Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2024:2894-1 Final 1 1 2024-08-13T14:07:49Z current 2024-08-13T14:07:49Z 2024-08-13T14:07:49Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47086: phonet/pep: refuse to enable an unbound pipe (bsc#1220952). - CVE-2021-47103: net: sock: preserve kabi for sock (bsc#1221010). - CVE-2021-47186: tipc: check for null after calling kmemdup (bsc#1222702). - CVE-2021-47546: Kabi fix for ipv6: fix memory leak in fib6_rule_suppress (bsc#1225504). - CVE-2021-47547: net: tulip: de4x5: fix the problem that the array 'lp->phy' may be out of bound (bsc#1225505). - CVE-2021-47588: sit: do not call ipip6_dev_free() from sit_init_net() (bsc#1226568). - CVE-2021-47590: mptcp: fix deadlock in __mptcp_push_pending() (bsc#1226565). - CVE-2021-47591: mptcp: remove tcp ulp setsockopt support (bsc#1226570). - CVE-2021-47593: mptcp: clear 'kern' flag from fallback sockets (bsc#1226551). - CVE-2021-47598: sch_cake: do not call cake_destroy() from cake_init() (bsc#1226574). - CVE-2021-47599: btrfs: use latest_dev in btrfs_show_devname (bsc#1226571) - CVE-2021-47606: net: netlink: af_netlink: Prevent empty skb by adding a check on len (bsc#1226555). - CVE-2021-47623: powerpc/fixmap: Fix VM debug warning on unmap (bsc#1227919). - CVE-2022-48785: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() (bsc#1227927) - CVE-2022-48810: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path (bsc#1227936). - CVE-2022-48850: net-sysfs: add check for netdevice being present to speed_show (bsc#1228071) - CVE-2022-48855: sctp: fix kernel-infoleak for SCTP sockets (bsc#1228003). - CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138). - CVE-2023-52573: net: rds: Fix possible NULL-pointer dereference (bsc#1220869) - CVE-2023-52580: net/core: Fix ETH_P_1588 flow dissector (bsc#1220876). - CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489). - CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088). - CVE-2023-52812: drm/amd: check num of link levels when update pcie param (bsc#1225564). - CVE-2023-52857: drm/mediatek: Fix coverity issue with unintentional integer overflow (bsc#1225581). - CVE-2023-52863: hwmon: (axi-fan-control) Fix possible NULL pointer dereference (bsc#1225586). - CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187). - CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942). - CVE-2024-26633: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (bsc#1221647). - CVE-2024-26635: llc: Drop support for ETH_P_TR_802_2 (bsc#1221656). - CVE-2024-26636: llc: make llc_ui_sendmsg() more robust against bonding changes (bsc#1221659). - CVE-2024-26641: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (bsc#1221654). - CVE-2024-26661: drm/amd/display: Add NULL test for 'timing generator' in (bsc#1222323) - CVE-2024-26663: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (bsc#1222326). - CVE-2024-26665: tunnels: fix out of bounds access when building IPv6 PMTU error (bsc#1222328). - CVE-2024-26802: stmmac: Clear variable when destroying workqueue (bsc#1222799). - CVE-2024-26863: hsr: Fix uninit-value access in hsr_get_node() (bsc#1223021). - CVE-2024-26961: mac802154: fix llsec key resources release in mac802154_llsec_key_del (bsc#1223652). - CVE-2024-27015: netfilter: flowtable: incorrect pppoe tuple (bsc#1223806). - CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813) - CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815) - CVE-2024-27025: nbd: null check for nla_nest_start (bsc#1223778) - CVE-2024-27065: netfilter: nf_tables: do not compare internal table flags on updates (bsc#1223836). - CVE-2024-27402: phonet/pep: fix racy skb_queue_empty() use (bsc#1224414). - CVE-2024-27437: vfio/pci: Disable auto-enable of exclusive INTx IRQ (bsc#1222625). - CVE-2024-35805: dm snapshot: fix lockup in dm_exception_table_exit (bsc#1224743). - CVE-2024-35819: soc: fsl: qbman: Use raw spinlock for cgr_lock (bsc#1224683). - CVE-2024-35837: net: mvpp2: clear BM pool before initialization (bsc#1224500). - CVE-2024-35853: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (bsc#1224604). - CVE-2024-35889: idpf: fix kernel panic on unknown packet types (bsc#1224517). - CVE-2024-35890: gro: fix ownership transfer (bsc#1224516). - CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512) - CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499) - CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641) - CVE-2024-35949: btrfs: make sure that WRITTEN is set on all metadata blocks (bsc#1224700) - CVE-2024-35961: net/mlx5: Restore mistakenly dropped parts in register devlink flow (bsc#1224585). - CVE-2024-35979: raid1: fix use-after-free for original bio in raid1_write_request() (bsc#1224572). - CVE-2024-35995: ACPI: CPPC: Fix access width used for PCC registers (bsc#1224557). - CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge (bsc#1224548). - CVE-2024-36004: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (bsc#1224545) - CVE-2024-36901: ipv6: prevent NULL dereference in ip6_output() (bsc#1225711) - CVE-2024-36902: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (bsc#1225719). - CVE-2024-36909: Drivers: hv: vmbus: Do not free ring buffers that couldn't be re-encrypted (bsc#1225744). - CVE-2024-36910: uio_hv_generic: Do not free decrypted memory (bsc#1225717). - CVE-2024-36911: hv_netvsc: Do not free decrypted memory (bsc#1225745). - CVE-2024-36912: Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl (bsc#1225752). - CVE-2024-36913: Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails (bsc#1225753). - CVE-2024-36914: drm/amd/display: Skip on writeback when it's not applicable (bsc#1225757). - CVE-2024-36919: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (bsc#1225767). - CVE-2024-36923: fs/9p: fix uninitialized values during inode evict (bsc#1225815). - CVE-2024-36939: nfs: Handle error of rpc_proc_register() in nfs_net_init() (bsc#1225838). - CVE-2024-36946: phonet: fix rtm_phonet_notify() skb allocation (bsc#1225851). - CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1226519). - CVE-2024-38555: net/mlx5: Discard command completions in internal error (bsc#1226607). - CVE-2024-38558: net: openvswitch: fix overwriting ct original tuple for ICMPv6 (bsc#1226783). - CVE-2024-38570: gfs2: Fix potential glock use-after-free on unmount (bsc#1226775). - CVE-2024-38586: r8169: Fix possible ring buffer corruption on fragmented Tx packets (bsc#1226750). - CVE-2024-38598: md: fix resync softlockup when bitmap size is less than array size (bsc#1226757). - CVE-2024-38628: usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind (bsc#1226911). - CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993). - CVE-2024-39371: io_uring: check for non-NULL file pointer in io_file_can_poll() (bsc#1226990). - CVE-2024-39463: 9p: add missing locking around taking dentry fid list (bsc#1227090). - CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432). - CVE-2024-39482: bcache: fix variable length array abuse in btree_iter (bsc#1227447). - CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573) - CVE-2024-39490: ipv6: sr: fix missing sk_buff release in seg6_input_core (bsc#1227626). - CVE-2024-39493: crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak (bsc#1227620). - CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716). - CVE-2024-39497: drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE) (bsc#1227722) - CVE-2024-39502: ionic: fix use after netif_napi_del() (bsc#1227755). - CVE-2024-39506: liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet (bsc#1227729). - CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730). - CVE-2024-39508: io_uring/io-wq: Use set_bit() and test_bit() at worker->flags (bsc#1227732). - CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762). - CVE-2024-40906: net/mlx5: Always stop health timer during driver removal (bsc#1227763). - CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783). - CVE-2024-40909: bpf: Fix a potential use-after-free in bpf_link_free() (bsc#1227798). - CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() (bsc#1227779). - CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786). - CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780). - CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797). - CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836). - CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800). - CVE-2024-40943: ocfs2: fix races between hole punching and AIO+DIO (bsc#1227849). - CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806). - CVE-2024-40954: net: do not leave a dangling sk pointer, when socket creation fails (bsc#1227808) - CVE-2024-40958: netns: Make get_net_ns() handle zero refcount net (bsc#1227812). - CVE-2024-40959: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() (bsc#1227884). - CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813). - CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814). - CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886). - CVE-2024-40967: serial: imx: Introduce timeout when waiting on transmitter empty (bsc#1227891). - CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899). - CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910). - CVE-2024-40977: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery (bsc#1227950). - CVE-2024-40982: ssb: Fix potential NULL pointer dereference in ssb_device_uevent() (bsc#1227865). - CVE-2024-40989: KVM: arm64: Disassociate vcpus from redistributor region on teardown (bsc#1227823). - CVE-2024-40994: ptp: fix integer overflow in max_vclocks_store (bsc#1227829). - CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866). - CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913). - CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862). - CVE-2024-41009: selftests/bpf: Add more ring buffer test coverage (bsc#1228020). - CVE-2024-41012: filelock: Remove locks reliably when fcntl/close race is detected (bsc#1228247). - CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405). - CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408). - CVE-2024-41015: ocfs2: add bounds checking to ocfs2_check_dir_entry() (bsc#1228409). - CVE-2024-41016: ocfs2: add bounds checking to ocfs2_xattr_find_entry() (bsc#1228410). - CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403). - CVE-2024-41040: net/sched: Fix UAF when resolving a clash (bsc#1228518) - CVE-2024-41041: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port() (bsc#1228520) - CVE-2024-41044: ppp: reject claimed-as-LCP but actually malformed packets (bsc#1228530). - CVE-2024-41048: skmsg: Skip zero length skb in sk_msg_recvmsg (bsc#1228565) - CVE-2024-41057: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() (bsc#1228462). - CVE-2024-41058: cachefiles: fix slab-use-after-free in fscache_withdraw_volume() (bsc#1228459). - CVE-2024-41059: hfsplus: fix uninit-value in copy_name (bsc#1228561). - CVE-2024-41063: Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (bsc#1228580) - CVE-2024-41064: powerpc/eeh: avoid possible crash when edev->pdev changes (bsc#1228599). - CVE-2024-41066: ibmvnic: Add tx check to prevent skb leak (bsc#1228640). - CVE-2024-41069: ASoC: topology: Fix route memory corruption (bsc#1228644). - CVE-2024-41070: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() (bsc#1228581). - CVE-2024-41071: wifi: mac80211: Avoid address calculations via out of bounds array indexing (bsc#1228625). - CVE-2024-41078: btrfs: qgroup: fix quota root leak after quota disable failure (bsc#1228655). - CVE-2024-41081: ila: block BH in ila_output() (bsc#1228617) - CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328). - CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327). - CVE-2024-42070: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers (bsc#1228470) - CVE-2024-42079: gfs2: Fix NULL pointer dereference in gfs2_log_flush (bsc#1228672). - CVE-2024-42093: net/dpaa2: Avoid explicit cpumask var allocation on stack (bsc#1228680). - CVE-2024-42096: x86: stop playing stack games in profile_pc() (bsc#1228633). - CVE-2024-42122: drm/amd/display: Add NULL pointer check for kzalloc (bsc#1228591) - CVE-2024-42124: scsi: qedf: Make qedf_execute_tmf() non-preemptible (bsc#1228705) - CVE-2024-42145: IB/core: Implement a limit on UMAD receive List (bsc#1228743) - CVE-2024-42161: Avoid uninitialized value in BPF_CORE_READ_BITFIELD (bsc#1228756). - CVE-2024-42224: net: dsa: mv88e6xxx: Correct check for empty list (bsc#1228723) - CVE-2024-42230: powerpc/pseries: Fix scv instruction crash with kexec (bsc#1194869). The following non-security bugs were fixed: - ACPI: EC: Abort address space access upon error (stable-fixes). - ACPI: EC: Avoid returning AE_OK on errors in address space handler (stable-fixes). - ACPI: processor_idle: Fix invalid comparison with insertion sort for latency (git-fixes). - ACPI: video: Add backlight=native quirk for Lenovo Slim 7 16ARH7 (stable-fixes). - ACPI: x86: Force StorageD3Enable on more products (stable-fixes). - ACPI: x86: utils: Add Picasso to the list for forcing StorageD3Enable (stable-fixes). - ALSA: dmaengine_pcm: terminate dmaengine before synchronize (stable-fixes). - ALSA: dmaengine: Synchronize dma channel after drop() (stable-fixes). - ALSA: emux: improve patch ioctl data validation (stable-fixes). - ALSA: hda: conexant: Fix headset auto detect fail in the polling mode (git-fixes). - ALSA: hda/realtek: Add more codec ID to no shutup pins list (stable-fixes). - ALSA: hda/realtek: add quirk for Clevo V5[46]0TU (stable-fixes). - ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897 (stable-fixes). - ALSA: hda/realtek: Enable headset mic on Positivo SU C1400 (stable-fixes). - ALSA: hda/realtek: Enable Mute LED on HP 250 G7 (stable-fixes). - ALSA: hda/realtek: fix mute/micmute LEDs do not work for EliteBook 645/665 G11 (stable-fixes). - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book Pro 360 (stable-fixes). - ALSA: hda/realtek: Limit mic boost on VAIO PRO PX (stable-fixes). - ALSA: hda/relatek: Enable Mute LED on HP Laptop 15-gw0xxx (stable-fixes). - ALSA: pcm_dmaengine: Do not synchronize DMA channel when DMA is paused (git-fixes). - ALSA: usb-audio: Add a quirk for Sonix HD USB Camera (stable-fixes). - ALSA: usb-audio: Correct surround channels in UAC1 channel map (git-fixes). - ALSA: usb-audio: Fix microphone sound on HD webcam (stable-fixes). - ALSA: usb-audio: Move HD Webcam quirk to the right place (git-fixes). - arm64: dts: allwinner: Pine H64: correctly remove reg_gmac_3v3 (git-fixes) - arm64: dts: hi3798cv200: fix the size of GICR (git-fixes) - arm64: dts: imx8qm-mek: fix gpio number for reg_usdhc2_vmmc (git-fixes) - arm64: dts: microchip: sparx5: fix mdio reg (git-fixes) - arm64: dts: rockchip: Add enable-strobe-pulldown to emmc phy on ROCK (git-fixes) - arm64: dts: rockchip: Add sound-dai-cells for RK3368 (git-fixes) - arm64: dts: rockchip: fix PMIC interrupt pin on ROCK Pi E (git-fixes) - arm64/io: add constant-argument check (bsc#1226502 git-fixes) - arm64/io: Provide a WC friendly __iowriteXX_copy() (bsc#1226502) - arm64: tegra: Correct Tegra132 I2C alias (git-fixes) - ASoC: amd: Adjust error handling in case of absent codec device (git-fixes). - ASoC: max98088: Check for clk_prepare_enable() error (git-fixes). - ASoC: ti: davinci-mcasp: Set min period size using FIFO config (stable-fixes). - ASoC: ti: omap-hdmi: Fix too long driver name (stable-fixes). - batman-adv: bypass empty buckets in batadv_purge_orig_ref() (stable-fixes). - blk-cgroup: dropping parent refcount after pd_free_fn() is done (bsc#1224573). - block: do not add partitions if GD_SUPPRESS_PART_SCAN is set (bsc#1227162). - block, loop: support partitions without scanning (bsc#1227162). - Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl (stable-fixes). - Bluetooth: btqca: use le32_to_cpu for ver.soc_id (stable-fixes). - Bluetooth: hci_core: cancel all works upon hci_unregister_dev() (stable-fixes). - Bluetooth: hci_qca: mark OF related data as maybe unused (stable-fixes). - Bluetooth: hci_sync: Fix suspending with wrong filter policy (git-fixes). - Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot (git-fixes). - bnxt_re: Fix imm_data endianness (git-fixes) - bpf: aggressively forget precise markings during state checkpointing (bsc#1225903). - bpf: allow precision tracking for programs with subprogs (bsc#1225903). - bpf: check bpf_func_state->callback_depth when pruning states (bsc#1225903). - bpf: clean up visit_insn()'s instruction processing (bsc#1225903). - bpf: correct loop detection for iterators convergence (bsc#1225903). - bpf: encapsulate precision backtracking bookkeeping (bsc#1225903). - bpf: ensure state checkpointing at iter_next() call sites (bsc#1225903). - bpf: exact states comparison for iterator convergence checks (bsc#1225903). - bpf: extract __check_reg_arg() utility function (bsc#1225903). - bpf: extract same_callsites() as utility function (bsc#1225903). - bpf: extract setup_func_entry() utility function (bsc#1225903). - bpf: fix calculation of subseq_idx during precision backtracking (bsc#1225903). - bpf: fix mark_all_scalars_precise use in mark_chain_precision (bsc#1225903). - bpf: Fix memory leaks in __check_func_call (bsc#1225903). - bpf: fix propagate_precision() logic for inner frames (bsc#1225903). - bpf: fix regs_exact() logic in regsafe() to remap IDs correctly (bsc#1225903). - bpf: Fix to preserve reg parent/live fields when copying range info (bsc#1225903). - bpf: generalize MAYBE_NULL vs non-MAYBE_NULL rule (bsc#1225903). - bpf: improve precision backtrack logging (bsc#1225903). - bpf: Improve verifier u32 scalar equality checking (bsc#1225903). - bpf: keep track of max number of bpf_loop callback iterations (bsc#1225903). - bpf: maintain bitmasks across all active frames in __mark_chain_precision (bsc#1225903). - bpf: mark relevant stack slots scratched for register read instructions (bsc#1225903). - bpf: move explored_state() closer to the beginning of verifier.c (bsc#1225903). - bpf: perform byte-by-byte comparison only when necessary in regsafe() (bsc#1225903). - bpf: print full verifier states on infinite loop detection (bsc#1225903). - bpf: regsafe() must not skip check_ids() (bsc#1225903). - bpf: reject non-exact register type matches in regsafe() (bsc#1225903). - bpf: Remove unused insn_cnt argument from visit_[func_call_]insn() (bsc#1225903). - bpf: reorganize struct bpf_reg_state fields (bsc#1225903). - bpf: Skip invalid kfunc call in backtrack_insn (bsc#1225903). - bpf: states_equal() must build idmap for all function frames (bsc#1225903). - bpf: stop setting precise in current state (bsc#1225903). - bpf: support precision propagation in the presence of subprogs (bsc#1225903). - bpf: take into account liveness when propagating precision (bsc#1225903). - bpf: teach refsafe() to take into account ID remapping (bsc#1225903). - bpf: unconditionally reset backtrack_state masks on global func exit (bsc#1225903). - bpf: use check_ids() for active_lock comparison (bsc#1225903). - bpf: Use scalar ids in mark_chain_precision() (bsc#1225903). - bpf: verify callbacks as if they are called unknown number of times (bsc#1225903). - bpf: Verify scalar ids mapping in regsafe() using check_ids() (bsc#1225903). - bpf: widening for callback iterators (bsc#1225903). - btrfs: add device major-minor info in the struct btrfs_device (bsc#1227162). - btrfs: harden identification of a stale device (bsc#1227162). - btrfs: match stale devices by dev_t (bsc#1227162). - btrfs: remove the cross file system checks from remap (bsc#1227157). - btrfs: use dev_t to match device in device_matched (bsc#1227162). - btrfs: validate device maj:min during open (bsc#1227162). - bytcr_rt5640 : inverse jack detect for Archos 101 cesium (stable-fixes). - cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd (git-fixes). - can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct (git-fixes). - can: kvaser_usb: fix return value for hif_usb_send_regout (stable-fixes). - ceph: fix incorrect kmalloc size of pagevec mempool (bsc#1228418). - cgroup/cpuset: Prevent UAF in proc_cpuset_show() (bsc#1228801). - checkpatch: really skip LONG_LINE_* when LONG_LINE is ignored (git-fixes). - crypto: aead,cipher - zeroize key buffer after use (stable-fixes). - crypto: ecdh - explicitly zeroize private_key (stable-fixes). - crypto: ecdsa - Fix the public key format description (git-fixes). - crypto: hisilicon/sec - Fix memory leak for sec resource release (stable-fixes). - csky: ftrace: Drop duplicate implementation of arch_check_ftrace_location() (git-fixes). - decompress_bunzip2: fix rare decompression failure (git-fixes). - devres: Fix devm_krealloc() wasting memory (git-fixes). - devres: Fix memory leakage caused by driver API devm_free_percpu() (git-fixes). - dma: fix call order in dmam_free_coherent (git-fixes). - docs: crypto: async-tx-api: fix broken code example (git-fixes). - docs: Fix formatting of literal sections in fanotify docs (stable-fixes). - drm/amd/amdgpu: Fix style errors in amdgpu_drv.c & amdgpu_device.c (stable-fixes). - drm/amd/display: Account for cursor prefetch BW in DML1 mode support (stable-fixes). - drm/amd/display: Check for NULL pointer (stable-fixes). - drm/amd/display: Check index msg_id before read or write (stable-fixes). - drm/amd/display: Check pipe offset before setting vblank (stable-fixes). - drm/amd/display: Skip finding free audio for unknown engine_id (stable-fixes). - drm/amdgpu/atomfirmware: fix parsing of vram_info (stable-fixes). - drm/amdgpu/atomfirmware: silence UBSAN warning (stable-fixes). - drm/amdgpu: avoid using null object of framebuffer (stable-fixes). - drm/amdgpu: Check if NBIO funcs are NULL in amdgpu_device_baco_exit (git-fixes). - drm/amdgpu: Fix pci state save during mode-1 reset (git-fixes). - drm/amdgpu: Fix signedness bug in sdma_v4_0_process_trap_irq() (git-fixes). - drm/amdgpu: fix uninitialized scalar variable warning (stable-fixes). - drm/amdgpu: Fix uninitialized variable warnings (stable-fixes). - drm/amdgpu: Initialize timestamp for some legacy SOCs (stable-fixes). - drm/amdgpu: Remove GC HW IP 9.3.0 from noretry=1 (git-fixes). - drm/amd/pm: Fix aldebaran pcie speed reporting (git-fixes). - drm/amd/pm: remove logically dead code for renoir (git-fixes). - drm/dp_mst: Fix all mstb marked as not probed after suspend/resume (git-fixes). - drm/etnaviv: do not block scheduler when GPU is still active (stable-fixes). - drm/etnaviv: fix DMA direction handling for cached RW buffers (git-fixes). - drm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes (git-fixes). - drm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes (git-fixes). - drm/i915/gt: Do not consider preemption during execlists_dequeue for gen8 (git-fixes). - drm/lima: fix shared irq handling on driver remove (stable-fixes). - drm/lima: Mark simple_ondemand governor as softdep (git-fixes). - drm/mediatek: Add OVL compatible name for MT8195 (git-fixes). - drm/meson: fix canvas release in bind function (git-fixes). - drm/mgag200: Bind I2C lifetime to DRM device (git-fixes). - drm/mgag200: Set DDC timeout in milliseconds (git-fixes). - drm/mipi-dsi: Fix mipi_dsi_dcs_write_seq() macro definition format (stable-fixes). - drm/mipi-dsi: Fix theoretical int overflow in mipi_dsi_dcs_write_seq() (git-fixes). - drm/msm/dpu: drop validity checks for clear_pending_flush() ctl op (git-fixes). - drm/msm/mdp5: Remove MDP_CAP_SRC_SPLIT from msm8x53_config (git-fixes). - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes (stable-fixes). - drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes (stable-fixes). - drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes (git-fixes). - drm/nouveau: prime: fix refcount underflow (git-fixes). - drm/panel: boe-tv101wum-nl6: Check for errors on the NOP in prepare() (git-fixes). - drm/panel: boe-tv101wum-nl6: If prepare fails, disable GPIO before regulators (git-fixes). - drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep (stable-fixes). - drm: panel-orientation-quirks: Add quirk for Valve Galileo (stable-fixes). - drm/panfrost: Mark simple_ondemand governor as softdep (git-fixes). - drm/qxl: Add check for drm_cvt_mode (git-fixes). - drm/radeon: check bo_va->bo is non-NULL before using it (stable-fixes). - drm/radeon/radeon_display: Decrease the size of allocated memory (stable-fixes). - drm/vmwgfx: Fix a deadlock in dma buf fence polling (git-fixes). - drm/vmwgfx: Fix missing HYPERVISOR_GUEST dependency (stable-fixes). - drm/vmwgfx: Fix overlay when using Screen Targets (git-fixes). - eeprom: digsy_mtc: Fix 93xx46 driver probe failure (git-fixes). - exfat: check if cluster num is valid (git-fixes). - exfat: simplify is_valid_cluster() (git-fixes). - filelock: add a new locks_inode_context accessor function (git-fixes). - firmware: cs_dsp: Fix overflow checking of wmfw header (git-fixes). - firmware: cs_dsp: Prevent buffer overrun when processing V2 alg headers (git-fixes). - firmware: cs_dsp: Return error if block header overflows file (git-fixes). - firmware: cs_dsp: Use strnlen() on name fields in V1 wmfw files (git-fixes). - firmware: cs_dsp: Validate payload length before processing block (git-fixes). - firmware: dmi: Stop decoding on broken entry (stable-fixes). - firmware: turris-mox-rwtm: Do not complete if there are no waiters (git-fixes). - firmware: turris-mox-rwtm: Fix checking return value of wait_for_completion_timeout() (git-fixes). - firmware: turris-mox-rwtm: Initialize completion before mailbox (git-fixes). - fix build warning - fs: allow cross-vfsmount reflink/dedupe (bsc#1227157). - ftrace: Fix possible use-after-free issue in ftrace_location() (git-fixes). - fuse: verify {g,u}id mount options correctly (bsc#1228191). - gpio: mc33880: Convert comma to semicolon (git-fixes). - hfsplus: fix to avoid false alarm of circular locking (git-fixes). - hfsplus: fix uninit-value in copy_name (git-fixes). - HID: Add quirk for Logitech Casa touchpad (stable-fixes). - HID: wacom: Modify pen IDs (git-fixes). - hpet: Support 32-bit userspace (git-fixes). - hwmon: (adt7475) Fix default duty on fan is disabled (git-fixes). - hwmon: (max6697) Fix swapped temp{1,8} critical alarms (git-fixes). - hwmon: (max6697) Fix underflow when writing limit attributes (git-fixes). - i2c: mark HostNotify target address as used (git-fixes). - i2c: rcar: bring hardware to known state when probing (git-fixes). - i2c: tegra: Fix failure during probe deferral cleanup (git-fixes) - i2c: tegra: Share same DMA channel for RX and TX (bsc#1227661) - i2c: testunit: avoid re-issued work after read message (git-fixes). - i2c: testunit: correct Kconfig description (git-fixes). - Input: elan_i2c - do not leave interrupt disabled on suspend failure (git-fixes). - Input: elantech - fix touchpad state on resume for Lenovo N24 (stable-fixes). - Input: ff-core - prefer struct_size over open coded arithmetic (stable-fixes). - Input: qt1050 - handle CHIP_ID reading error (git-fixes). - Input: silead - Always support 10 fingers (stable-fixes). - intel_th: pci: Add Granite Rapids SOC support (stable-fixes). - intel_th: pci: Add Granite Rapids support (stable-fixes). - intel_th: pci: Add Lunar Lake support (stable-fixes). - intel_th: pci: Add Meteor Lake-S support (stable-fixes). - intel_th: pci: Add Sapphire Rapids SOC support (stable-fixes). - iommu/arm-smmu-v3: Free MSIs in case of ENOMEM (git-fixes). - ionic: clean interrupt before enabling queue to avoid credit race (git-fixes). - jffs2: Fix potential illegal address access in jffs2_free_inode (git-fixes). - jfs: Fix array-index-out-of-bounds in diFree (git-fixes). - jfs: xattr: fix buffer overflow for invalid xattr (bsc#1227383). - kABI: bpf: bpf_reg_state reorganization kABI workaround (bsc#1225903). - kABI: bpf: callback fixes kABI workaround (bsc#1225903). - kABI: bpf: struct bpf_{idmap,idset} kABI workaround (bsc#1225903). - kABI: bpf: tmp_str_buf kABI workaround (bsc#1225903). - kABI: rtas: Workaround false positive due to lost definition (bsc#1227487). - kabi/severities: ignore kABI for FireWire sound local symbols (bsc#1208783) - kabi/severities: Ignore tpm_tis_core_init (bsc#1082555). - kabi/severity: add nvme common code The nvme common code is also allowed to change the data structures, there are only internal users. - kabi: Use __iowriteXX_copy_inlined for in-kernel modules (bsc#1226502) - kernel-binary: vdso: Own module_dir - kernel/sched: Remove dl_boosted flag comment (git fixes (sched)). - knfsd: LOOKUP can return an illegal error value (git-fixes). - kobject_uevent: Fix OOB access within zap_modalias_env() (git-fixes). - kprobes: Make arch_check_ftrace_location static (git-fixes). - KVM: nVMX: Clear EXIT_QUALIFICATION when injecting an EPT Misconfig (git-fixes). - KVM: PPC: Book3S HV: Fix 'rm_exit' entry in debugfs timings (bsc#1194869). - KVM: PPC: Book3S HV: Fix the set_one_reg for MMCR3 (bsc#1194869). - KVM: PPC: Book3S HV Nested: L2 LPCR should inherit L1 LPES setting (bsc#1194869). - KVM: PPC: Book3S HV: remove extraneous asterisk from rm_host_ipi_action() comment (bsc#1194869). - KVM: PPC: Book3S: Suppress failed alloc warning in H_COPY_TOFROM_GUEST (bsc#1194869). - KVM: PPC: Book3S: Suppress warnings when allocating too big memory slots (bsc#1194869). - KVM: s390: fix LPSWEY handling (bsc#1227635 git-fixes). - KVM: SVM: Process ICR on AVIC IPI delivery failure due to invalid target (git-fixes). - KVM: VMX: Report up-to-date exit qualification to userspace (git-fixes). - KVM: x86: Add IBPB_BRTYPE support (bsc#1228079). - KVM: x86: Always sync PIR to IRR prior to scanning I/O APIC routes (git-fixes). - KVM: x86: Bail from kvm_recalculate_phys_map() if x2APIC ID is out-of-bounds (git-fixes). - KVM: x86: Disable APIC logical map if logical ID covers multiple MDAs (git-fixes). - KVM: x86: Disable APIC logical map if vCPUs are aliased in logical mode (git-fixes). - KVM: x86: Do not advertise guest.MAXPHYADDR as host.MAXPHYADDR in CPUID (git-fixes). - KVM: x86: Explicitly skip optimized logical map setup if vCPU's LDR==0 (git-fixes). - KVM: x86: Explicitly track all possibilities for APIC map's logical modes (git-fixes). - KVM: x86: Fix broken debugregs ABI for 32 bit kernels (git-fixes). - KVM: x86: Fix KVM_GET_MSRS stack info leak (git-fixes). - KVM: x86: Honor architectural behavior for aliased 8-bit APIC IDs (git-fixes). - KVM: x86: Purge 'highest ISR' cache when updating APICv state (git-fixes). - KVM: x86: Save/restore all NMIs when multiple NMIs are pending (git-fixes). - KVM: x86: Skip redundant x2APIC logical mode optimized cluster setup (git-fixes). - leds: ss4200: Convert PCIBIOS_* return codes to errnos (git-fixes). - leds: triggers: Flush pending brightness before activating trigger (git-fixes). - leds: trigger: Unregister sysfs attributes before calling deactivate() (git-fixes). - libceph: fix race between delayed_work() and ceph_monc_stop() (bsc#1228190). - lib: objagg: Fix general protection fault (git-fixes). - lib: objagg: Fix spelling (git-fixes). - lib: test_objagg: Fix spelling (git-fixes). - lockd: set missing fl_flags field when retrieving args (git-fixes). - lockd: use locks_inode_context helper (git-fixes). - Make AMD_HSMP=m and mark it unsupported in supported.conf (jsc#PED-8582) - media: dvb: as102-fe: Fix as10x_register_addr packing (stable-fixes). - media: dvbdev: Initialize sbuf (stable-fixes). - media: dvb-frontends: tda10048: Fix integer overflow (stable-fixes). - media: dvb-frontends: tda18271c2dd: Remove casting during div (stable-fixes). - media: dvb-usb: dib0700_devices: Add missing release_firmware() (stable-fixes). - media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control() (git-fixes). - media: dw2102: Do not translate i2c read into write (stable-fixes). - media: dw2102: fix a potential buffer overflow (git-fixes). - media: imon: Fix race getting ictx->lock (git-fixes). - media: s2255: Use refcount_t instead of atomic_t for num_channels (stable-fixes). - media: uvcvideo: Fix integer overflow calculating timestamp (git-fixes). - media: uvcvideo: Override default flags (git-fixes). - media: venus: fix use after free in vdec_close (git-fixes). - media: venus: flush all buffers in output plane streamoff (git-fixes). - mei: demote client disconnect warning on suspend to debug (stable-fixes). - mfd: omap-usb-tll: Use struct_size to allocate tll (git-fixes). - mtd: partitions: redboot: Added conversion of operands to a larger type (stable-fixes). - net/dcb: check for detached device before executing callbacks (bsc#1215587). - netfilter: conntrack: ignore overly delayed tcp packets (bsc#1223180). - netfilter: conntrack: prepare tcp_in_window for ternary return value (bsc#1223180). - netfilter: conntrack: remove pr_debug callsites from tcp tracker (bsc#1223180). - netfilter: conntrack: work around exceeded receive window (bsc#1223180). - netfs, fscache: export fscache_put_volume() and add fscache_try_get_volume() (bsc#1228459 bsc#1228462). - net: mana: Fix possible double free in error handling path (git-fixes). - net: mana: Fix the extra HZ in mana_hwc_send_request (git-fixes). - net: usb: qmi_wwan: add Telit FN912 compositions (git-fixes). - net: usb: sr9700: fix uninitialized variable use in sr_mdio_read (git-fixes). - nfc/nci: Add the inconsistency check between the input data length and count (stable-fixes). - NFSD: Add an nfsd_file_fsync tracepoint (git-fixes). - NFSD: Add an NFSD_FILE_GC flag to enable nfsd_file garbage collection (git-fixes). - nfsd: Add errno mapping for EREMOTEIO (git-fixes). - NFSD: Add nfsd_file_lru_dispose_list() helper (git-fixes). - nfsd: add some comments to nfsd_file_do_acquire (git-fixes). - nfsd: allow nfsd_file_get to sanely handle a NULL pointer (git-fixes). - nfsd: allow reaping files still under writeback (git-fixes). - NFSD: Avoid calling fh_drop_write() twice in do_nfsd_create() (git-fixes). - NFSD: Clean up nfsd3_proc_create() (git-fixes). - nfsd: Clean up nfsd_file_put() (git-fixes). - NFSD: Clean up nfsd_open_verified() (git-fixes). - NFSD: Clean up unused code after rhashtable conversion (git-fixes). - NFSD: Convert filecache to rhltable (git-fixes). - NFSD: Convert the filecache to use rhashtable (git-fixes). - NFSD: De-duplicate hash bucket indexing (git-fixes). - nfsd: do not free files unconditionally in __nfsd_file_cache_purge (git-fixes). - nfsd: do not fsync nfsd_files on last close (git-fixes). - nfsd: do not hand out delegation on setuid files being opened for write (git-fixes). - nfsd: do not kill nfsd_files because of lease break error (git-fixes). - nfsd: Do not leave work of closing files to a work queue (bsc#1228140). - nfsd: do not take/put an extra reference when putting a file (git-fixes). - NFSD enforce filehandle check for source file in COPY (git-fixes). - NFSD: Ensure nf_inode is never dereferenced (git-fixes). - nfsd: fix handling of cached open files in nfsd4_open codepath (git-fixes). - NFSD: Fix licensing header in filecache.c (git-fixes). - nfsd: fix net-namespace logic in __nfsd_file_cache_purge (git-fixes). - nfsd: fix nfsd_file_unhash_and_dispose (git-fixes). - NFSD: Fix potential use-after-free in nfsd_file_put() (git-fixes). - NFSD: Fix problem of COMMIT and NFS4ERR_DELAY in infinite loop (git-fixes). - NFSD: Fix the filecache LRU shrinker (git-fixes). - nfsd: fix up the filecache laundrette scheduling (git-fixes). - nfsd: fix use-after-free in nfsd_file_do_acquire tracepoint (git-fixes). - NFSD: Flesh out a documenting comment for filecache.c (git-fixes). - NFSD: handle errors better in write_ports_addfd() (git-fixes). - NFSD: Instantiate a struct file when creating a regular NFSv4 file (git-fixes). - NFSD: Leave open files out of the filecache LRU (git-fixes). - nfsd: map EBADF (git-fixes). - NFSD: Move nfsd_file_trace_alloc() tracepoint (git-fixes). - NFSD: nfsd_file_hash_remove can compute hashval (git-fixes). - nfsd: NFSD_FILE_KEY_INODE only needs to find GC'ed entries (git-fixes). - NFSD: nfsd_file_put() can sleep (git-fixes). - NFSD: nfsd_file_unhash can compute hashval from nf->nf_inode (git-fixes). - NFSD: No longer record nf_hashval in the trace log (git-fixes). - NFSD: Pass the target nfsd_file to nfsd_commit() (git-fixes). - nfsd: put the export reference in nfsd4_verify_deleg_dentry (git-fixes). - NFSD: Record number of flush calls (git-fixes). - NFSD: Refactor nfsd_create_setattr() (git-fixes). - NFSD: Refactor __nfsd_file_close_inode() (git-fixes). - NFSD: Refactor nfsd_file_gc() (git-fixes). - NFSD: Refactor nfsd_file_lru_scan() (git-fixes). - NFSD: Refactor NFSv3 CREATE (git-fixes). - NFSD: Refactor NFSv4 OPEN(CREATE) (git-fixes). - NFSD: Remove do_nfsd_create() (git-fixes). - NFSD: Remove lockdep assertion from unhash_and_release_locked() (git-fixes). - NFSD: Remove nfsd_file::nf_hashval (git-fixes). - nfsd: remove the pages_flushed statistic from filecache (git-fixes). - nfsd: reorganize filecache.c (git-fixes). - NFSD: Replace the 'init once' mechanism (git-fixes). - NFSD: Report average age of filecache items (git-fixes). - NFSD: Report count of calls to nfsd_file_acquire() (git-fixes). - NFSD: Report count of freed filecache items (git-fixes). - NFSD: Report filecache LRU size (git-fixes). - NFSD: Report the number of items evicted by the LRU walk (git-fixes). - nfsd: Retry once in nfsd_open on an -EOPENSTALE return (git-fixes). - nfsd: rework hashtable handling in nfsd_do_file_acquire (git-fixes). - nfsd: rework refcounting in filecache (git-fixes). - NFSD: Separate tracepoints for acquire and create (git-fixes). - NFSD: Set up an rhashtable for the filecache (git-fixes). - nfsd: silence extraneous printk on nfsd.ko insertion (git-fixes). - NFSD: simplify per-net file cache management (git-fixes). - nfsd: simplify test_bit return in NFSD_FILE_KEY_FULL comparator (git-fixes). - nfsd: simplify the delayed disposal list code (git-fixes). - NFSD: Trace filecache LRU activity (git-fixes). - NFSD: Trace filecache opens (git-fixes). - NFSD: verify the opened dentry after setting a delegation (git-fixes). - NFSD: WARN when freeing an item still linked via nf_lru (git-fixes). - NFSD: Write verifier might go backwards (git-fixes). - NFSD: Zero counters when the filecache is re-initialized (git-fixes). - NFS: Fix READ_PLUS when server does not support OP_READ_PLUS (git-fixes). - nfs: fix undefined behavior in nfs_block_bits() (git-fixes). - nfs: keep server info for remounts (git-fixes). - nfs: Leave pages in the pagecache if readpage failed (git-fixes). - NFSv4: Fixup smatch warning for ambiguous return (git-fixes). - NFSv4.x: by default serialize open/close operations (bsc#1223863 bsc#1227362) - nilfs2: add missing check for inode numbers on directory entries (git-fixes). - nilfs2: add missing check for inode numbers on directory entries (stable-fixes). - nilfs2: avoid undefined behavior in nilfs_cnt32_ge macro (git-fixes). - nilfs2: convert persistent object allocator to use kmap_local (git-fixes). - nilfs2: fix incorrect inode allocation from reserved inodes (git-fixes). - nilfs2: fix inode number range checks (git-fixes). - nilfs2: fix inode number range checks (stable-fixes). - nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset (git-fixes). - nvme-auth: alloc nvme_dhchap_key as single buffer (git-fixes). - nvme-auth: allow mixing of secret and hash lengths (git-fixes). - nvme-auth: use transformed key size to create resp (git-fixes). - nvme: avoid double free special payload (git-fixes). - nvme: fixup comment for nvme RDMA Provider Type (git-fixes). - nvme-multipath: find NUMA path only for online numa-node (git-fixes). - nvme-pci: add missing condition check for existence of mapped data (git-fixes). - nvme-pci: Fix the instructions for disabling power management (git-fixes). - nvmet: always initialize cqe.result (git-fixes). - nvmet-auth: fix nvmet_auth hash error handling (git-fixes). - nvmet: fix a possible leak when destroy a ctrl during qp establishment (git-fixes). - nvme: use ctrl state accessor (bsc#1215492). - ocfs2: fix DIO failure due to insufficient transaction credits (bsc#1216834). - ocfs2: remove redundant assignment to variable free_space (bsc#1228409). - ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() (bsc#1228410). - orangefs: fix out-of-bounds fsid access (git-fixes). - PCI: Add PCI_ERROR_RESPONSE and related definitions (stable-fixes). - PCI/DPC: Fix use-after-free on concurrent DPC and hot-removal (git-fixes). - PCI: Extend ACS configurability (bsc#1228090). - PCI: Fix resource double counting on remove & rescan (git-fixes). - PCI: hv: Return zero, not garbage, when reading PCI_INTERRUPT_PIN (git-fixes). - PCI: Introduce cleanup helpers for device reference counts and locks (git-fixes). - PCI: Introduce cleanup helpers for device reference counts and locks (stable-fixes). - PCI: keystone: Do not enable BAR 0 for AM654x (git-fixes). - PCI: keystone: Fix NULL pointer dereference in case of DT error in ks_pcie_setup_rc_app_regs() (git-fixes). - PCI: keystone: Relocate ks_pcie_set/clear_dbi_mode() (git-fixes). - PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports (git-fixes). - PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports (stable-fixes). - PCI: rockchip: Use GPIOD_OUT_LOW flag while requesting ep_gpio (git-fixes). - PCI: tegra194: Set EP alignment restriction for inbound ATU (git-fixes). - pinctrl: core: fix possible memory leak when pinctrl_enable() fails (git-fixes). - pinctrl: freescale: mxs: Fix refcount of child (git-fixes). - pinctrl: single: fix possible memory leak when pinctrl_enable() fails (git-fixes). - pinctrl: ti: ti-iodelay: fix possible memory leak when pinctrl_enable() fails (git-fixes). - platform/chrome: cros_ec_debugfs: fix wrong EC message version (git-fixes). - platform/chrome: cros_ec_proto: Lock device when updating MKBP version (git-fixes). - platform/x86: dell-smbios-base: Use sysfs_emit() (stable-fixes). - platform/x86: dell-smbios: Fix wrong token data in sysfs (git-fixes). - platform/x86: lg-laptop: Change ACPI device id (stable-fixes). - platform/x86: lg-laptop: Remove LGEX0815 hotkey handling (stable-fixes). - platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6' tablet (stable-fixes). - platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro (stable-fixes). - platform/x86: wireless-hotkey: Add support for LG Airplane Button (stable-fixes). - powerpc/cpuidle: Set CPUIDLE_FLAG_POLLING for snooze state (bsc#1227121 ltc#207129). - powerpc: fix a file leak in kvm_vcpu_ioctl_enable_cap() (bsc#1194869). - powerpc/kasan: Disable address sanitization in kexec paths (bsc#1194869). - powerpc/pseries: Fix scv instruction crash with kexec (bsc#1194869). - powerpc/rtas: clean up includes (bsc#1227487). - powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() (bsc#1227487). - power: supply: cros_usbpd: provide ID table for avoiding fallback match (stable-fixes). - pwm: stm32: Always do lazy disabling (git-fixes). - RDMA/cache: Release GID table even if leak is detected (git-fixes) - RDMA/device: Return error earlier if port in not valid (git-fixes) - RDMA/hns: Check atomic wr length (git-fixes) - RDMA/hns: Fix insufficient extend DB for VFs. (git-fixes) - RDMA/hns: Fix mbx timing out before CMD execution is completed (git-fixes) - RDMA/hns: Fix missing pagesize and alignment check in FRMR (git-fixes) - RDMA/hns: Fix shift-out-bounds when max_inline_data is 0 (git-fixes) - RDMA/hns: Fix soft lockup under heavy CEQE load (git-fixes) - RDMA/hns: Fix undifined behavior caused by invalid max_sge (git-fixes) - RDMA/hns: Fix unmatch exception handling when init eq table fails (git-fixes) - RDMA/iwcm: Fix a use-after-free related to destroying CM IDs (git-fixes) - RDMA/mana_ib: Ignore optional access flags for MRs (git-fixes). - RDMA/mlx4: Fix truncated output warning in alias_GUID.c (git-fixes) - RDMA/mlx4: Fix truncated output warning in mad.c (git-fixes) - RDMA/mlx5: Set mkeys for dmabuf at PAGE_SIZE (git-fixes) - RDMA/restrack: Fix potential invalid address access (git-fixes) - RDMA/rxe: Do not set BTH_ACK_MASK for UC or UD QPs (git-fixes) - regmap-i2c: Subtract reg size from max_write (stable-fixes). - Revert 'ALSA: firewire-lib: obsolete workqueue for period update' (bsc#1208783). - Revert 'ALSA: firewire-lib: operate for period elapse event in process context' (bsc#1208783). - Revert 'leds: led-core: Fix refcount leak in of_led_get()' (git-fixes). - Revert 'usb: musb: da8xx: Set phy in OTG mode by default' (stable-fixes). - rpcrdma: fix handling for RDMA_CM_EVENT_DEVICE_REMOVAL (git-fixes). - rpm/guards: fix precedence issue with control flow operator With perl 5.40 it report the following error on rpm/guards script: Possible precedence issue with control flow operator (exit) at scripts/guards line 208. Fix the issue by adding parenthesis around ternary operator. - rtc: cmos: Fix return value of nvmem callbacks (git-fixes). - rtc: interface: Add RTC offset to alarm after fix-up (git-fixes). - rtc: isl1208: Fix return value of nvmem callbacks (git-fixes). - rtlwifi: rtl8192de: Style clean-ups (stable-fixes). - s390: Implement __iowrite32_copy() (bsc#1226502) - s390: Stop using weak symbols for __iowrite64_copy() (bsc#1226502) - saa7134: Unchecked i2c_transfer function result fixed (git-fixes). - sched/fair: Do not balance task to its current running CPU (git fixes (sched)). - sched: Fix stop_one_cpu_nowait() vs hotplug (git fixes (sched)). - scsi: lpfc: Allow DEVICE_RECOVERY mode after RSCN receipt if in PRLI_ISSUE state (bsc#1228857). - scsi: lpfc: Cancel ELS WQE instead of issuing abort when SLI port is inactive (bsc#1228857). - scsi: lpfc: Fix handling of fully recovered fabric node in dev_loss callbk (bsc#1228857). - scsi: lpfc: Fix incorrect request len mbox field when setting trunking via sysfs (bsc#1228857). - scsi: lpfc: Handle mailbox timeouts in lpfc_get_sfp_info (bsc#1228857). - scsi: lpfc: Relax PRLI issue conditions after GID_FT response (bsc#1228857). - scsi: lpfc: Revise lpfc_prep_embed_io routine with proper endian macro usages (bsc#1228857). - scsi: lpfc: Update lpfc version to 14.4.0.3 (bsc#1228857). - scsi: qla2xxx: Avoid possible run-time warning with long model_num (bsc#1228850). - scsi: qla2xxx: Complete command early within lock (bsc#1228850). - scsi: qla2xxx: Convert comma to semicolon (bsc#1228850). - scsi: qla2xxx: Drop driver owner assignment (bsc#1228850). - scsi: qla2xxx: During vport delete send async logout explicitly (bsc#1228850). - scsi: qla2xxx: Fix debugfs output for fw_resource_count (bsc#1228850). - scsi: qla2xxx: Fix flash read failure (bsc#1228850). - scsi: qla2xxx: Fix for possible memory corruption (bsc#1228850). - scsi: qla2xxx: Fix optrom version displayed in FDMI (bsc#1228850). - scsi: qla2xxx: Indent help text (bsc#1228850). - scsi: qla2xxx: Reduce fabric scan duplicate code (bsc#1228850). - scsi: qla2xxx: Remove unused struct 'scsi_dif_tuple' (bsc#1228850). - scsi: qla2xxx: Return ENOBUFS if sg_cnt is more than one for ELS cmds (bsc#1228850). - scsi: qla2xxx: Unable to act on RSCN for port online (bsc#1228850). - scsi: qla2xxx: Update version to 10.02.09.300-k (bsc#1228850). - scsi: qla2xxx: Use QP lock to search for bsg (bsc#1228850). - scsi: qla2xxx: validate nvme_local_port correctly (bsc#1228850). - selftests/bpf: Add a selftest for checking subreg equality (bsc#1225903). - selftests/bpf: add pre bpf_prog_test_run_opts() callback for test_loader (bsc#1225903). - selftests/bpf: add precision propagation tests in the presence of subprogs (bsc#1225903). - selftests/bpf: Add pruning test case for bpf_spin_lock (bsc#1225903). - selftests/bpf: Check if mark_chain_precision() follows scalar ids (bsc#1225903). - selftests/bpf: check if max number of bpf_loop iterations is tracked (bsc#1225903). - selftests/bpf: fix __retval() being always ignored (bsc#1225903). - selftests/bpf: fix unpriv_disabled check in test_verifier (bsc#1225903). - selftests/bpf: __imm_insn & __imm_const macro for bpf_misc.h (bsc#1225903). - selftests/bpf: make test_align selftest more robust (bsc#1225903). - selftests/bpf: populate map_array_ro map for verifier_array_access test (bsc#1225903). - selftests/bpf: prog_tests entry point for migrated test_verifier tests (bsc#1225903). - selftests/bpf: Report program name on parse_test_spec error (bsc#1225903). - selftests/bpf: Support custom per-test flags and multiple expected messages (bsc#1225903). - selftests/bpf: test case for callback_depth states pruning logic (bsc#1225903). - selftests/bpf: test case for relaxed prunning of active_lock.id (bsc#1225903). - selftests/bpf: test cases for regsafe() bug skipping check_id() (bsc#1225903). - selftests/bpf: Tests