SUSE-SU-2024:3227-1: important: Security update for the Linux Kernel

SLE-UPDATES null at suse.de
Thu Sep 12 16:31:27 UTC 2024



# Security update for the Linux Kernel

Announcement ID: SUSE-SU-2024:3227-1  
Rating: important  
References:

  * bsc#1193629
  * bsc#1194111
  * bsc#1194765
  * bsc#1196261
  * bsc#1196516
  * bsc#1196894
  * bsc#1198017
  * bsc#1203360
  * bsc#1206006
  * bsc#1206258
  * bsc#1207158
  * bsc#1216834
  * bsc#1221326
  * bsc#1221645
  * bsc#1223191
  * bsc#1224105
  * bsc#1227832
  * bsc#1228020
  * bsc#1228466
  * bsc#1228516
  * bsc#1228576
  * bsc#1228718
  * bsc#1228801
  * bsc#1228959
  * bsc#1229042
  * bsc#1229292
  * bsc#1229400
  * bsc#1229454
  * bsc#1229500
  * bsc#1229503
  * bsc#1229506
  * bsc#1229507
  * bsc#1229508
  * bsc#1229509
  * bsc#1229510
  * bsc#1229512
  * bsc#1229516
  * bsc#1229522
  * bsc#1229526
  * bsc#1229528
  * bsc#1229531
  * bsc#1229533
  * bsc#1229535
  * bsc#1229536
  * bsc#1229537
  * bsc#1229540
  * bsc#1229544
  * bsc#1229554
  * bsc#1229557
  * bsc#1229565
  * bsc#1229566
  * bsc#1229568
  * bsc#1229581
  * bsc#1229598
  * bsc#1229603
  * bsc#1229604
  * bsc#1229608
  * bsc#1229611
  * bsc#1229612
  * bsc#1229613
  * bsc#1229614
  * bsc#1229617
  * bsc#1229619
  * bsc#1229620
  * bsc#1229622
  * bsc#1229623
  * bsc#1229624
  * bsc#1229625
  * bsc#1229626
  * bsc#1229628
  * bsc#1229629
  * bsc#1229630
  * bsc#1229631
  * bsc#1229635
  * bsc#1229636
  * bsc#1229637
  * bsc#1229638
  * bsc#1229639
  * bsc#1229641
  * bsc#1229642
  * bsc#1229643
  * bsc#1229645
  * bsc#1229657
  * bsc#1229664
  * bsc#1229707
  * bsc#1229792

  
Cross-References:

  * CVE-2021-4441
  * CVE-2022-48868
  * CVE-2022-48869
  * CVE-2022-48870
  * CVE-2022-48871
  * CVE-2022-48872
  * CVE-2022-48873
  * CVE-2022-48875
  * CVE-2022-48878
  * CVE-2022-48880
  * CVE-2022-48890
  * CVE-2022-48891
  * CVE-2022-48896
  * CVE-2022-48898
  * CVE-2022-48899
  * CVE-2022-48903
  * CVE-2022-48904
  * CVE-2022-48905
  * CVE-2022-48907
  * CVE-2022-48909
  * CVE-2022-48912
  * CVE-2022-48913
  * CVE-2022-48914
  * CVE-2022-48915
  * CVE-2022-48916
  * CVE-2022-48917
  * CVE-2022-48918
  * CVE-2022-48919
  * CVE-2022-48921
  * CVE-2022-48924
  * CVE-2022-48925
  * CVE-2022-48926
  * CVE-2022-48927
  * CVE-2022-48928
  * CVE-2022-48929
  * CVE-2022-48930
  * CVE-2022-48931
  * CVE-2022-48932
  * CVE-2022-48934
  * CVE-2022-48935
  * CVE-2022-48937
  * CVE-2022-48938
  * CVE-2022-48941
  * CVE-2022-48942
  * CVE-2022-48943
  * CVE-2023-52489
  * CVE-2023-52893
  * CVE-2023-52894
  * CVE-2023-52896
  * CVE-2023-52898
  * CVE-2023-52900
  * CVE-2023-52901
  * CVE-2023-52905
  * CVE-2023-52907
  * CVE-2023-52911
  * CVE-2024-40910
  * CVE-2024-41009
  * CVE-2024-41062
  * CVE-2024-41087
  * CVE-2024-42077
  * CVE-2024-42126
  * CVE-2024-42232
  * CVE-2024-42271
  * CVE-2024-43853
  * CVE-2024-43861
  * CVE-2024-43882
  * CVE-2024-43883
  * CVE-2024-44938
  * CVE-2024-44947

