RHSA-2024:8617: Low: SUSE Liberty Linux security update for kernel

Thu Oct 31 16:05:44 UTC 2024

# security update for kernel

Announcement ID: RHSA-2024:8617
Rating: Low

Cross-References:

  * CVE-2021-47383
  * CVE-2024-2201
  * CVE-2024-26640
  * CVE-2024-26826
  * CVE-2024-26923
  * CVE-2024-26935
  * CVE-2024-26961
  * CVE-2024-36244
  * CVE-2024-39472
  * CVE-2024-39504
  * CVE-2024-40904
  * CVE-2024-40931
  * CVE-2024-40960
  * CVE-2024-40972
  * CVE-2024-40977
  * CVE-2024-40995
  * CVE-2024-40998
  * CVE-2024-41005
  * CVE-2024-41013
  * CVE-2024-41014
  * CVE-2024-43854
  * CVE-2024-45018

CVSS scores:

  * CVE-2021-47383 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2024-2201 ( SUSE ): 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
  * CVE-2024-26640 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-26826 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-26923 ( SUSE ): 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
  * CVE-2024-26935 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
  * CVE-2024-26961 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-36244 ( SUSE ): 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L
  * CVE-2024-39472 ( SUSE ): 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
  * CVE-2024-39504 ( SUSE ): 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-40904 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-40931 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
  * CVE-2024-40960 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-40972 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-40977 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-40995 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-40998 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-41005 ( SUSE ): 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H
  * CVE-2024-41013 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
  * CVE-2024-41014 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-43854 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
  * CVE-2024-45018 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Affected Products:

  * SUSE Liberty Linux 9

An update that solves 22 vulnerabilities can now be installed.

## Description:

This security update provides a functional equivalent of RHSA-2024:8617.
The original Red Hat(R) advisory is available from the Red Hat web site at
https://access.redhat.com/errata/RHSA-2024:8617.

## Package List:

  * SUSE Liberty Linux 9:
    * bpftool 7.3.0-427.42.1.el9_4
    * kernel 5.14.0-427.42.1.el9_4
    * kernel-abi-stablelists 5.14.0-427.42.1.el9_4
    * kernel-core 5.14.0-427.42.1.el9_4
    * kernel-cross-headers 5.14.0-427.42.1.el9_4
    * kernel-debug 5.14.0-427.42.1.el9_4
    * kernel-debug-core 5.14.0-427.42.1.el9_4
    * kernel-debug-devel 5.14.0-427.42.1.el9_4
    * kernel-debug-devel-matched 5.14.0-427.42.1.el9_4
    * kernel-debug-modules 5.14.0-427.42.1.el9_4
    * kernel-debug-modules-core 5.14.0-427.42.1.el9_4
    * kernel-debug-modules-extra 5.14.0-427.42.1.el9_4
    * kernel-debug-uki-virt 5.14.0-427.42.1.el9_4
    * kernel-devel 5.14.0-427.42.1.el9_4
    * kernel-devel-matched 5.14.0-427.42.1.el9_4
    * kernel-doc 5.14.0-427.42.1.el9_4
    * kernel-headers 5.14.0-427.42.1.el9_4
    * kernel-modules 5.14.0-427.42.1.el9_4
    * kernel-modules-core 5.14.0-427.42.1.el9_4
    * kernel-modules-extra 5.14.0-427.42.1.el9_4
    * kernel-tools 5.14.0-427.42.1.el9_4
    * kernel-tools-libs 5.14.0-427.42.1.el9_4
    * kernel-tools-libs-devel 5.14.0-427.42.1.el9_4
    * kernel-uki-virt 5.14.0-427.42.1.el9_4
    * libperf 5.14.0-427.42.1.el9_4
    * perf 5.14.0-427.42.1.el9_4
    * python3-perf 5.14.0-427.42.1.el9_4
    * rtla 5.14.0-427.42.1.el9_4
    * rv 5.14.0-427.42.1.el9_4

## References:

  * https://www.suse.com/security/cve/CVE-2021-47383.html
  * https://www.suse.com/security/cve/CVE-2024-2201.html
  * https://www.suse.com/security/cve/CVE-2024-26640.html
  * https://www.suse.com/security/cve/CVE-2024-26826.html
  * https://www.suse.com/security/cve/CVE-2024-26923.html
  * https://www.suse.com/security/cve/CVE-2024-26935.html
  * https://www.suse.com/security/cve/CVE-2024-26961.html
  * https://www.suse.com/security/cve/CVE-2024-36244.html
  * https://www.suse.com/security/cve/CVE-2024-39472.html
  * https://www.suse.com/security/cve/CVE-2024-39504.html
  * https://www.suse.com/security/cve/CVE-2024-40904.html
  * https://www.suse.com/security/cve/CVE-2024-40931.html
  * https://www.suse.com/security/cve/CVE-2024-40960.html
  * https://www.suse.com/security/cve/CVE-2024-40972.html
  * https://www.suse.com/security/cve/CVE-2024-40977.html
  * https://www.suse.com/security/cve/CVE-2024-40995.html
  * https://www.suse.com/security/cve/CVE-2024-40998.html
  * https://www.suse.com/security/cve/CVE-2024-41005.html
  * https://www.suse.com/security/cve/CVE-2024-41013.html
  * https://www.suse.com/security/cve/CVE-2024-41014.html
  * https://www.suse.com/security/cve/CVE-2024-43854.html
  * https://www.suse.com/security/cve/CVE-2024-45018.html