE-2024-46726.html * https://www.suse.com/security/cve/CVE-2024-46727.html * https://www.suse.com/security/cve/CVE-2024-46728.html * https://www.suse.com/security/cve/CVE-2024-46730.html * https://www.suse.com/security/cve/CVE-2024-46731.html * https://www.suse.com/security/cve/CVE-2024-46732.html * https://www.suse.com/security/cve/CVE-2024-46737.html * https://www.suse.com/security/cve/CVE-2024-46738.html * https://www.suse.com/security/cve/CVE-2024-46739.html * https://www.suse.com/security/cve/CVE-2024-46743.html * https://www.suse.com/security/cve/CVE-2024-46744.html * https://www.suse.com/security/cve/CVE-2024-46745.html * https://www.suse.com/security/cve/CVE-2024-46746.html * https://www.suse.com/security/cve/CVE-2024-46747.html * https://www.suse.com/security/cve/CVE-2024-46750.html * https://www.suse.com/security/cve/CVE-2024-46751.html * https://www.suse.com/security/cve/CVE-2024-46752.html * https://www.suse.com/security/cve/CVE-2024-46753.html * https://www.suse.com/security/cve/CVE-2024-46755.html * https://www.suse.com/security/cve/CVE-2024-46756.html * https://www.suse.com/security/cve/CVE-2024-46758.html * https://www.suse.com/security/cve/CVE-2024-46759.html * https://www.suse.com/security/cve/CVE-2024-46761.html * https://www.suse.com/security/cve/CVE-2024-46771.html * https://www.suse.com/security/cve/CVE-2024-46772.html * https://www.suse.com/security/cve/CVE-2024-46773.html * https://www.suse.com/security/cve/CVE-2024-46774.html * https://www.suse.com/security/cve/CVE-2024-46778.html *https://www.suse.com/security/cve/CVE-2024-46780.html * https://www.suse.com/security/cve/CVE-2024-46781.html * https://www.suse.com/security/cve/CVE-2024-46783.html * https://www.suse.com/security/cve/CVE-2024-46784.html * https://www.suse.com/security/cve/CVE-2024-46786.html * https://www.suse.com/security/cve/CVE-2024-46787.html * https://www.suse.com/security/cve/CVE-2024-46791.html * https://www.suse.com/security/cve/CVE-2024-46794.html * https://www.suse.com/security/cve/CVE-2024-46798.html * https://www.suse.com/security/cve/CVE-2024-46822.html * https://www.suse.com/security/cve/CVE-2024-46830.html * https://bugzilla.suse.com/show_bug.cgi?id=1199769 * https://bugzilla.suse.com/show_bug.cgi?id=1216223 * https://bugzilla.suse.com/show_bug.cgi?id=1220382 * https://bugzilla.suse.com/show_bug.cgi?id=1221610 * https://bugzilla.suse.com/show_bug.cgi?id=1221650 * https://bugzilla.suse.com/show_bug.cgi?id=1222629 * https://bugzilla.suse.com/show_bug.cgi?id=1222973 * https://bugzilla.suse.com/show_bug.cgi?id=1223600 * https://bugzilla.suse.com/show_bug.cgi?id=1223848 * https://bugzilla.suse.com/show_bug.cgi?id=1224085 * https://bugzilla.suse.com/show_bug.cgi?id=1225903 * https://bugzilla.suse.com/show_bug.cgi?id=1226003 * https://bugzilla.suse.com/show_bug.cgi?id=1226606 * https://bugzilla.suse.com/show_bug.cgi?id=1226662 * https://bugzilla.suse.com/show_bug.cgi?id=1226666 * https://bugzilla.suse.com/show_bug.cgi?id=1226846 * https://bugzilla.suse.com/show_bug.cgi?id=1226860 * https://bugzilla.suse.com/show_bug.cgi?id=1226875 * https://bugzilla.suse.com/show_bug.cgi?id=1226915 * https://bugzilla.suse.com/show_bug.cgi?id=1227487 * https://bugzilla.suse.com/show_bug.cgi?id=1227726 * https://bugzilla.suse.com/show_bug.cgi?id=1227819 * https://bugzilla.suse.com/show_bug.cgi?id=1227832 * https://bugzilla.suse.com/show_bug.cgi?id=1227890 * https://bugzilla.suse.com/show_bug.cgi?id=1228507 * https://bugzilla.suse.com/show_bug.cgi?id=1228576 *https://bugzilla.suse.com/show_bug.cgi?id=1228620 * https://bugzilla.suse.com/show_bug.cgi?id=1228771 * https://bugzilla.suse.com/show_bug.cgi?id=1229031 * https://bugzilla.suse.com/show_bug.cgi?id=1229034 * https://bugzilla.suse.com/show_bug.cgi?id=1229086 * https://bugzilla.suse.com/show_bug.cgi?id=1229156 * https://bugzilla.suse.com/show_bug.cgi?id=1229289 * https://bugzilla.suse.com/show_bug.cgi?id=1229334 * https://bugzilla.suse.com/show_bug.cgi?id=1229362 * https://bugzilla.suse.com/show_bug.cgi?id=1229363 * https://bugzilla.suse.com/show_bug.cgi?id=1229364 * https://bugzilla.suse.com/show_bug.cgi?id=1229394 * https://bugzilla.suse.com/show_bug.cgi?id=1229429 * https://bugzilla.suse.com/show_bug.cgi?id=1229453 * https://bugzilla.suse.com/show_bug.cgi?id=1229572 * https://bugzilla.suse.com/show_bug.cgi?id=1229573 * https://bugzilla.suse.com/show_bug.cgi?id=1229585 * https://bugzilla.suse.com/show_bug.cgi?id=1229607 * https://bugzilla.suse.com/show_bug.cgi?id=1229619 * https://bugzilla.suse.com/show_bug.cgi?id=1229633 * https://bugzilla.suse.com/show_bug.cgi?id=1229662 * https://bugzilla.suse.com/show_bug.cgi?id=1229753 * https://bugzilla.suse.com/show_bug.cgi?id=1229764 * https://bugzilla.suse.com/show_bug.cgi?id=1229790 * https://bugzilla.suse.com/show_bug.cgi?id=1229810 * https://bugzilla.suse.com/show_bug.cgi?id=1229830 * https://bugzilla.suse.com/show_bug.cgi?id=1229899 * https://bugzilla.suse.com/show_bug.cgi?id=1229928 * https://bugzilla.suse.com/show_bug.cgi?id=1229947 * https://bugzilla.suse.com/show_bug.cgi?id=1230015 * https://bugzilla.suse.com/show_bug.cgi?id=1230129 * https://bugzilla.suse.com/show_bug.cgi?id=1230130 * https://bugzilla.suse.com/show_bug.cgi?id=1230170 * https://bugzilla.suse.com/show_bug.cgi?id=1230171 * https://bugzilla.suse.com/show_bug.cgi?id=1230174 * https://bugzilla.suse.com/show_bug.cgi?id=1230175 * https://bugzilla.suse.com/show_bug.cgi?id=1230176 *https://bugzilla.suse.com/show_bug.cgi?id=1230178 * https://bugzilla.suse.com/show_bug.cgi?id=1230180 * https://bugzilla.suse.com/show_bug.cgi?id=1230185 * https://bugzilla.suse.com/show_bug.cgi?id=1230192 * https://bugzilla.suse.com/show_bug.cgi?id=1230193 * https://bugzilla.suse.com/show_bug.cgi?id=1230194 * https://bugzilla.suse.com/show_bug.cgi?id=1230200 * https://bugzilla.suse.com/show_bug.cgi?id=1230204 * https://bugzilla.suse.com/show_bug.cgi?id=1230209 * https://bugzilla.suse.com/show_bug.cgi?id=1230211 * https://bugzilla.suse.com/show_bug.cgi?id=1230212 * https://bugzilla.suse.com/show_bug.cgi?id=1230217 * https://bugzilla.suse.com/show_bug.cgi?id=1230224 * https://bugzilla.suse.com/show_bug.cgi?id=1230230 * https://bugzilla.suse.com/show_bug.cgi?id=1230233 * https://bugzilla.suse.com/show_bug.cgi?id=1230244 * https://bugzilla.suse.com/show_bug.cgi?id=1230245 * https://bugzilla.suse.com/show_bug.cgi?id=1230247 * https://bugzilla.suse.com/show_bug.cgi?id=1230248 * https://bugzilla.suse.com/show_bug.cgi?id=1230269 * https://bugzilla.suse.com/show_bug.cgi?id=1230339 * https://bugzilla.suse.com/show_bug.cgi?id=1230340 * https://bugzilla.suse.com/show_bug.cgi?id=1230392 * https://bugzilla.suse.com/show_bug.cgi?id=1230398 * https://bugzilla.suse.com/show_bug.cgi?id=1230431 * https://bugzilla.suse.com/show_bug.cgi?id=1230433 * https://bugzilla.suse.com/show_bug.cgi?id=1230434 * https://bugzilla.suse.com/show_bug.cgi?id=1230440 * https://bugzilla.suse.com/show_bug.cgi?id=1230442 * https://bugzilla.suse.com/show_bug.cgi?id=1230444 * https://bugzilla.suse.com/show_bug.cgi?id=1230450 * https://bugzilla.suse.com/show_bug.cgi?id=1230451 * https://bugzilla.suse.com/show_bug.cgi?id=1230454 * https://bugzilla.suse.com/show_bug.cgi?id=1230506 * https://bugzilla.suse.com/show_bug.cgi?id=1230507 * https://bugzilla.suse.com/show_bug.cgi?id=1230511 * https://bugzilla.suse.com/show_bug.cgi?id=1230515 *https://bugzilla.suse.com/show_bug.cgi?id=1230517 * https://bugzilla.suse.com/show_bug.cgi?id=1230524 * https://bugzilla.suse.com/show_bug.cgi?id=1230533 * https://bugzilla.suse.com/show_bug.cgi?id=1230535 * https://bugzilla.suse.com/show_bug.cgi?id=1230549 * https://bugzilla.suse.com/show_bug.cgi?id=1230556 * https://bugzilla.suse.com/show_bug.cgi?id=1230582 * https://bugzilla.suse.com/show_bug.cgi?id=1230589 * https://bugzilla.suse.com/show_bug.cgi?id=1230591 * https://bugzilla.suse.com/show_bug.cgi?id=1230592 * https://bugzilla.suse.com/show_bug.cgi?id=1230699 * https://bugzilla.suse.com/show_bug.cgi?id=1230700 * https://bugzilla.suse.com/show_bug.cgi?id=1230701 * https://bugzilla.suse.com/show_bug.cgi?id=1230702 * https://bugzilla.suse.com/show_bug.cgi?id=1230703 * https://bugzilla.suse.com/show_bug.cgi?id=1230705 * https://bugzilla.suse.com/show_bug.cgi?id=1230706 * https://bugzilla.suse.com/show_bug.cgi?id=1230707 * https://bugzilla.suse.com/show_bug.cgi?id=1230709 * https://bugzilla.suse.com/show_bug.cgi?id=1230710 * https://bugzilla.suse.com/show_bug.cgi?id=1230711 * https://bugzilla.suse.com/show_bug.cgi?id=1230712 * https://bugzilla.suse.com/show_bug.cgi?id=1230719 * https://bugzilla.suse.com/show_bug.cgi?id=1230724 * https://bugzilla.suse.com/show_bug.cgi?id=1230725 * https://bugzilla.suse.com/show_bug.cgi?id=1230730 * https://bugzilla.suse.com/show_bug.cgi?id=1230731 * https://bugzilla.suse.com/show_bug.cgi?id=1230732 * https://bugzilla.suse.com/show_bug.cgi?id=1230733 * https://bugzilla.suse.com/show_bug.cgi?id=1230747 * https://bugzilla.suse.com/show_bug.cgi?id=1230748 * https://bugzilla.suse.com/show_bug.cgi?id=1230751 * https://bugzilla.suse.com/show_bug.cgi?id=1230752 * https://bugzilla.suse.com/show_bug.cgi?id=1230756 * https://bugzilla.suse.com/show_bug.cgi?id=1230761 * https://bugzilla.suse.com/show_bug.cgi?id=1230766 * https://bugzilla.suse.com/show_bug.cgi?id=1230767 *https://bugzilla.suse.com/show_bug.cgi?id=1230768 * https://bugzilla.suse.com/show_bug.cgi?id=1230771 * https://bugzilla.suse.com/show_bug.cgi?id=1230772 * https://bugzilla.suse.com/show_bug.cgi?id=1230776 * https://bugzilla.suse.com/show_bug.cgi?id=1230783 * https://bugzilla.suse.com/show_bug.cgi?id=1230786 * https://bugzilla.suse.com/show_bug.cgi?id=1230791 * https://bugzilla.suse.com/show_bug.cgi?id=1230794 * https://bugzilla.suse.com/show_bug.cgi?id=1230796 * https://bugzilla.suse.com/show_bug.cgi?id=1230802 * https://bugzilla.suse.com/show_bug.cgi?id=1230806 * https://bugzilla.suse.com/show_bug.cgi?id=1230808 * https://bugzilla.suse.com/show_bug.cgi?id=1230810 * https://bugzilla.suse.com/show_bug.cgi?id=1230812 * https://bugzilla.suse.com/show_bug.cgi?id=1230813 * https://bugzilla.suse.com/show_bug.cgi?id=1230814 * https://bugzilla.suse.com/show_bug.cgi?id=1230815 * https://bugzilla.suse.com/show_bug.cgi?id=1230821 * https://bugzilla.suse.com/show_bug.cgi?id=1230825 * https://bugzilla.suse.com/show_bug.cgi?id=1230830 * https://bugzilla.suse.com/show_bug.cgi?id=1231013 * https://bugzilla.suse.com/show_bug.cgi?id=1231017 * https://bugzilla.suse.com/show_bug.cgi?id=1231116 * https://bugzilla.suse.com/show_bug.cgi?id=1231120 * https://bugzilla.suse.com/show_bug.cgi?id=1231146 * https://bugzilla.suse.com/show_bug.cgi?id=1231180 * https://bugzilla.suse.com/show_bug.cgi?id=1231181 . A new critical patch set for the Linux Kernel targets security vulnerabilities. Review installation processes and details on the identified weaknesses. Linux Kernel Update, SUSE Security Patch, System Security Advisory. . Severity: Important. LinuxSecurity.com Team
Oct 10, 2024
•Important
SuSE
100
security advisorycriticalimportantSUSE: 2024:1801-1 Important: Kernel Security Fixes for SP5 and Leap
* bsc#1223858 * bsc#1224169 * bsc#1224340 Affected Products: . # Security update for the Linux Kernel Announcement ID: SUSE-SU-2024:1801-1 Rating: important References: * bsc#1223858 * bsc#1224169 * bsc#1224340 Affected Products: * openSUSE Leap 15.5 * Public Cloud Module 15-SP5 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that has three security fixes can now be installed. ## Description: The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes. This update fixes a regression with kerberized nfs4 shares in the previous update (bsc#1223858). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.5 zypper in -t patch openSUSE-SLE-15.5-2024-1801=1 SUSE-2024-1801=1 * Public Cloud Module 15-SP5 zypper in -t patch SUSE-SLE-Module-Public-Cloud-15-SP5-2024-1801=1 ## Package List: * openSUSE Leap 15.5 (aarch64 x86_64) * kernel-azure-debugsource-5.14.21-150500.33.54.1 * kernel-azure-extra-5.14.21-150500.33.54.1 * cluster-md-kmp-azure-debuginfo-5.14.21-150500.33.54.1 * kernel-azure-devel-debuginfo-5.14.21-150500.33.54.1 * cluster-md-kmp-azure-5.14.21-150500.33.54.1 * kernel-azure-debuginfo-5.14.21-150500.33.54.1 * dlm-kmp-azure-5.14.21-150500.33.54.1 * gfs2-kmp-azure-5.14.21-150500.33.54.1 * kernel-azure-devel-5.14.21-150500.33.54.1 * kernel-azure-optional-5.14.21-150500.33.54.1 * kernel-syms-azure-5.14.21-150500.33.54.1 * reiserfs-kmp-azure-5.14.21-150500.33.54.1 * kernel-azure-livepatch-devel-5.14.21-150500.33.54.1 * kselftests-kmp-azure-debuginfo-5.14.21-150500.33.54.1 * ocfs2-kmp-azure-debuginfo-5.14.21-150500.33.54.1 * dlm-kmp-azure-debuginfo-5.14.21-150500.33.54.1 * kernel-azure-extra-debuginfo-5.14.21-150500.33.54.1 * reiserfs-kmp-azure-debuginfo-5.14.21-150500.33.54.1 * kernel-azure-optional-debuginfo-5.14.21-150500.33.54.1 * gfs2-kmp-azure-debuginfo-5.14.21-150500.33.54.1 * ocfs2-kmp-azure-5.14.21-150500.33.54.1 * kselftests-kmp-azure-5.14.21-150500.33.54.1 * openSUSE Leap 15.5 (aarch64 nosrc x86_64) * kernel-azure-5.14.21-150500.33.54.1 * openSUSE Leap 15.5 (x86_64) * kernel-azure-vdso-debuginfo-5.14.21-150500.33.54.1 * kernel-azure-vdso-5.14.21-150500.33.54.1 * openSUSE Leap 15.5 (noarch) * kernel-devel-azure-5.14.21-150500.33.54.1 * kernel-source-azure-5.14.21-150500.33.54.1 * Public Cloud Module 15-SP5 (aarch64 nosrc x86_64) * kernel-azure-5.14.21-150500.33.54.1 * Public Cloud Module 15-SP5 (aarch64 x86_64) * kernel-azure-debugsource-5.14.21-150500.33.54.1 * kernel-azure-debuginfo-5.14.21-150500.33.54.1 * kernel-syms-azure-5.14.21-150500.33.54.1 * kernel-azure-devel-debuginfo-5.14.21-150500.33.54.1 * kernel-azure-devel-5.14.21-150500.33.54.1 * Public Cloud Module 15-SP5 (noarch) * kernel-devel-azure-5.14.21-150500.33.54.1 * kernel-source-azure-5.14.21-150500.33.54.1 ## References: * https://bugzilla.suse.com/show_bug.cgi?id=1223858 * https://bugzilla.suse.com/show_bug.cgi?id=1224169 * https://bugzilla.suse.com/show_bug.cgi?id=1224340 . Essential security patches for the Linux Kernel released for SUSE systems. Key defenses highlighted.. Kernel Update, SUSE Linux, Security Fixes, Bugfixes, Linux Kernel. . Severity: Important. LinuxSecurity.com Team
May 28, 2024
•Important
SuSE
172
security advisorysecurity issueUbuntuUbuntu 22.04: USN-6743-2 Low Severity: Kernel Security Fixes
Several security issues were fixed in the Linux kernel.. ========================================================================== Ubuntu Security Notice USN-6743-2 April 22, 2024 linux-lowlatency-hwe-6.5 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-lowlatency-hwe-6.5: Linux low latency kernel Details: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - JFS file system; - BPF subsystem; - Netfilter; (CVE-2023-52600, CVE-2024-26589, CVE-2024-26591, CVE-2024-26581, CVE-2023-52603) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS: linux-image-6.5.0-28-lowlatency 6.5.0-28.29.1~22.04.1 linux-image-6.5.0-28-lowlatency-64k 6.5.0-28.29.1~22.04.1 linux-image-lowlatency-64k-hwe-22.04 6.5.0.28.29.1~22.04.1 linux-image-lowlatency-hwe-22.04 6.5.0.28.29.1~22.04.1 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-6743-2 https://ubuntu.com/security/notices/USN-6743-1 CVE-2023-52600, CVE-2023-52603, CVE-2024-26581, CVE-2024-26589, CVE-2024-26591 Package Information: .Urgent patches for security flaws in the Linux kernel specific to Ubuntu's low-latency edition necessitate prompt response and implementation.. Linux Kernel Security, Ubuntu Low Latency, Security Updates, Kernel Advisories. . Severity: Low. LinuxSecurity.com Team
Apr 22, 2024
•Low
Ubuntu
100
security advisorySUSE Linuximportant patchSUSE Linux 15 SP2: 2023:4243-1 Important: Kernel Live Patch Details
* bsc#1210619 * bsc#1215440 Cross-References: * CVE-2023-1829 . # Security update for the Linux Kernel (Live Patch 40 for SLE 15 SP2) Announcement ID: SUSE-SU-2023:4243-1 Rating: important References: * bsc#1210619 * bsc#1215440 Cross-References: * CVE-2023-1829 * CVE-2023-4623 CVSS scores: * CVE-2023-1829 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-1829 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4623 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-4623 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * SUSE Linux Enterprise High Performance Computing 15 SP2 * SUSE Linux Enterprise Live Patching 15-SP2 * SUSE Linux Enterprise Server 15 SP2 * SUSE Linux Enterprise Server for SAP Applications 15 SP2 An update that solves two vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.3.18-150200_24_163 fixes several issues. The following security issues were fixed: * CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215440). * CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP2 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP2-2023-4243=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP2 (ppc64le s390x