  
CVSS scores:

  * CVE-2021-4441 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2021-4441 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48868 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48868 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48869 ( SUSE ):  6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
  * CVE-2022-48869 ( NVD ):  4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48870 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48870 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48871 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
  * CVE-2022-48871 ( NVD ):  7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
  * CVE-2022-48872 ( SUSE ):  7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2022-48872 ( NVD ):  7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2022-48873 ( SUSE ):  7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2022-48873 ( NVD ):  7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2022-48875 ( SUSE ):  4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48875 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48878 ( SUSE ):  6.9
    CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
  * CVE-2022-48878 ( SUSE ):  6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
  * CVE-2022-48878 ( NVD ):  7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2022-48880 ( SUSE ):  4.8
    CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
  * CVE-2022-48880 ( SUSE ):  4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
  * CVE-2022-48890 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48890 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48891 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48891 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48896 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48896 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48898 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48898 ( NVD ):  4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48899 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48899 ( NVD ):  4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48903 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48903 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48904 ( SUSE ):  3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
  * CVE-2022-48904 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48905 ( SUSE ):  3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
  * CVE-2022-48905 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48907 ( SUSE ):  3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
  * CVE-2022-48907 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48909 ( SUSE ):  5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
  * CVE-2022-48909 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48912 ( SUSE ):  7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2022-48912 ( NVD ):  7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2022-48913 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48913 ( NVD ):  7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2022-48914 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48914 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48915 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48915 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48916 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48916 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48917 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48917 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48918 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48918 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48919 ( SUSE ):  7.1
    CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  * CVE-2022-48919 ( SUSE ):  6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
  * CVE-2022-48919 ( NVD ):  7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2022-48921 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48921 ( NVD ):  4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48924 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48924 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48925 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48925 ( NVD ):  7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2022-48926 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48926 ( NVD ):  7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2022-48927 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48927 ( NVD ):  7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2022-48928 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48928 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48929 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48929 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48930 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48930 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48931 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48931 ( NVD ):  4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48932 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48932 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48934 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48934 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48935 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48935 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48937 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48937 ( NVD ):  3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
  * CVE-2022-48938 ( SUSE ):  5.4
    CVSS:4.0/AV:P/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  * CVE-2022-48938 ( SUSE ):  6.6 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2022-48938 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48941 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48941 ( NVD ):  4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48942 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48942 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48943 ( SUSE ):  4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2022-48943 ( NVD ):  7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2023-52489 ( SUSE ):  5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-52893 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-52893 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-52894 ( SUSE ):  6.8
    CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
  * CVE-2023-52894 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-52894 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-52896 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-52896 ( NVD ):  4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-52898 ( SUSE ):  5.7
    CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
  * CVE-2023-52898 ( SUSE ):  4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-52900 ( SUSE ):  6.8
    CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
  * CVE-2023-52900 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-52901 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-52905 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-52907 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-52911 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2023-52911 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-40910 ( SUSE ):  7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
  * CVE-2024-40910 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-41009 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-41009 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-41062 ( SUSE ):  7.3
    CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  * CVE-2024-41062 ( SUSE ):  7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2024-41087 ( SUSE ):  7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2024-41087 ( NVD ):  7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2024-42077 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-42077 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-42126 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-42232 ( SUSE ):  7.3
    CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  * CVE-2024-42232 ( SUSE ):  7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2024-42232 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-42271 ( SUSE ):  7.3
    CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  * CVE-2024-42271 ( SUSE ):  7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2024-42271 ( NVD ):  7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2024-43853 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-43853 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-43861 ( SUSE ):  7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-43861 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-43882 ( SUSE ):  7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2024-43882 ( NVD ):  7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2024-43883 ( SUSE ):  5.4
    CVSS:4.0/AV:P/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  * CVE-2024-43883 ( SUSE ):  6.4 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
  * CVE-2024-44938 ( SUSE ):  7.3
    CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  * CVE-2024-44938 ( SUSE ):  7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2024-44938 ( NVD ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-44947 ( SUSE ):  6.8
    CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
  * CVE-2024-44947 ( SUSE ):  5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