execution support for test_loader.c (bsc#1225903). - selftests/bpf: tests for iterating callbacks (bsc#1225903). - selftests/bpf: test widening for iterating callbacks (bsc#1225903). - selftests/bpf: track string payload offset as scalar in strobemeta (bsc#1225903). - selftests/bpf: Unprivileged tests for test_loader.c (bsc#1225903). - selftests/bpf: Verify copy_register_state() preserves parent/live fields (bsc#1225903). - selftests/bpf: verify states_equal() maintains idmap across all frames (bsc#1225903). - selftests/bpf: Verify that check_ids() is used for scalars in regsafe() (bsc#1225903). - selftests/sigaltstack: Fix ppc64 GCC build (git-fixes). - soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message (stable-fixes). - spi: imx: Do not expect DMA for i.MX{25,35,50,51,53} cspi devices (stable-fixes). - spi: mux: set ctlr->bits_per_word_mask (stable-fixes). - string.h: Introduce memtostr() and memtostr_pad() (bsc#1228850). - SUNRPC: avoid soft lockup when transmitting UDP to reachable server (bsc#1225272). - SUNRPC: Fix gss_free_in_token_pages() (git-fixes). - SUNRPC: Fix loop termination condition in gss_free_in_token_pages() (git-fixes). - sunrpc: fix NFSACL RPC retry on soft mount (git-fixes). - SUNRPC: return proper error from gss_wrap_req_priv (git-fixes). - supported.conf: - tpm: Allow system suspend to continue when TPM suspend fails (bsc#1082555). - tpm: Prevent hwrng from activating during resume (bsc#1082555). - tpm_tis: Resend command to recover from data transfer errors (bsc#1082555). - tpm_tis: Use tpm_chip_{start,stop} decoration inside tpm_tis_resume (bsc#1082555). - tpm, tpm: Implement usage counter for locality (bsc#1082555). - tpm, tpm_tis: Avoid cache incoherency in test for interrupts (bsc#1082555). - tpm, tpm_tis: Claim locality before writing interrupt registers (bsc#1082555). - tpm, tpm_tis: Claim locality in interrupt handler (bsc#1082555). - tpm, tpm_tis: Claim locality when interrupts are reenabled on resume (bsc#1082555). - tpm, tpm_tis: correct tpm_tis_flags enumeration values (bsc#1082555). - tpm, tpm_tis: Do not skip reset of original interrupt vector (bsc#1082555). - tpm, tpm_tis: Only handle supported interrupts (bsc#1082555). - tracing: Build event generation tests only as modules (git-fixes). - tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset() (git-fixes). - tracing/osnoise: Add osnoise/options file (bsc#1228330) - tracing/osnoise: Add OSNOISE_WORKLOAD option (bsc#1228330) - tracing/osnoise: Do not follow tracing_cpumask (bsc#1228330) - tracing/osnoise: Fix notify new tracing_max_latency (bsc#1228330) - tracing/osnoise: Make osnoise_instances static (bsc#1228330) - tracing/osnoise: Split workload start from the tracer start (bsc#1228330) - tracing/osnoise: Support a list of trace_array *tr (bsc#1228330) - tracing/osnoise: Use built-in RCU list checking (bsc#1228330) - tracing/timerlat: Notify new max thread latency (bsc#1228330) - USB: Add USB_QUIRK_NO_SET_INTF quirk for START BP-850k (stable-fixes). - usb: cdns3: allocate TX FIFO size according to composite EP number (git-fixes). - usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config (git-fixes). - usb: cdns3: fix iso transfer error when mult is not zero (git-fixes). - usb: cdns3: improve handling of unaligned address case (git-fixes). - usb: cdns3: optimize OUT transfer by copying only actual received data (git-fixes). - usb: cdns3: skip set TRB_IOC when usb_request: no_interrupt is true (git-fixes). - USB: core: Fix duplicate endpoint bug by clearing reserved bits in the descriptor (git-fixes). - usb: dwc3: gadget: Do not delay End Transfer on delayed_status (git-fixes). - usb: dwc3: gadget: Force sending delayed status during soft disconnect (git-fixes). - usb: dwc3: gadget: Synchronize IRQ between soft connect/disconnect (git-fixes). - usb: gadget: call usb_gadget_check_config() to verify UDC capability (git-fixes). - usb: gadget: configfs: Prevent OOB read/write in usb_string_copy() (stable-fixes). - usb: gadget: printer: SS+ support (stable-fixes). - usb: misc: uss720: check for incompatible versions of the Belkin F5U002 (stable-fixes). - USB: serial: mos7840: fix crash on resume (git-fixes). - USB: serial: option: add Fibocom FM350-GL (stable-fixes). - USB: serial: option: add Netprisma LCUK54 series modules (stable-fixes). - USB: serial: option: add Rolling RW350-GL variants (stable-fixes). - USB: serial: option: add support for Foxconn T99W651 (stable-fixes). - USB: serial: option: add Telit FN912 rmnet compositions (stable-fixes). - USB: serial: option: add Telit generic core-dump composition (stable-fixes). - usb: typec: tcpm: clear pd_event queue in PORT_RESET (git-fixes). - usb: xhci-plat: Do not include xhci.h (git-fixes). - USB: xhci-plat: fix legacy PHY double init (git-fixes). - wifi: ath11k: fix wrong handling of CCMP256 and GCMP ciphers (git-fixes). - wifi: brcmsmac: LCN PHY code is used for BCM4313 2G-only device (git-fixes). - wifi: cfg80211: fix typo in cfg80211_calculate_bitrate_he() (git-fixes). - wifi: cfg80211: handle 2x996 RU allocation in cfg80211_calculate_bitrate_he() (git-fixes). - wifi: cfg80211: restrict NL80211_ATTR_TXQ_QUANTUM values (git-fixes). - wifi: cfg80211: wext: add extra SIOCSIWSCAN data check (stable-fixes). - wifi: iwlwifi: mvm: d3: fix WoWLAN command version lookup (stable-fixes). - wifi: iwlwifi: mvm: Handle BIGTK cipher in kek_kck cmd (stable-fixes). - wifi: iwlwifi: mvm: properly set 6 GHz channel direct probe option (stable-fixes). - wifi: mac80211: disable softirqs for queued frame handling (git-fixes). - wifi: mac80211: fix UBSAN noise in ieee80211_prep_hw_scan() (stable-fixes). - wifi: mac80211: handle tasklet frames before stopping (stable-fixes). - wifi: mac80211: mesh: init nonpeer_pm to active by default in mesh sdata (stable-fixes). - wifi: mt76: replace skb_put with skb_put_zero (stable-fixes). - wifi: mwifiex: Fix interface type change (git-fixes). - wifi: rtw89: Fix array index mistake in rtw89_sta_info_get_iter() (git-fixes). - wifi: wilc1000: fix ies_len type in connect path (git-fixes). - workqueue: Improve scalability of workqueue watchdog touch (bsc#1193454). - workqueue: wq_watchdog_touch is always called with valid CPU (bsc#1193454). - x86/amd_nb: Use Family 19h Models 60h-7Fh Function 4 IDs (git-fixes). - x86/apic: Force native_apic_mem_read() to use the MOV instruction (git-fixes). - x86/bhi: Avoid warning in #DB handler due to BHI mitigation (git-fixes). - x86/bugs: Remove default case for fully switched enums (bsc#1227900). - x86/fpu: Fix AMD X86_BUG_FXSAVE_LEAK fixup (git-fixes). - x86/ibt,ftrace: Search for __fentry__ location (git-fixes). - x86/Kconfig: Transmeta Crusoe is CPU family 5, not 6 (git-fixes). - x86/mm: Allow guest.enc_status_change_prepare() to fail (git-fixes). - x86/mm: Fix enc_status_change_finish_noop() (git-fixes). - x86/purgatory: Switch to the position-independent small code model (git-fixes). - x86/srso: Move retbleed IBPB check into existing 'has_microcode' code block (bsc#1227900). - x86/srso: Remove 'pred_cmd' label (bsc#1227900). - x86: Stop using weak symbols for __iowrite32_copy() (bsc#1226502) - x86/tdx: Fix race between set_memory_encrypted() and load_unaligned_zeropad() (git-fixes). - xfs: Add cond_resched to block unmap range and reflink remap path (bsc#1228226). - xhci: Apply broken streams quirk to Etron EJ188 xHCI host (stable-fixes). - xhci: Apply reset resume quirk to Etron EJ188 xHCI host (stable-fixes). - xhci: Set correct transferred length for cancelled bulk transfers (stable-fixes). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sle-micro/rt-5.5:latest-2024-2894,SUSE-2024-2894,SUSE-SLE-Micro-5.5-2024-2894,SUSE-SLE-Module-Live-Patching-15-SP5-2024-2894,SUSE-SLE-Module-RT-15-SP5-2024-2894,openSUSE-Leap-Micro-5.5-2024-2894,openSUSE-SLE-15.5-2024-2894 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ Link for SUSE-SU-2024:2894-1 https://lists.suse.com/pipermail/sle-updates/2024-August/036430.html E-Mail link for SUSE-SU-2024:2894-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1082555 SUSE Bug 1082555 https://bugzilla.suse.com/1193454 SUSE Bug 1193454 https://bugzilla.suse.com/1193554 SUSE Bug 1193554 https://bugzilla.suse.com/1193787 SUSE Bug 1193787 https://bugzilla.suse.com/1194324 SUSE Bug 1194324 https://bugzilla.suse.com/1194869 SUSE Bug 1194869 https://bugzilla.suse.com/1195357 SUSE Bug 1195357 https://bugzilla.suse.com/1195668 SUSE Bug 1195668 https://bugzilla.suse.com/1195927 SUSE Bug 1195927 https://bugzilla.suse.com/1195957 SUSE Bug 1195957 https://bugzilla.suse.com/1196018 SUSE Bug 1196018 https://bugzilla.suse.com/1196823 SUSE Bug 1196823 https://bugzilla.suse.com/1197146 SUSE Bug 1197146 https://bugzilla.suse.com/1197246 SUSE Bug 1197246 https://bugzilla.suse.com/1197762 SUSE Bug 1197762 https://bugzilla.suse.com/1202346 SUSE Bug 1202346 https://bugzilla.suse.com/1202686 SUSE Bug 1202686 https://bugzilla.suse.com/1208783 SUSE Bug 1208783 https://bugzilla.suse.com/1209636 SUSE Bug 1209636 https://bugzilla.suse.com/1213123 SUSE Bug 1213123 https://bugzilla.suse.com/1215492 SUSE Bug 1215492 https://bugzilla.suse.com/1215587 SUSE Bug 1215587 https://bugzilla.suse.com/1216834 SUSE Bug 1216834 https://bugzilla.suse.com/1219832 SUSE Bug 1219832 https://bugzilla.suse.com/1220138 SUSE Bug 1220138 https://bugzilla.suse.com/1220185 SUSE Bug 1220185 https://bugzilla.suse.com/1220186 SUSE Bug 1220186 https://bugzilla.suse.com/1220187 SUSE Bug 1220187 https://bugzilla.suse.com/1220869 SUSE Bug 1220869 https://bugzilla.suse.com/1220876 SUSE Bug 1220876 https://bugzilla.suse.com/1220942 SUSE Bug 1220942 https://bugzilla.suse.com/1220952 SUSE Bug 1220952 https://bugzilla.suse.com/1221010 SUSE Bug 1221010 https://bugzilla.suse.com/1221044 SUSE Bug 1221044 https://bugzilla.suse.com/1221647 SUSE Bug 1221647 https://bugzilla.suse.com/1221654 SUSE Bug 1221654 https://bugzilla.suse.com/1221656 SUSE Bug 1221656 https://bugzilla.suse.com/1221659 SUSE Bug 1221659 https://bugzilla.suse.com/1221777 SUSE Bug 1221777 https://bugzilla.suse.com/1222011 SUSE Bug 1222011 https://bugzilla.suse.com/1222323 SUSE Bug 1222323 https://bugzilla.suse.com/1222326 SUSE Bug 1222326 https://bugzilla.suse.com/1222328 SUSE Bug 1222328 https://bugzilla.suse.com/1222625 SUSE Bug 1222625 https://bugzilla.suse.com/1222702 SUSE Bug 1222702 https://bugzilla.suse.com/1222728 SUSE Bug 1222728 https://bugzilla.suse.com/1222799 SUSE Bug 1222799 https://bugzilla.suse.com/1222809 SUSE Bug 1222809 https://bugzilla.suse.com/1222810 SUSE Bug 1222810 https://bugzilla.suse.com/1223021 SUSE Bug 1223021 https://bugzilla.suse.com/1223180 SUSE Bug 1223180 https://bugzilla.suse.com/1223635 SUSE Bug 1223635 https://bugzilla.suse.com/1223652 SUSE Bug 1223652 https://bugzilla.suse.com/1223675 SUSE Bug 1223675 https://bugzilla.suse.com/1223778 SUSE Bug 1223778 https://bugzilla.suse.com/1223806 SUSE Bug 1223806 https://bugzilla.suse.com/1223813 SUSE Bug 1223813 https://bugzilla.suse.com/1223815 SUSE Bug 1223815 https://bugzilla.suse.com/1223836 SUSE Bug 1223836 https://bugzilla.suse.com/1223863 SUSE Bug 1223863 https://bugzilla.suse.com/1224414 SUSE Bug 1224414 https://bugzilla.suse.com/1224499 SUSE Bug 1224499 https://bugzilla.suse.com/1224500 SUSE Bug 1224500 https://bugzilla.suse.com/1224512 SUSE Bug 1224512 https://bugzilla.suse.com/1224516 SUSE Bug 1224516 https://bugzilla.suse.com/1224517 SUSE Bug 1224517 https://bugzilla.suse.com/1224545 SUSE Bug 1224545 https://bugzilla.suse.com/1224548 SUSE Bug 1224548 https://bugzilla.suse.com/1224557 SUSE Bug 1224557 https://bugzilla.suse.com/1224572 SUSE Bug 1224572 https://bugzilla.suse.com/1224573 SUSE Bug 1224573 https://bugzilla.suse.com/1224585 SUSE Bug 1224585 https://bugzilla.suse.com/1224604 SUSE Bug 1224604 https://bugzilla.suse.com/1224636 SUSE Bug 1224636 https://bugzilla.suse.com/1224641 SUSE Bug 1224641 https://bugzilla.suse.com/1224683 SUSE Bug 1224683 https://bugzilla.suse.com/1224694 SUSE Bug 1224694 https://bugzilla.suse.com/1224700 SUSE Bug 1224700 https://bugzilla.suse.com/1224743 SUSE Bug 1224743 https://bugzilla.suse.com/1225088 SUSE Bug 1225088 https://bugzilla.suse.com/1225272 SUSE