x86_64) * kernel-livepatch-SLE15-SP2_Update_40-debugsource-2-150200.2.1 * kernel-livepatch-5_3_18-150200_24_163-default-2-150200.2.1 * kernel-livepatch-5_3_18-150200_24_163-default-debuginfo-2-150200.2.1 ## References: *https://www.suse.com/security/cve/CVE-2023-1829.html * https://www.suse.com/security/cve/CVE-2023-4623.html * https://bugzilla.suse.com/show_bug.cgi?id=1210619 * https://bugzilla.suse.com/show_bug.cgi?id=1215440 . Revise key concerns in the Linux Kernel and outline patch guidance for impacted operating systems.. SUSE Linux Kernel Patch, Live Patching, Kernel Update. . Severity: Important. LinuxSecurity.com Team
Oct 30, 2023
•Important
SuSE
217
security advisorybug fiximportant updateOracle Linux 8: ELSA-2023-5244 Important: Kernel Fixes and Updates
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2023-5244 https://linux.oracle.com/errata/ELSA-2023-5244.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: x86_64: bpftool-4.18.0-477.27.0.1.el8_8.x86_64.rpm kernel-4.18.0-477.27.0.1.el8_8.x86_64.rpm kernel-abi-stablelists-4.18.0-477.27.0.1.el8_8.noarch.rpm kernel-core-4.18.0-477.27.0.1.el8_8.x86_64.rpm kernel-cross-headers-4.18.0-477.27.0.1.el8_8.x86_64.rpm kernel-debug-4.18.0-477.27.0.1.el8_8.x86_64.rpm kernel-debug-core-4.18.0-477.27.0.1.el8_8.x86_64.rpm kernel-debug-devel-4.18.0-477.27.0.1.el8_8.x86_64.rpm kernel-debug-modules-4.18.0-477.27.0.1.el8_8.x86_64.rpm kernel-debug-modules-extra-4.18.0-477.27.0.1.el8_8.x86_64.rpm kernel-devel-4.18.0-477.27.0.1.el8_8.x86_64.rpm kernel-doc-4.18.0-477.27.0.1.el8_8.noarch.rpm kernel-headers-4.18.0-477.27.0.1.el8_8.x86_64.rpm kernel-modules-4.18.0-477.27.0.1.el8_8.x86_64.rpm kernel-modules-extra-4.18.0-477.27.0.1.el8_8.x86_64.rpm kernel-tools-4.18.0-477.27.0.1.el8_8.x86_64.rpm kernel-tools-libs-4.18.0-477.27.0.1.el8_8.x86_64.rpm perf-4.18.0-477.27.0.1.el8_8.x86_64.rpm python3-perf-4.18.0-477.27.0.1.el8_8.x86_64.rpm kernel-tools-libs-devel-4.18.0-477.27.0.1.el8_8.x86_64.rpm aarch64: bpftool-4.18.0-477.27.0.1.el8_8.aarch64.rpm kernel-cross-headers-4.18.0-477.27.0.1.el8_8.aarch64.rpm kernel-headers-4.18.0-477.27.0.1.el8_8.aarch64.rpm kernel-tools-4.18.0-477.27.0.1.el8_8.aarch64.rpm kernel-tools-libs-4.18.0-477.27.0.1.el8_8.aarch64.rpm perf-4.18.0-477.27.0.1.el8_8.aarch64.rpm python3-perf-4.18.0-477.27.0.1.el8_8.aarch64.rpm kernel-tools-libs-devel-4.18.0-477.27.0.1.el8_8.aarch64.rpm SRPMS: https://oss.oracle.com:443/ol8/SRPMS-updates//kernel-4.18.0-477.27.0.1.el8_8.src.rpm Related CVEs: CVE-2023-2002 CVE-2023-3090 CVE-2023-3776 CVE-2023-4004 CVE-2023-35001 CVE-2023-35788 Description of changes: [4.18.0-477.27.0.1.el8_8.OL8] - bluetooth: Perform careful capability checks inhci_sock_ioctl() {CVE-2023-2002} - ipvlan:Fix out-of-bounds caused by unclear skb-> cb {CVE-2023-3090} - net/sched: cls_fw: Fix improper refcount update leads to use-after-free {CVE-2023-3776} - netfilter: nft_set_pipapo: fix improper element removal {CVE-2023-4004} - netfilter: nf_tables: prevent OOB access in nft_byteorder_eval {CVE-2023-35001} - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() {CVE-2023-35788} _______________________________________________ El-errata mailing list
Sep 22, 2023
•Important
Oracle
202
security advisoryheap overflowmemory accessopenSUSE 15 SP5: SUSE-SU-2023:3676-1 Important Kernel Security Fixes