  
Affected Products:

  * SUSE Linux Enterprise Micro 5.3
  * SUSE Linux Enterprise Micro 5.4
  * SUSE Linux Enterprise Micro for Rancher 5.3
  * SUSE Linux Enterprise Micro for Rancher 5.4

  
  
An update that solves 69 vulnerabilities and has 17 security fixes can now be
installed.

## Description:

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various
security bugfixes.

The following security bugs were fixed:

  * CVE-2024-41062: bluetooth/l2cap: sync sock recv cb and release
    (bsc#1228576).
  * CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate
    (bsc#1229454).
  * CVE-2024-43883: Do not drop references before new references are gained
    (bsc#1229707).
  * CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
  * CVE-2023-52489: mm/sparsemem: fix race in accessing memory_section->usage
    (bsc#1221326).
  * CVE-2024-44938: Fix shift-out-of-bounds in dbDiscardAG (bsc#1229792).
  * CVE-2024-41087: Fix double free on error (CVE-2024-41087,bsc#1228466).
  * CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage.
    (bsc#1229503)
  * CVE-2022-48935: Fixed an unregister flowtable hooks on netns exit
    (bsc#1229619)
  * CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641)
  * CVE-2024-42271: Fixed a use after free in iucv_sock_close(). (bsc#1229400)
  * CVE-2024-42232: Fixed a race between delayed_work() and ceph_monc_stop().
    (bsc#1228959)
  * CVE-2024-40910: Fix refcount imbalance on inbound connections (bsc#1227832).
  * CVE-2024-41009: bpf: Fix overrunning reservations in ringbuf (bsc#1228020).

The following non-security bugs were fixed:

  * Bluetooth: L2CAP: Fix deadlock (git-fixes).
  * mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes).
  * mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes).
  * nvme_core: scan namespaces asynchronously (bsc#1224105).

## Special Instructions and Notes:

  * Please reboot the system after installing this update.

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * SUSE Linux Enterprise Micro for Rancher 5.3  
    zypper in -t patch SUSE-SLE-Micro-5.3-2024-3227=1

  * SUSE Linux Enterprise Micro 5.3  
    zypper in -t patch SUSE-SLE-Micro-5.3-2024-3227=1

  * SUSE Linux Enterprise Micro for Rancher 5.4  
    zypper in -t patch SUSE-SLE-Micro-5.4-2024-3227=1

  * SUSE Linux Enterprise Micro 5.4  
    zypper in -t patch SUSE-SLE-Micro-5.4-2024-3227=1

## Package List:

  * SUSE Linux Enterprise Micro for Rancher 5.3 (nosrc x86_64)
    * kernel-rt-5.14.21-150400.15.91.3
  * SUSE Linux Enterprise Micro for Rancher 5.3 (x86_64)
    * kernel-rt-debugsource-5.14.21-150400.15.91.3
    * kernel-rt-debuginfo-5.14.21-150400.15.91.3
  * SUSE Linux Enterprise Micro for Rancher 5.3 (noarch)
    * kernel-source-rt-5.14.21-150400.15.91.3
  * SUSE Linux Enterprise Micro 5.3 (nosrc x86_64)
    * kernel-rt-5.14.21-150400.15.91.3
  * SUSE Linux Enterprise Micro 5.3 (x86_64)
    * kernel-rt-debugsource-5.14.21-150400.15.91.3
    * kernel-rt-debuginfo-5.14.21-150400.15.91.3
  * SUSE Linux Enterprise Micro 5.3 (noarch)
    * kernel-source-rt-5.14.21-150400.15.91.3
  * SUSE Linux Enterprise Micro for Rancher 5.4 (nosrc x86_64)
    * kernel-rt-5.14.21-150400.15.91.3
  * SUSE Linux Enterprise Micro for Rancher 5.4 (x86_64)
    * kernel-rt-debugsource-5.14.21-150400.15.91.3
    * kernel-rt-debuginfo-5.14.21-150400.15.91.3
  * SUSE Linux Enterprise Micro for Rancher 5.4 (noarch)
    * kernel-source-rt-5.14.21-150400.15.91.3
  * SUSE Linux Enterprise Micro 5.4 (nosrc x86_64)
    * kernel-rt-5.14.21-150400.15.91.3
  * SUSE Linux Enterprise Micro 5.4 (x86_64)
    * kernel-rt-debugsource-5.14.21-150400.15.91.3
    * kernel-rt-debuginfo-5.14.21-150400.15.91.3
  * SUSE Linux Enterprise Micro 5.4 (noarch)
    * kernel-source-rt-5.14.21-150400.15.91.3