Bug 1225272 https://bugzilla.suse.com/1225301 SUSE Bug 1225301 https://bugzilla.suse.com/1225475 SUSE Bug 1225475 https://bugzilla.suse.com/1225489 SUSE Bug 1225489 https://bugzilla.suse.com/1225504 SUSE Bug 1225504 https://bugzilla.suse.com/1225505 SUSE Bug 1225505 https://bugzilla.suse.com/1225564 SUSE Bug 1225564 https://bugzilla.suse.com/1225573 SUSE Bug 1225573 https://bugzilla.suse.com/1225581 SUSE Bug 1225581 https://bugzilla.suse.com/1225586 SUSE Bug 1225586 https://bugzilla.suse.com/1225711 SUSE Bug 1225711 https://bugzilla.suse.com/1225717 SUSE Bug 1225717 https://bugzilla.suse.com/1225719 SUSE Bug 1225719 https://bugzilla.suse.com/1225744 SUSE Bug 1225744 https://bugzilla.suse.com/1225745 SUSE Bug 1225745 https://bugzilla.suse.com/1225746 SUSE Bug 1225746 https://bugzilla.suse.com/1225752 SUSE Bug 1225752 https://bugzilla.suse.com/1225753 SUSE Bug 1225753 https://bugzilla.suse.com/1225757 SUSE Bug 1225757 https://bugzilla.suse.com/1225767 SUSE Bug 1225767 https://bugzilla.suse.com/1225810 SUSE Bug 1225810 https://bugzilla.suse.com/1225815 SUSE Bug 1225815 https://bugzilla.suse.com/1225820 SUSE Bug 1225820 https://bugzilla.suse.com/1225829 SUSE Bug 1225829 https://bugzilla.suse.com/1225835 SUSE Bug 1225835 https://bugzilla.suse.com/1225838 SUSE Bug 1225838 https://bugzilla.suse.com/1225839 SUSE Bug 1225839 https://bugzilla.suse.com/1225843 SUSE Bug 1225843 https://bugzilla.suse.com/1225847 SUSE Bug 1225847 https://bugzilla.suse.com/1225851 SUSE Bug 1225851 https://bugzilla.suse.com/1225856 SUSE Bug 1225856 https://bugzilla.suse.com/1225895 SUSE Bug 1225895 https://bugzilla.suse.com/1225898 SUSE Bug 1225898 https://bugzilla.suse.com/1225903 SUSE Bug 1225903 https://bugzilla.suse.com/1226202 SUSE Bug 1226202 https://bugzilla.suse.com/1226502 SUSE Bug 1226502 https://bugzilla.suse.com/1226519 SUSE Bug 1226519 https://bugzilla.suse.com/1226551 SUSE Bug 1226551 https://bugzilla.suse.com/1226555 SUSE Bug 1226555 https://bugzilla.suse.com/1226565 SUSE Bug 1226565 https://bugzilla.suse.com/1226568 SUSE Bug 1226568 https://bugzilla.suse.com/1226570 SUSE Bug 1226570 https://bugzilla.suse.com/1226571 SUSE Bug 1226571 https://bugzilla.suse.com/1226574 SUSE Bug 1226574 https://bugzilla.suse.com/1226588 SUSE Bug 1226588 https://bugzilla.suse.com/1226607 SUSE Bug 1226607 https://bugzilla.suse.com/1226650 SUSE Bug 1226650 https://bugzilla.suse.com/1226698 SUSE Bug 1226698 https://bugzilla.suse.com/1226713 SUSE Bug 1226713 https://bugzilla.suse.com/1226716 SUSE Bug 1226716 https://bugzilla.suse.com/1226750 SUSE Bug 1226750 https://bugzilla.suse.com/1226757 SUSE Bug 1226757 https://bugzilla.suse.com/1226758 SUSE Bug 1226758 https://bugzilla.suse.com/1226775 SUSE Bug 1226775 https://bugzilla.suse.com/1226783 SUSE Bug 1226783 https://bugzilla.suse.com/1226785 SUSE Bug 1226785 https://bugzilla.suse.com/1226834 SUSE Bug 1226834 https://bugzilla.suse.com/1226837 SUSE Bug 1226837 https://bugzilla.suse.com/1226911 SUSE Bug 1226911 https://bugzilla.suse.com/1226990 SUSE Bug 1226990 https://bugzilla.suse.com/1226993 SUSE Bug 1226993 https://bugzilla.suse.com/1227090 SUSE Bug 1227090 https://bugzilla.suse.com/1227121 SUSE Bug 1227121 https://bugzilla.suse.com/1227157 SUSE Bug 1227157 https://bugzilla.suse.com/1227162 SUSE Bug 1227162 https://bugzilla.suse.com/1227362 SUSE Bug 1227362 https://bugzilla.suse.com/1227383 SUSE Bug 1227383 https://bugzilla.suse.com/1227432 SUSE Bug 1227432 https://bugzilla.suse.com/1227435 SUSE Bug 1227435 https://bugzilla.suse.com/1227447 SUSE Bug 1227447 https://bugzilla.suse.com/1227487 SUSE Bug 1227487 https://bugzilla.suse.com/1227549 SUSE Bug 1227549 https://bugzilla.suse.com/1227573 SUSE Bug 1227573 https://bugzilla.suse.com/1227618 SUSE Bug 1227618 https://bugzilla.suse.com/1227620 SUSE Bug 1227620 https://bugzilla.suse.com/1227626 SUSE Bug 1227626 https://bugzilla.suse.com/1227635 SUSE Bug 1227635 https://bugzilla.suse.com/1227661 SUSE Bug 1227661 https://bugzilla.suse.com/1227716 SUSE Bug 1227716 https://bugzilla.suse.com/1227722 SUSE Bug 1227722 https://bugzilla.suse.com/1227724 SUSE Bug 1227724 https://bugzilla.suse.com/1227725 SUSE Bug 1227725 https://bugzilla.suse.com/1227728 SUSE Bug 1227728 https://bugzilla.suse.com/1227729 SUSE Bug 1227729 https://bugzilla.suse.com/1227730 SUSE Bug 1227730 https://bugzilla.suse.com/1227732 SUSE Bug 1227732 https://bugzilla.suse.com/1227733 SUSE Bug 1227733 https://bugzilla.suse.com/1227750 SUSE Bug 1227750 https://bugzilla.suse.com/1227754 SUSE Bug 1227754 https://bugzilla.suse.com/1227755 SUSE Bug 1227755 https://bugzilla.suse.com/1227760 SUSE Bug 1227760 https://bugzilla.suse.com/1227762 SUSE Bug 1227762 https://bugzilla.suse.com/1227763 SUSE Bug 1227763 https://bugzilla.suse.com/1227764 SUSE Bug 1227764 https://bugzilla.suse.com/1227766 SUSE Bug 1227766 https://bugzilla.suse.com/1227770 SUSE Bug 1227770 https://bugzilla.suse.com/1227771 SUSE Bug 1227771 https://bugzilla.suse.com/1227772 SUSE Bug 1227772 https://bugzilla.suse.com/1227774 SUSE Bug 1227774 https://bugzilla.suse.com/1227779 SUSE Bug 1227779 https://bugzilla.suse.com/1227780 SUSE Bug 1227780 https://bugzilla.suse.com/1227783 SUSE Bug 1227783 https://bugzilla.suse.com/1227786 SUSE Bug 1227786 https://bugzilla.suse.com/1227787 SUSE Bug 1227787 https://bugzilla.suse.com/1227790 SUSE Bug 1227790 https://bugzilla.suse.com/1227792 SUSE Bug 1227792 https://bugzilla.suse.com/1227796 SUSE Bug 1227796 https://bugzilla.suse.com/1227797 SUSE Bug 1227797 https://bugzilla.suse.com/1227798 SUSE Bug 1227798 https://bugzilla.suse.com/1227800 SUSE Bug 1227800 https://bugzilla.suse.com/1227802 SUSE Bug 1227802 https://bugzilla.suse.com/1227806 SUSE Bug 1227806 https://bugzilla.suse.com/1227808 SUSE Bug 1227808 https://bugzilla.suse.com/1227810 SUSE Bug 1227810 https://bugzilla.suse.com/1227812 SUSE Bug 1227812 https://bugzilla.suse.com/1227813 SUSE Bug 1227813 https://bugzilla.suse.com/1227814 SUSE Bug 1227814 https://bugzilla.suse.com/1227816 SUSE Bug 1227816 https://bugzilla.suse.com/1227820 SUSE Bug 1227820 https://bugzilla.suse.com/1227823 SUSE Bug 1227823 https://bugzilla.suse.com/1227824 SUSE Bug 1227824 https://bugzilla.suse.com/1227828 SUSE Bug 1227828 https://bugzilla.suse.com/1227829 SUSE Bug 1227829 https://bugzilla.suse.com/1227836 SUSE Bug 1227836 https://bugzilla.suse.com/1227846 SUSE Bug 1227846 https://bugzilla.suse.com/1227849 SUSE Bug 1227849 https://bugzilla.suse.com/1227851 SUSE Bug 1227851 https://bugzilla.suse.com/1227862 SUSE Bug 1227862 https://bugzilla.suse.com/1227864 SUSE Bug 1227864 https://bugzilla.suse.com/1227865 SUSE Bug 1227865 https://bugzilla.suse.com/1227866 SUSE Bug 1227866 https://bugzilla.suse.com/1227870 SUSE Bug 1227870 https://bugzilla.suse.com/1227884 SUSE Bug 1227884 https://bugzilla.suse.com/1227886 SUSE Bug 1227886 https://bugzilla.suse.com/1227891 SUSE Bug 1227891 https://bugzilla.suse.com/1227893 SUSE Bug 1227893 https://bugzilla.suse.com/1227899 SUSE Bug 1227899 https://bugzilla.suse.com/1227900 SUSE Bug 1227900 https://bugzilla.suse.com/1227910 SUSE Bug 1227910 https://bugzilla.suse.com/1227913 SUSE Bug 1227913 https://bugzilla.suse.com/1227917 SUSE Bug 1227917 https://bugzilla.suse.com/1227919 SUSE Bug 1227919 https://bugzilla.suse.com/1227920 SUSE Bug 1227920 https://bugzilla.suse.com/1227921 SUSE Bug 1227921 https://bugzilla.suse.com/1227922 SUSE Bug 1227922 https://bugzilla.suse.com/1227923 SUSE Bug 1227923 https://bugzilla.suse.com/1227924 SUSE Bug 1227924 https://bugzilla.suse.com/1227925 SUSE Bug 1227925 https://bugzilla.suse.com/1227927 SUSE Bug 1227927 https://bugzilla.suse.com/1227928 SUSE Bug 1227928 https://bugzilla.suse.com/1227931 SUSE Bug 1227931 https://bugzilla.suse.com/1227932 SUSE Bug 1227932 https://bugzilla.suse.com/1227933 SUSE Bug 1227933 https://bugzilla.suse.com/1227935 SUSE Bug 1227935 https://bugzilla.suse.com/1227936 SUSE Bug 1227936 https://bugzilla.suse.com/1227938 SUSE Bug 1227938 https://bugzilla.suse.com/1227941 SUSE Bug 1227941 https://bugzilla.suse.com/1227942 SUSE Bug 1227942 https://bugzilla.suse.com/1227944 SUSE Bug 1227944 https://bugzilla.suse.com/1227945 SUSE Bug 1227945 https://bugzilla.suse.com/1227947 SUSE Bug 1227947 https://bugzilla.suse.com/1227948 SUSE Bug 1227948 https://bugzilla.suse.com/1227949 SUSE Bug 1227949 https://bugzilla.suse.com/1227950 SUSE Bug 1227950 https://bugzilla.suse.com/1227952 SUSE Bug 1227952 https://bugzilla.suse.com/1227953 SUSE Bug 1227953 https://bugzilla.suse.com/1227954 SUSE Bug 1227954 https://bugzilla.suse.com/1227956 SUSE Bug 1227956 https://bugzilla.suse.com/1227957 SUSE Bug 1227957 https://bugzilla.suse.com/1227963 SUSE Bug 1227963 https://bugzilla.suse.com/1227964 SUSE Bug 1227964 https://bugzilla.suse.com/1227965 SUSE Bug 1227965 https://bugzilla.suse.com/1227968 SUSE Bug 1227968 https://bugzilla.suse.com/1227969 SUSE Bug 1227969 https://bugzilla.suse.com/1227970 SUSE Bug 1227970 https://bugzilla.suse.com/1227971 SUSE Bug 1227971 https://bugzilla.suse.com/1227972 SUSE Bug 1227972 https://bugzilla.suse.com/1227975 SUSE Bug 1227975 https://bugzilla.suse.com/1227976 SUSE Bug 1227976 https://bugzilla.suse.com/1227981 SUSE Bug 1227981 https://bugzilla.suse.com/1227982 SUSE Bug 1227982 https://bugzilla.suse.com/1227985 SUSE Bug 1227985 https://bugzilla.suse.com/1227986 SUSE Bug 1227986 https://bugzilla.suse.com/1227987 SUSE Bug 1227987 https://bugzilla.suse.com/1227988 SUSE Bug 1227988 https://bugzilla.suse.com/1227989 SUSE Bug 1227989 https://bugzilla.suse.com/1227990 SUSE Bug 1227990 https://bugzilla.suse.com/1227991 SUSE Bug 1227991 https://bugzilla.suse.com/1227992 SUSE Bug 1227992 https://bugzilla.suse.com/1227993 SUSE Bug 1227993 https://bugzilla.suse.com/1227995 SUSE Bug 1227995 https://bugzilla.suse.com/1227996 SUSE Bug 1227996 https://bugzilla.suse.com/1227997 SUSE Bug 1227997 https://bugzilla.suse.com/1228000 SUSE Bug 1228000 https://bugzilla.suse.com/1228002 SUSE Bug 1228002 https://bugzilla.suse.com/1228003 SUSE Bug 1228003 https://bugzilla.suse.com/1228004 SUSE Bug 1228004 https://bugzilla.suse.com/1228005 SUSE Bug 1228005 https://bugzilla.suse.com/1228006 SUSE Bug 1228006 https://bugzilla.suse.com/1228007 SUSE Bug 1228007 https://bugzilla.suse.com/1228008 SUSE Bug 1228008 https://bugzilla.suse.com/1228009 SUSE Bug 1228009 https://bugzilla.suse.com/1228010 SUSE Bug 1228010 https://bugzilla.suse.com/1228011 SUSE Bug 1228011 https://bugzilla.suse.com/1228013 SUSE Bug 1228013 https://bugzilla.suse.com/1228014 SUSE Bug 1228014 https://bugzilla.suse.com/1228015 SUSE Bug 1228015 https://bugzilla.suse.com/1228019 SUSE Bug 1228019 https://bugzilla.suse.com/1228020 SUSE Bug 1228020 https://bugzilla.suse.com/1228025 SUSE Bug 1228025 https://bugzilla.suse.com/1228028 SUSE Bug 1228028 https://bugzilla.suse.com/1228035 SUSE Bug 1228035 https://bugzilla.suse.com/1228037 SUSE Bug 1228037 https://bugzilla.suse.com/1228038 SUSE Bug 1228038 https://bugzilla.suse.com/1228039 SUSE Bug 1228039 https://bugzilla.suse.com/1228040 SUSE Bug 1228040 https://bugzilla.suse.com/1228045 SUSE Bug 1228045 https://bugzilla.suse.com/1228054 SUSE Bug 1228054 https://bugzilla.suse.com/1228055 SUSE Bug 1228055 https://bugzilla.suse.com/1228056 SUSE Bug 1228056 https://bugzilla.suse.com/1228060 SUSE Bug 1228060 https://bugzilla.suse.com/1228061 SUSE Bug 1228061 https://bugzilla.suse.com/1228062 SUSE Bug 1228062 https://bugzilla.suse.com/1228063 SUSE Bug 1228063 https://bugzilla.suse.com/1228064 SUSE Bug 1228064 https://bugzilla.suse.com/1228066 SUSE Bug 1228066 https://bugzilla.suse.com/1228067 SUSE Bug 1228067 https://bugzilla.suse.com/1228068 SUSE Bug 1228068 https://bugzilla.suse.com/1228071 SUSE Bug 1228071 https://bugzilla.suse.com/1228079 SUSE Bug 1228079 https://bugzilla.suse.com/1228090 SUSE Bug 1228090 https://bugzilla.suse.com/1228114 SUSE Bug 1228114 https://bugzilla.suse.com/1228140 SUSE Bug 1228140 https://bugzilla.suse.com/1228190 SUSE Bug 1228190 https://bugzilla.suse.com/1228191 SUSE Bug 1228191 https://bugzilla.suse.com/1228195 SUSE Bug 1228195 https://bugzilla.suse.com/1228202 SUSE Bug 1228202 https://bugzilla.suse.com/1228226 SUSE Bug 1228226 https://bugzilla.suse.com/1228235 SUSE Bug 1228235 