This update for the Linux Kernel 5.14.21-150500_13_5 fixes several issues. The following security issues were fixed:. # Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP5) Announcement ID: SUSE-SU-2023:3676-1 Rating: important References: * #1211395 * #1212849 * #1213063 Cross-References: * CVE-2023-2156 * CVE-2023-3090 * CVE-2023-35001 CVSS scores: * CVE-2023-2156 ( SUSE ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-2156 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H * CVE-2023-3090 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-3090 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-35001 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H * CVE-2023-35001 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: * openSUSE Leap 15.5 * SUSE Linux Enterprise High Performance Computing 15 SP4 * SUSE Linux Enterprise High Performance Computing 15 SP5 * SUSE Linux Enterprise Live Patching 15-SP4 * SUSE Linux Enterprise Live Patching 15-SP5 * SUSE Linux Enterprise Micro 5.3 * SUSE Linux Enterprise Micro 5.4 * SUSE Linux Enterprise Micro 5.5 * SUSE Linux Enterprise Real Time 15 SP4 * SUSE Linux Enterprise Real Time 15 SP5 * SUSE Linux Enterprise Server 15 SP4 * SUSE Linux Enterprise Server 15 SP5 * SUSE Linux Enterprise Server for SAP Applications 15 SP4 * SUSE Linux Enterprise Server for SAP Applications 15 SP5 An update that solves three vulnerabilities can now be installed. ## Description: This update for the Linux Kernel 5.14.21-150500_13_5 fixes several issues. The following security issues were fixed: * CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211395). * CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213063). * CVE-2023-3090: Fixed a heapout-of-bounds write in the ipvlan network driver (bsc#1212849). ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Live Patching 15-SP4 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2023-3676=1 * openSUSE Leap 15.5 zypper in -t patch SUSE-2023-3679=1 * SUSE Linux Enterprise Live Patching 15-SP5 zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2023-3679=1 ## Package List: * SUSE Linux Enterprise Live Patching 15-SP4 (x86_64) * kernel-livepatch-SLE15-SP4-RT_Update_8-debugsource-2-150400.2.1 * kernel-livepatch-5_14_21-150400_15_37-rt-2-150400.2.1 * kernel-livepatch-5_14_21-150400_15_37-rt-debuginfo-2-150400.2.1 * openSUSE Leap 15.5 (x86_64) * kernel-livepatch-5_14_21-150500_13_5-rt-2-150500.2.1 * kernel-livepatch-5_14_21-150500_13_5-rt-debuginfo-2-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_1-debugsource-2-150500.2.1 * SUSE Linux Enterprise Live Patching 15-SP5 (x86_64) * kernel-livepatch-5_14_21-150500_13_5-rt-2-150500.2.1 * kernel-livepatch-5_14_21-150500_13_5-rt-debuginfo-2-150500.2.1 * kernel-livepatch-SLE15-SP5-RT_Update_1-debugsource-2-150500.2.1 ## References: * https://www.suse.com/security/cve/CVE-2023-2156.html * https://www.suse.com/security/cve/CVE-2023-3090.html * https://www.suse.com/security/cve/CVE-2023-35001.html * https://bugzilla.suse.com/show_bug.cgi?id=1211395 * https://bugzilla.suse.com/show_bug.cgi?id=1212849 * https://bugzilla.suse.com/show_bug.cgi?id=1213063 . A patch for Linux Kernel 5.14.21-150500_13_5 has been issued to rectify severe vulnerabilities impacting openSUSE platforms.. Linux Kernel Patch, openSUSE Security, Kernel RT Update. . Severity: Important. LinuxSecurity.com Team
Sep 19, 2023
•Important
OpenSUSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!