## References:

  * https://www.suse.com/security/cve/CVE-2021-4441.html
  * https://www.suse.com/security/cve/CVE-2022-48868.html
  * https://www.suse.com/security/cve/CVE-2022-48869.html
  * https://www.suse.com/security/cve/CVE-2022-48870.html
  * https://www.suse.com/security/cve/CVE-2022-48871.html
  * https://www.suse.com/security/cve/CVE-2022-48872.html
  * https://www.suse.com/security/cve/CVE-2022-48873.html
  * https://www.suse.com/security/cve/CVE-2022-48875.html
  * https://www.suse.com/security/cve/CVE-2022-48878.html
  * https://www.suse.com/security/cve/CVE-2022-48880.html
  * https://www.suse.com/security/cve/CVE-2022-48890.html
  * https://www.suse.com/security/cve/CVE-2022-48891.html
  * https://www.suse.com/security/cve/CVE-2022-48896.html
  * https://www.suse.com/security/cve/CVE-2022-48898.html
  * https://www.suse.com/security/cve/CVE-2022-48899.html
  * https://www.suse.com/security/cve/CVE-2022-48903.html
  * https://www.suse.com/security/cve/CVE-2022-48904.html
  * https://www.suse.com/security/cve/CVE-2022-48905.html
  * https://www.suse.com/security/cve/CVE-2022-48907.html
  * https://www.suse.com/security/cve/CVE-2022-48909.html
  * https://www.suse.com/security/cve/CVE-2022-48912.html
  * https://www.suse.com/security/cve/CVE-2022-48913.html
  * https://www.suse.com/security/cve/CVE-2022-48914.html
  * https://www.suse.com/security/cve/CVE-2022-48915.html
  * https://www.suse.com/security/cve/CVE-2022-48916.html
  * https://www.suse.com/security/cve/CVE-2022-48917.html
  * https://www.suse.com/security/cve/CVE-2022-48918.html
  * https://www.suse.com/security/cve/CVE-2022-48919.html
  * https://www.suse.com/security/cve/CVE-2022-48921.html
  * https://www.suse.com/security/cve/CVE-2022-48924.html
  * https://www.suse.com/security/cve/CVE-2022-48925.html
  * https://www.suse.com/security/cve/CVE-2022-48926.html
  * https://www.suse.com/security/cve/CVE-2022-48927.html
  * https://www.suse.com/security/cve/CVE-2022-48928.html
  * https://www.suse.com/security/cve/CVE-2022-48929.html
  * https://www.suse.com/security/cve/CVE-2022-48930.html
  * https://www.suse.com/security/cve/CVE-2022-48931.html
  * https://www.suse.com/security/cve/CVE-2022-48932.html
  * https://www.suse.com/security/cve/CVE-2022-48934.html
  * https://www.suse.com/security/cve/CVE-2022-48935.html
  * https://www.suse.com/security/cve/CVE-2022-48937.html
  * https://www.suse.com/security/cve/CVE-2022-48938.html
  * https://www.suse.com/security/cve/CVE-2022-48941.html
  * https://www.suse.com/security/cve/CVE-2022-48942.html
  * https://www.suse.com/security/cve/CVE-2022-48943.html
  * https://www.suse.com/security/cve/CVE-2023-52489.html
  * https://www.suse.com/security/cve/CVE-2023-52893.html
  * https://www.suse.com/security/cve/CVE-2023-52894.html
  * https://www.suse.com/security/cve/CVE-2023-52896.html
  * https://www.suse.com/security/cve/CVE-2023-52898.html