https://bugzilla.suse.com/1228237 SUSE Bug 1228237 https://bugzilla.suse.com/1228247 SUSE Bug 1228247 https://bugzilla.suse.com/1228327 SUSE Bug 1228327 https://bugzilla.suse.com/1228328 SUSE Bug 1228328 https://bugzilla.suse.com/1228330 SUSE Bug 1228330 https://bugzilla.suse.com/1228403 SUSE Bug 1228403 https://bugzilla.suse.com/1228405 SUSE Bug 1228405 https://bugzilla.suse.com/1228408 SUSE Bug 1228408 https://bugzilla.suse.com/1228409 SUSE Bug 1228409 https://bugzilla.suse.com/1228410 SUSE Bug 1228410 https://bugzilla.suse.com/1228418 SUSE Bug 1228418 https://bugzilla.suse.com/1228440 SUSE Bug 1228440 https://bugzilla.suse.com/1228459 SUSE Bug 1228459 https://bugzilla.suse.com/1228462 SUSE Bug 1228462 https://bugzilla.suse.com/1228470 SUSE Bug 1228470 https://bugzilla.suse.com/1228518 SUSE Bug 1228518 https://bugzilla.suse.com/1228520 SUSE Bug 1228520 https://bugzilla.suse.com/1228530 SUSE Bug 1228530 https://bugzilla.suse.com/1228561 SUSE Bug 1228561 https://bugzilla.suse.com/1228565 SUSE Bug 1228565 https://bugzilla.suse.com/1228580 SUSE Bug 1228580 https://bugzilla.suse.com/1228581 SUSE Bug 1228581 https://bugzilla.suse.com/1228591 SUSE Bug 1228591 https://bugzilla.suse.com/1228599 SUSE Bug 1228599 https://bugzilla.suse.com/1228617 SUSE Bug 1228617 https://bugzilla.suse.com/1228625 SUSE Bug 1228625 https://bugzilla.suse.com/1228626 SUSE Bug 1228626 https://bugzilla.suse.com/1228633 SUSE Bug 1228633 https://bugzilla.suse.com/1228640 SUSE Bug 1228640 https://bugzilla.suse.com/1228644 SUSE Bug 1228644 https://bugzilla.suse.com/1228649 SUSE Bug 1228649 https://bugzilla.suse.com/1228655 SUSE Bug 1228655 https://bugzilla.suse.com/1228665 SUSE Bug 1228665 https://bugzilla.suse.com/1228672 SUSE Bug 1228672 https://bugzilla.suse.com/1228680 SUSE Bug 1228680 https://bugzilla.suse.com/1228705 SUSE Bug 1228705 https://bugzilla.suse.com/1228723 SUSE Bug 1228723 https://bugzilla.suse.com/1228743 SUSE Bug 1228743 https://bugzilla.suse.com/1228756 SUSE Bug 1228756 https://bugzilla.suse.com/1228801 SUSE Bug 1228801 https://bugzilla.suse.com/1228850 SUSE Bug 1228850 https://bugzilla.suse.com/1228857 SUSE Bug 1228857 https://www.suse.com/security/cve/CVE-2021-47086/ SUSE CVE CVE-2021-47086 page https://www.suse.com/security/cve/CVE-2021-47103/ SUSE CVE CVE-2021-47103 page https://www.suse.com/security/cve/CVE-2021-47186/ SUSE CVE CVE-2021-47186 page https://www.suse.com/security/cve/CVE-2021-47402/ SUSE CVE CVE-2021-47402 page https://www.suse.com/security/cve/CVE-2021-47546/ SUSE CVE CVE-2021-47546 page https://www.suse.com/security/cve/CVE-2021-47547/ SUSE CVE CVE-2021-47547 page https://www.suse.com/security/cve/CVE-2021-47588/ SUSE CVE CVE-2021-47588 page https://www.suse.com/security/cve/CVE-2021-47590/ SUSE CVE CVE-2021-47590 page https://www.suse.com/security/cve/CVE-2021-47591/ SUSE CVE CVE-2021-47591 page https://www.suse.com/security/cve/CVE-2021-47593/ SUSE CVE CVE-2021-47593 page https://www.suse.com/security/cve/CVE-2021-47598/ SUSE CVE CVE-2021-47598 page https://www.suse.com/security/cve/CVE-2021-47599/ SUSE CVE CVE-2021-47599 page https://www.suse.com/security/cve/CVE-2021-47606/ SUSE CVE CVE-2021-47606 page https://www.suse.com/security/cve/CVE-2021-47622/ SUSE CVE CVE-2021-47622 page https://www.suse.com/security/cve/CVE-2021-47623/ SUSE CVE CVE-2021-47623 page https://www.suse.com/security/cve/CVE-2021-47624/ SUSE CVE CVE-2021-47624 page https://www.suse.com/security/cve/CVE-2022-48713/ SUSE CVE CVE-2022-48713 page https://www.suse.com/security/cve/CVE-2022-48730/ SUSE CVE CVE-2022-48730 page https://www.suse.com/security/cve/CVE-2022-48732/ SUSE CVE CVE-2022-48732 page https://www.suse.com/security/cve/CVE-2022-48749/ SUSE CVE CVE-2022-48749 page https://www.suse.com/security/cve/CVE-2022-48756/ SUSE CVE CVE-2022-48756 page https://www.suse.com/security/cve/CVE-2022-48773/ SUSE CVE CVE-2022-48773 page https://www.suse.com/security/cve/CVE-2022-48774/ SUSE CVE CVE-2022-48774 page https://www.suse.com/security/cve/CVE-2022-48775/ SUSE CVE CVE-2022-48775 page https://www.suse.com/security/cve/CVE-2022-48776/ SUSE CVE CVE-2022-48776 page https://www.suse.com/security/cve/CVE-2022-48777/ SUSE CVE CVE-2022-48777 page https://www.suse.com/security/cve/CVE-2022-48778/ SUSE CVE CVE-2022-48778 page https://www.suse.com/security/cve/CVE-2022-48780/ SUSE CVE CVE-2022-48780 page https://www.suse.com/security/cve/CVE-2022-48783/ SUSE CVE CVE-2022-48783 page https://www.suse.com/security/cve/CVE-2022-48784/ SUSE CVE CVE-2022-48784 page https://www.suse.com/security/cve/CVE-2022-48785/ SUSE CVE CVE-2022-48785 page https://www.suse.com/security/cve/CVE-2022-48786/ SUSE CVE CVE-2022-48786 page https://www.suse.com/security/cve/CVE-2022-48787/ SUSE CVE CVE-2022-48787 page https://www.suse.com/security/cve/CVE-2022-48788/ SUSE CVE CVE-2022-48788 page https://www.suse.com/security/cve/CVE-2022-48789/ SUSE CVE CVE-2022-48789 page https://www.suse.com/security/cve/CVE-2022-48790/ SUSE CVE CVE-2022-48790 page https://www.suse.com/security/cve/CVE-2022-48791/ SUSE CVE CVE-2022-48791 page https://www.suse.com/security/cve/CVE-2022-48792/ SUSE CVE CVE-2022-48792 page https://www.suse.com/security/cve/CVE-2022-48793/ SUSE CVE CVE-2022-48793 page https://www.suse.com/security/cve/CVE-2022-48794/ SUSE CVE CVE-2022-48794 page https://www.suse.com/security/cve/CVE-2022-48796/ SUSE CVE CVE-2022-48796 page https://www.suse.com/security/cve/CVE-2022-48797/ SUSE CVE CVE-2022-48797 page https://www.suse.com/security/cve/CVE-2022-48798/ SUSE CVE CVE-2022-48798 page https://www.suse.com/security/cve/CVE-2022-48799/ SUSE CVE CVE-2022-48799 page https://www.suse.com/security/cve/CVE-2022-48800/ SUSE CVE CVE-2022-48800 page https://www.suse.com/security/cve/CVE-2022-48801/ SUSE CVE CVE-2022-48801 page https://www.suse.com/security/cve/CVE-2022-48802/ SUSE CVE CVE-2022-48802 page https://www.suse.com/security/cve/CVE-2022-48803/ SUSE CVE CVE-2022-48803 page https://www.suse.com/security/cve/CVE-2022-48804/ SUSE CVE CVE-2022-48804 page https://www.suse.com/security/cve/CVE-2022-48805/ SUSE CVE CVE-2022-48805 page https://www.suse.com/security/cve/CVE-2022-48806/ SUSE CVE CVE-2022-48806 page https://www.suse.com/security/cve/CVE-2022-48807/ SUSE CVE CVE-2022-48807 page https://www.suse.com/security/cve/CVE-2022-48809/ SUSE CVE CVE-2022-48809 page https://www.suse.com/security/cve/CVE-2022-48810/ SUSE CVE CVE-2022-48810 page https://www.suse.com/security/cve/CVE-2022-48811/ SUSE CVE CVE-2022-48811 page https://www.suse.com/security/cve/CVE-2022-48812/ SUSE CVE CVE-2022-48812 page https://www.suse.com/security/cve/CVE-2022-48813/ SUSE CVE CVE-2022-48813 page https://www.suse.com/security/cve/CVE-2022-48814/ SUSE CVE CVE-2022-48814 page https://www.suse.com/security/cve/CVE-2022-48815/ SUSE CVE CVE-2022-48815 page https://www.suse.com/security/cve/CVE-2022-48816/ SUSE CVE CVE-2022-48816 page https://www.suse.com/security/cve/CVE-2022-48817/ SUSE CVE CVE-2022-48817 page https://www.suse.com/security/cve/CVE-2022-48818/ SUSE CVE CVE-2022-48818 page https://www.suse.com/security/cve/CVE-2022-48820/ SUSE CVE CVE-2022-48820 page https://www.suse.com/security/cve/CVE-2022-48821/ SUSE CVE CVE-2022-48821 page https://www.suse.com/security/cve/CVE-2022-48822/ SUSE CVE CVE-2022-48822 page https://www.suse.com/security/cve/CVE-2022-48823/ SUSE CVE CVE-2022-48823 page https://www.suse.com/security/cve/CVE-2022-48824/ SUSE CVE CVE-2022-48824 page https://www.suse.com/security/cve/CVE-2022-48825/ SUSE CVE CVE-2022-48825 page https://www.suse.com/security/cve/CVE-2022-48826/ SUSE CVE CVE-2022-48826 page https://www.suse.com/security/cve/CVE-2022-48827/ SUSE CVE CVE-2022-48827 page https://www.suse.com/security/cve/CVE-2022-48828/ SUSE CVE CVE-2022-48828 page https://www.suse.com/security/cve/CVE-2022-48829/ SUSE CVE CVE-2022-48829 page https://www.suse.com/security/cve/CVE-2022-48830/ SUSE CVE CVE-2022-48830 page https://www.suse.com/security/cve/CVE-2022-48831/ SUSE CVE CVE-2022-48831 page https://www.suse.com/security/cve/CVE-2022-48834/ SUSE CVE CVE-2022-48834 page https://www.suse.com/security/cve/CVE-2022-48835/ SUSE CVE CVE-2022-48835 page https://www.suse.com/security/cve/CVE-2022-48836/ SUSE CVE CVE-2022-48836 page https://www.suse.com/security/cve/CVE-2022-48837/ SUSE CVE CVE-2022-48837 page https://www.suse.com/security/cve/CVE-2022-48838/ SUSE CVE CVE-2022-48838 page https://www.suse.com/security/cve/CVE-2022-48839/ SUSE CVE CVE-2022-48839 page https://www.suse.com/security/cve/CVE-2022-48840/ SUSE CVE CVE-2022-48840 page https://www.suse.com/security/cve/CVE-2022-48841/ SUSE CVE CVE-2022-48841 page https://www.suse.com/security/cve/CVE-2022-48842/ SUSE CVE CVE-2022-48842 page https://www.suse.com/security/cve/CVE-2022-48843/ SUSE CVE CVE-2022-48843 page https://www.suse.com/security/cve/CVE-2022-48844/ SUSE CVE CVE-2022-48844 page https://www.suse.com/security/cve/CVE-2022-48846/ SUSE CVE CVE-2022-48846 page https://www.suse.com/security/cve/CVE-2022-48847/ SUSE CVE CVE-2022-48847 page https://www.suse.com/security/cve/CVE-2022-48849/ SUSE CVE CVE-2022-48849 page https://www.suse.com/security/cve/CVE-2022-48850/ SUSE CVE CVE-2022-48850 page https://www.suse.com/security/cve/CVE-2022-48851/ SUSE CVE CVE-2022-48851 page https://www.suse.com/security/cve/CVE-2022-48852/ SUSE CVE CVE-2022-48852 page https://www.suse.com/security/cve/CVE-2022-48853/ SUSE CVE CVE-2022-48853 page https://www.suse.com/security/cve/CVE-2022-48855/ SUSE CVE CVE-2022-48855 page https://www.suse.com/security/cve/CVE-2022-48856/ SUSE CVE CVE-2022-48856 page https://www.suse.com/security/cve/CVE-2022-48857/ SUSE CVE CVE-2022-48857 page https://www.suse.com/security/cve/CVE-2022-48858/ SUSE CVE CVE-2022-48858 page https://www.suse.com/security/cve/CVE-2022-48859/ SUSE CVE CVE-2022-48859 page https://www.suse.com/security/cve/CVE-2022-48860/ SUSE CVE CVE-2022-48860 page https://www.suse.com/security/cve/CVE-2022-48861/ SUSE CVE CVE-2022-48861 page https://www.suse.com/security/cve/CVE-2022-48862/ SUSE CVE CVE-2022-48862 page https://www.suse.com/security/cve/CVE-2022-48863/ SUSE CVE CVE-2022-48863 page https://www.suse.com/security/cve/CVE-2022-48864/ SUSE CVE CVE-2022-48864 page https://www.suse.com/security/cve/CVE-2022-48866/ SUSE CVE CVE-2022-48866 page https://www.suse.com/security/cve/CVE-2023-1582/ SUSE CVE CVE-2023-1582 page https://www.suse.com/security/cve/CVE-2023-37453/ SUSE CVE CVE-2023-37453 page https://www.suse.com/security/cve/CVE-2023-52435/ SUSE CVE CVE-2023-52435 page https://www.suse.com/security/cve/CVE-2023-52573/ SUSE CVE CVE-2023-52573 page https://www.suse.com/security/cve/CVE-2023-52580/ SUSE CVE CVE-2023-52580 page https://www.suse.com/security/cve/CVE-2023-52591/ SUSE CVE CVE-2023-52591 page https://www.suse.com/security/cve/CVE-2023-52735/ SUSE CVE CVE-2023-52735 page https://www.suse.com/security/cve/CVE-2023-52751/ SUSE CVE CVE-2023-52751 page https://www.suse.com/security/cve/CVE-2023-52762/ SUSE CVE CVE-2023-52762 page https://www.suse.com/security/cve/CVE-2023-52775/ SUSE CVE CVE-2023-52775 page https://www.suse.com/security/cve/CVE-2023-52812/ SUSE CVE CVE-2023-52812 page https://www.suse.com/security/cve/CVE-2023-52857/ SUSE CVE CVE-2023-52857 page https://www.suse.com/security/cve/CVE-2023-52863/ SUSE CVE CVE-2023-52863 page https://www.suse.com/security/cve/CVE-2023-52885/ SUSE CVE CVE-2023-52885 page https://www.suse.com/security/cve/CVE-2023-52886/ SUSE CVE CVE-2023-52886 page https://www.suse.com/security/cve/CVE-2024-25741/ SUSE CVE CVE-2024-25741 page https://www.suse.com/security/cve/CVE-2024-26583/ SUSE CVE CVE-2024-26583 page https://www.suse.com/security/cve/CVE-2024-26584/ SUSE CVE CVE-2024-26584 page https://www.suse.com/security/cve/CVE-2024-26585/ SUSE CVE CVE-2024-26585 page https://www.suse.com/security/cve/CVE-2024-26615/ SUSE CVE CVE-2024-26615 page https://www.suse.com/security/cve/CVE-2024-26633/ SUSE CVE CVE-2024-26633 page https://www.suse.com/security/cve/CVE-2024-26635/ SUSE CVE CVE-2024-26635 page https://www.suse.com/security/cve/CVE-2024-26636/ SUSE CVE CVE-2024-26636 page https://www.suse.com/security/cve/CVE-2024-26641/ SUSE CVE CVE-2024-26641 page