  * https://www.suse.com/security/cve/CVE-2023-52900.html
  * https://www.suse.com/security/cve/CVE-2023-52901.html
  * https://www.suse.com/security/cve/CVE-2023-52905.html
  * https://www.suse.com/security/cve/CVE-2023-52907.html
  * https://www.suse.com/security/cve/CVE-2023-52911.html
  * https://www.suse.com/security/cve/CVE-2024-40910.html
  * https://www.suse.com/security/cve/CVE-2024-41009.html
  * https://www.suse.com/security/cve/CVE-2024-41062.html
  * https://www.suse.com/security/cve/CVE-2024-41087.html
  * https://www.suse.com/security/cve/CVE-2024-42077.html
  * https://www.suse.com/security/cve/CVE-2024-42126.html
  * https://www.suse.com/security/cve/CVE-2024-42232.html
  * https://www.suse.com/security/cve/CVE-2024-42271.html
  * https://www.suse.com/security/cve/CVE-2024-43853.html
  * https://www.suse.com/security/cve/CVE-2024-43861.html
  * https://www.suse.com/security/cve/CVE-2024-43882.html
  * https://www.suse.com/security/cve/CVE-2024-43883.html
  * https://www.suse.com/security/cve/CVE-2024-44938.html
  * https://www.suse.com/security/cve/CVE-2024-44947.html
  * https://bugzilla.suse.com/show_bug.cgi?id=1193629
  * https://bugzilla.suse.com/show_bug.cgi?id=1194111
  * https://bugzilla.suse.com/show_bug.cgi?id=1194765
  * https://bugzilla.suse.com/show_bug.cgi?id=1196261
  * https://bugzilla.suse.com/show_bug.cgi?id=1196516
  * https://bugzilla.suse.com/show_bug.cgi?id=1196894
  * https://bugzilla.suse.com/show_bug.cgi?id=1198017
  * https://bugzilla.suse.com/show_bug.cgi?id=1203360
  * https://bugzilla.suse.com/show_bug.cgi?id=1206006
  * https://bugzilla.suse.com/show_bug.cgi?id=1206258
  * https://bugzilla.suse.com/show_bug.cgi?id=1207158
  * https://bugzilla.suse.com/show_bug.cgi?id=1216834
  * https://bugzilla.suse.com/show_bug.cgi?id=1221326
  * https://bugzilla.suse.com/show_bug.cgi?id=1221645
  * https://bugzilla.suse.com/show_bug.cgi?id=1223191
  * https://bugzilla.suse.com/show_bug.cgi?id=1224105
  * https://bugzilla.suse.com/show_bug.cgi?id=1227832
  * https://bugzilla.suse.com/show_bug.cgi?id=1228020
  * https://bugzilla.suse.com/show_bug.cgi?id=1228466
  * https://bugzilla.suse.com/show_bug.cgi?id=1228516
  * https://bugzilla.suse.com/show_bug.cgi?id=1228576
  * https://bugzilla.suse.com/show_bug.cgi?id=1228718
  * https://bugzilla.suse.com/show_bug.cgi?id=1228801
  * https://bugzilla.suse.com/show_bug.cgi?id=1228959
  * https://bugzilla.suse.com/show_bug.cgi?id=1229042
  * https://bugzilla.suse.com/show_bug.cgi?id=1229292
  * https://bugzilla.suse.com/show_bug.cgi?id=1229400
  * https://bugzilla.suse.com/show_bug.cgi?id=1229454
  * https://bugzilla.suse.com/show_bug.cgi?id=1229500
  * https://bugzilla.suse.com/show_bug.cgi?id=1229503
  * https://bugzilla.suse.com/show_bug.cgi?id=1229506
  * https://bugzilla.suse.com/show_bug.cgi?id=1229507
  * https://bugzilla.suse.com/show_bug.cgi?id=1229508
  * https://bugzilla.suse.com/show_bug.cgi?id=1229509
  * https://bugzilla.suse.com/show_bug.cgi?id=1229510
  * https://bugzilla.suse.com/show_bug.cgi?id=1229512
  * https://bugzilla.suse.com/show_bug.cgi?id=1229516
  * https://bugzilla.suse.com/show_bug.cgi?id=1229522
  * https://bugzilla.suse.com/show_bug.cgi?id=1229526
  * https://bugzilla.suse.com/show_bug.cgi?id=1229528
  * https://bugzilla.suse.com/show_bug.cgi?id=1229531
  * https://bugzilla.suse.com/show_bug.cgi?id=1229533
  * https://bugzilla.suse.com/show_bug.cgi?id=1229535
  * https://bugzilla.suse.com/show_bug.cgi?id=1229536
  * https://bugzilla.suse.com/show_bug.cgi?id=1229537
  * https://bugzilla.suse.com/show_bug.cgi?id=1229540
  * https://bugzilla.suse.com/show_bug.cgi?id=1229544
  * https://bugzilla.suse.com/show_bug.cgi?id=1229554
  * https://bugzilla.suse.com/show_bug.cgi?id=1229557
  * https://bugzilla.suse.com/show_bug.cgi?id=1229565
  * https://bugzilla.suse.com/show_bug.cgi?id=1229566
  * https://bugzilla.suse.com/show_bug.cgi?id=1229568
  * https://bugzilla.suse.com/show_bug.cgi?id=1229581
  * https://bugzilla.suse.com/show_bug.cgi?id=1229598
  * https://bugzilla.suse.com/show_bug.cgi?id=1229603
  * https://bugzilla.suse.com/show_bug.cgi?id=1229604
  * https://bugzilla.suse.com/show_bug.cgi?id=1229608
  * https://bugzilla.suse.com/show_bug.cgi?id=1229611
  * https://bugzilla.suse.com/show_bug.cgi?id=1229612
  * https://bugzilla.suse.com/show_bug.cgi?id=1229613
  * https://bugzilla.suse.com/show_bug.cgi?id=1229614
  * https://bugzilla.suse.com/show_bug.cgi?id=1229617
  * https://bugzilla.suse.com/show_bug.cgi?id=1229619
  * https://bugzilla.suse.com/show_bug.cgi?id=1229620
  * https://bugzilla.suse.com/show_bug.cgi?id=1229622
  * https://bugzilla.suse.com/show_bug.cgi?id=1229623
  * https://bugzilla.suse.com/show_bug.cgi?id=1229624
  * https://bugzilla.suse.com/show_bug.cgi?id=1229625
  * https://bugzilla.suse.com/show_bug.cgi?id=1229626
  * https://bugzilla.suse.com/show_bug.cgi?id=1229628
  * https://bugzilla.suse.com/show_bug.cgi?id=1229629
  * https://bugzilla.suse.com/show_bug.cgi?id=1229630
  * https://bugzilla.suse.com/show_bug.cgi?id=1229631
  * https://bugzilla.suse.com/show_bug.cgi?id=1229635
  * https://bugzilla.suse.com/show_bug.cgi?id=1229636
  * https://bugzilla.suse.com/show_bug.cgi?id=1229637
  * https://bugzilla.suse.com/show_bug.cgi?id=1229638
  * https://bugzilla.suse.com/show_bug.cgi?id=1229639
  * https://bugzilla.suse.com/show_bug.cgi?id=1229641
  * https://bugzilla.suse.com/show_bug.cgi?id=1229642
  * https://bugzilla.suse.com/show_bug.cgi?id=1229643
  * https://bugzilla.suse.com/show_bug.cgi?id=1229645
  * https://bugzilla.suse.com/show_bug.cgi?id=1229657
  * https://bugzilla.suse.com/show_bug.cgi?id=1229664
  * https://bugzilla.suse.com/show_bug.cgi?id=1229707
  * https://bugzilla.suse.com/show_bug.cgi?id=1229792

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-updates/attachments/20240912/050fb459/attachment.htm>


More information about the sle-updates mailing list