https://www.suse.com/security/cve/CVE-2024-26661/ SUSE CVE CVE-2024-26661 page https://www.suse.com/security/cve/CVE-2024-26663/ SUSE CVE CVE-2024-26663 page https://www.suse.com/security/cve/CVE-2024-26665/ SUSE CVE CVE-2024-26665 page https://www.suse.com/security/cve/CVE-2024-26800/ SUSE CVE CVE-2024-26800 page https://www.suse.com/security/cve/CVE-2024-26802/ SUSE CVE CVE-2024-26802 page https://www.suse.com/security/cve/CVE-2024-26813/ SUSE CVE CVE-2024-26813 page https://www.suse.com/security/cve/CVE-2024-26814/ SUSE CVE CVE-2024-26814 page https://www.suse.com/security/cve/CVE-2024-26863/ SUSE CVE CVE-2024-26863 page https://www.suse.com/security/cve/CVE-2024-26889/ SUSE CVE CVE-2024-26889 page https://www.suse.com/security/cve/CVE-2024-26920/ SUSE CVE CVE-2024-26920 page https://www.suse.com/security/cve/CVE-2024-26935/ SUSE CVE CVE-2024-26935 page https://www.suse.com/security/cve/CVE-2024-26961/ SUSE CVE CVE-2024-26961 page https://www.suse.com/security/cve/CVE-2024-26976/ SUSE CVE CVE-2024-26976 page https://www.suse.com/security/cve/CVE-2024-27015/ SUSE CVE CVE-2024-27015 page https://www.suse.com/security/cve/CVE-2024-27019/ SUSE CVE CVE-2024-27019 page https://www.suse.com/security/cve/CVE-2024-27020/ SUSE CVE CVE-2024-27020 page https://www.suse.com/security/cve/CVE-2024-27025/ SUSE CVE CVE-2024-27025 page https://www.suse.com/security/cve/CVE-2024-27065/ SUSE CVE CVE-2024-27065 page https://www.suse.com/security/cve/CVE-2024-27402/ SUSE CVE CVE-2024-27402 page https://www.suse.com/security/cve/CVE-2024-27437/ SUSE CVE CVE-2024-27437 page https://www.suse.com/security/cve/CVE-2024-35805/ SUSE CVE CVE-2024-35805 page https://www.suse.com/security/cve/CVE-2024-35819/ SUSE CVE CVE-2024-35819 page https://www.suse.com/security/cve/CVE-2024-35837/ SUSE CVE CVE-2024-35837 page https://www.suse.com/security/cve/CVE-2024-35853/ SUSE CVE CVE-2024-35853 page https://www.suse.com/security/cve/CVE-2024-35854/ SUSE CVE CVE-2024-35854 page https://www.suse.com/security/cve/CVE-2024-35855/ SUSE CVE CVE-2024-35855 page https://www.suse.com/security/cve/CVE-2024-35889/ SUSE CVE CVE-2024-35889 page https://www.suse.com/security/cve/CVE-2024-35890/ SUSE CVE CVE-2024-35890 page https://www.suse.com/security/cve/CVE-2024-35893/ SUSE CVE CVE-2024-35893 page https://www.suse.com/security/cve/CVE-2024-35899/ SUSE CVE CVE-2024-35899 page https://www.suse.com/security/cve/CVE-2024-35934/ SUSE CVE CVE-2024-35934 page https://www.suse.com/security/cve/CVE-2024-35949/ SUSE CVE CVE-2024-35949 page https://www.suse.com/security/cve/CVE-2024-35961/ SUSE CVE CVE-2024-35961 page https://www.suse.com/security/cve/CVE-2024-35979/ SUSE CVE CVE-2024-35979 page https://www.suse.com/security/cve/CVE-2024-35995/ SUSE CVE CVE-2024-35995 page https://www.suse.com/security/cve/CVE-2024-36000/ SUSE CVE CVE-2024-36000 page https://www.suse.com/security/cve/CVE-2024-36004/ SUSE CVE CVE-2024-36004 page https://www.suse.com/security/cve/CVE-2024-36288/ SUSE CVE CVE-2024-36288 page https://www.suse.com/security/cve/CVE-2024-36889/ SUSE CVE CVE-2024-36889 page https://www.suse.com/security/cve/CVE-2024-36901/ SUSE CVE CVE-2024-36901 page https://www.suse.com/security/cve/CVE-2024-36902/ SUSE CVE CVE-2024-36902 page https://www.suse.com/security/cve/CVE-2024-36909/ SUSE CVE CVE-2024-36909 page https://www.suse.com/security/cve/CVE-2024-36910/ SUSE CVE CVE-2024-36910 page https://www.suse.com/security/cve/CVE-2024-36911/ SUSE CVE CVE-2024-36911 page https://www.suse.com/security/cve/CVE-2024-36912/ SUSE CVE CVE-2024-36912 page https://www.suse.com/security/cve/CVE-2024-36913/ SUSE CVE CVE-2024-36913 page https://www.suse.com/security/cve/CVE-2024-36914/ SUSE CVE CVE-2024-36914 page https://www.suse.com/security/cve/CVE-2024-36919/ SUSE CVE CVE-2024-36919 page https://www.suse.com/security/cve/CVE-2024-36923/ SUSE CVE CVE-2024-36923 page https://www.suse.com/security/cve/CVE-2024-36924/ SUSE CVE CVE-2024-36924 page https://www.suse.com/security/cve/CVE-2024-36926/ SUSE CVE CVE-2024-36926 page https://www.suse.com/security/cve/CVE-2024-36939/ SUSE CVE CVE-2024-36939 page https://www.suse.com/security/cve/CVE-2024-36941/ SUSE CVE CVE-2024-36941 page https://www.suse.com/security/cve/CVE-2024-36942/ SUSE CVE CVE-2024-36942 page https://www.suse.com/security/cve/CVE-2024-36944/ SUSE CVE CVE-2024-36944 page https://www.suse.com/security/cve/CVE-2024-36946/ SUSE CVE CVE-2024-36946 page https://www.suse.com/security/cve/CVE-2024-36947/ SUSE CVE CVE-2024-36947 page https://www.suse.com/security/cve/CVE-2024-36950/ SUSE CVE CVE-2024-36950 page https://www.suse.com/security/cve/CVE-2024-36952/ SUSE CVE CVE-2024-36952 page https://www.suse.com/security/cve/CVE-2024-36955/ SUSE CVE CVE-2024-36955 page https://www.suse.com/security/cve/CVE-2024-36959/ SUSE CVE CVE-2024-36959 page https://www.suse.com/security/cve/CVE-2024-36974/ SUSE CVE CVE-2024-36974 page https://www.suse.com/security/cve/CVE-2024-38548/ SUSE CVE CVE-2024-38548 page https://www.suse.com/security/cve/CVE-2024-38555/ SUSE CVE CVE-2024-38555 page https://www.suse.com/security/cve/CVE-2024-38558/ SUSE CVE CVE-2024-38558 page https://www.suse.com/security/cve/CVE-2024-38559/ SUSE CVE CVE-2024-38559 page https://www.suse.com/security/cve/CVE-2024-38570/ SUSE CVE CVE-2024-38570 page https://www.suse.com/security/cve/CVE-2024-38586/ SUSE CVE CVE-2024-38586 page https://www.suse.com/security/cve/CVE-2024-38588/ SUSE CVE CVE-2024-38588 page https://www.suse.com/security/cve/CVE-2024-38598/ SUSE CVE CVE-2024-38598 page https://www.suse.com/security/cve/CVE-2024-38628/ SUSE CVE CVE-2024-38628 page https://www.suse.com/security/cve/CVE-2024-39276/ SUSE CVE CVE-2024-39276 page https://www.suse.com/security/cve/CVE-2024-39371/ SUSE CVE CVE-2024-39371 page https://www.suse.com/security/cve/CVE-2024-39463/ SUSE CVE CVE-2024-39463 page https://www.suse.com/security/cve/CVE-2024-39472/ SUSE CVE CVE-2024-39472 page https://www.suse.com/security/cve/CVE-2024-39475/ SUSE CVE CVE-2024-39475 page https://www.suse.com/security/cve/CVE-2024-39482/ SUSE CVE CVE-2024-39482 page https://www.suse.com/security/cve/CVE-2024-39487/ SUSE CVE CVE-2024-39487 page https://www.suse.com/security/cve/CVE-2024-39488/ SUSE CVE CVE-2024-39488 page https://www.suse.com/security/cve/CVE-2024-39490/ SUSE CVE CVE-2024-39490 page https://www.suse.com/security/cve/CVE-2024-39493/ SUSE CVE CVE-2024-39493 page https://www.suse.com/security/cve/CVE-2024-39494/ SUSE CVE CVE-2024-39494 page https://www.suse.com/security/cve/CVE-2024-39497/ SUSE CVE CVE-2024-39497 page https://www.suse.com/security/cve/CVE-2024-39499/ SUSE CVE CVE-2024-39499 page https://www.suse.com/security/cve/CVE-2024-39500/ SUSE CVE CVE-2024-39500 page https://www.suse.com/security/cve/CVE-2024-39501/ SUSE CVE CVE-2024-39501 page https://www.suse.com/security/cve/CVE-2024-39502/ SUSE CVE CVE-2024-39502 page https://www.suse.com/security/cve/CVE-2024-39505/ SUSE CVE CVE-2024-39505 page https://www.suse.com/security/cve/CVE-2024-39506/ SUSE CVE CVE-2024-39506 page https://www.suse.com/security/cve/CVE-2024-39507/ SUSE CVE CVE-2024-39507 page https://www.suse.com/security/cve/CVE-2024-39508/ SUSE CVE CVE-2024-39508 page https://www.suse.com/security/cve/CVE-2024-39509/ SUSE CVE CVE-2024-39509 page https://www.suse.com/security/cve/CVE-2024-40900/ SUSE CVE CVE-2024-40900 page https://www.suse.com/security/cve/CVE-2024-40901/ SUSE CVE CVE-2024-40901 page https://www.suse.com/security/cve/CVE-2024-40902/ SUSE CVE CVE-2024-40902 page https://www.suse.com/security/cve/CVE-2024-40903/ SUSE CVE CVE-2024-40903 page https://www.suse.com/security/cve/CVE-2024-40904/ SUSE CVE CVE-2024-40904 page https://www.suse.com/security/cve/CVE-2024-40906/ SUSE CVE CVE-2024-40906 page https://www.suse.com/security/cve/CVE-2024-40908/ SUSE CVE CVE-2024-40908 page https://www.suse.com/security/cve/CVE-2024-40909/ SUSE CVE CVE-2024-40909 page https://www.suse.com/security/cve/CVE-2024-40911/ SUSE CVE CVE-2024-40911 page https://www.suse.com/security/cve/CVE-2024-40912/ SUSE CVE CVE-2024-40912 page https://www.suse.com/security/cve/CVE-2024-40916/ SUSE CVE CVE-2024-40916 page https://www.suse.com/security/cve/CVE-2024-40919/ SUSE CVE CVE-2024-40919 page https://www.suse.com/security/cve/CVE-2024-40923/ SUSE CVE CVE-2024-40923 page https://www.suse.com/security/cve/CVE-2024-40924/ SUSE CVE CVE-2024-40924 page https://www.suse.com/security/cve/CVE-2024-40927/ SUSE CVE CVE-2024-40927 page https://www.suse.com/security/cve/CVE-2024-40929/ SUSE CVE CVE-2024-40929 page https://www.suse.com/security/cve/CVE-2024-40931/ SUSE CVE CVE-2024-40931 page https://www.suse.com/security/cve/CVE-2024-40932/ SUSE CVE CVE-2024-40932 page https://www.suse.com/security/cve/CVE-2024-40934/ SUSE CVE CVE-2024-40934 page https://www.suse.com/security/cve/CVE-2024-40935/ SUSE CVE CVE-2024-40935 page https://www.suse.com/security/cve/CVE-2024-40937/ SUSE CVE CVE-2024-40937 page https://www.suse.com/security/cve/CVE-2024-40940/ SUSE CVE CVE-2024-40940 page https://www.suse.com/security/cve/CVE-2024-40941/ SUSE CVE CVE-2024-40941 page https://www.suse.com/security/cve/CVE-2024-40942/ SUSE CVE CVE-2024-40942 page https://www.suse.com/security/cve/CVE-2024-40943/ SUSE CVE CVE-2024-40943 page https://www.suse.com/security/cve/CVE-2024-40945/ SUSE CVE CVE-2024-40945 page https://www.suse.com/security/cve/CVE-2024-40953/ SUSE CVE CVE-2024-40953 page https://www.suse.com/security/cve/CVE-2024-40954/ SUSE CVE CVE-2024-40954 page https://www.suse.com/security/cve/CVE-2024-40956/ SUSE CVE CVE-2024-40956 page https://www.suse.com/security/cve/CVE-2024-40958/ SUSE CVE CVE-2024-40958 page https://www.suse.com/security/cve/CVE-2024-40959/ SUSE CVE CVE-2024-40959 page https://www.suse.com/security/cve/CVE-2024-40960/ SUSE CVE CVE-2024-40960 page https://www.suse.com/security/cve/CVE-2024-40961/ SUSE CVE CVE-2024-40961 page https://www.suse.com/security/cve/CVE-2024-40966/ SUSE CVE CVE-2024-40966 page https://www.suse.com/security/cve/CVE-2024-40967/ SUSE CVE CVE-2024-40967 page https://www.suse.com/security/cve/CVE-2024-40970/ SUSE CVE CVE-2024-40970 page https://www.suse.com/security/cve/CVE-2024-40972/ SUSE CVE CVE-2024-40972 page https://www.suse.com/security/cve/CVE-2024-40976/ SUSE CVE CVE-2024-40976 page https://www.suse.com/security/cve/CVE-2024-40977/ SUSE CVE CVE-2024-40977 page https://www.suse.com/security/cve/CVE-2024-40981/ SUSE CVE CVE-2024-40981 page https://www.suse.com/security/cve/CVE-2024-40982/ SUSE CVE CVE-2024-40982 page https://www.suse.com/security/cve/CVE-2024-40984/ SUSE CVE CVE-2024-40984 page https://www.suse.com/security/cve/CVE-2024-40987/ SUSE CVE CVE-2024-40987 page https://www.suse.com/security/cve/CVE-2024-40988/ SUSE CVE CVE-2024-40988 page https://www.suse.com/security/cve/CVE-2024-40989/ SUSE CVE CVE-2024-40989 page https://www.suse.com/security/cve/CVE-2024-40990/ SUSE CVE CVE-2024-40990 page https://www.suse.com/security/cve/CVE-2024-40994/ SUSE CVE CVE-2024-40994 page https://www.suse.com/security/cve/CVE-2024-40998/ SUSE CVE CVE-2024-40998 page https://www.suse.com/security/cve/CVE-2024-40999/ SUSE CVE CVE-2024-40999 page https://www.suse.com/security/cve/CVE-2024-41002/ SUSE CVE CVE-2024-41002 page https://www.suse.com/security/cve/CVE-2024-41004/ SUSE CVE CVE-2024-41004 page https://www.suse.com/security/cve/CVE-2024-41006/ SUSE CVE CVE-2024-41006 page https://www.suse.com/security/cve/CVE-2024-41009/ SUSE CVE CVE-2024-41009 page https://www.suse.com/security/cve/CVE-2024-41011/ SUSE CVE CVE-2024-41011 page https://www.suse.com/security/cve/CVE-2024-41012/ SUSE CVE CVE-2024-41012 page https://www.suse.com/security/cve/CVE-2024-41013/ SUSE CVE CVE-2024-41013 page https://www.suse.com/security/cve/CVE-2024-41014/ SUSE CVE CVE-2024-41014 page https://www.suse.com/security/cve/CVE-2024-41015/ SUSE CVE CVE-2024-41015 page https://www.suse.com/security/cve/CVE-2024-41016/ SUSE CVE CVE-2024-41016 page https://www.suse.com/security/cve/CVE-2024-41017/ SUSE CVE CVE-2024-41017 page https://www.suse.com/security/cve/CVE-2024-41040/ SUSE CVE CVE-2024-41040 page https://www.suse.com/security/cve/CVE-2024-41041/ SUSE CVE CVE-2024-41041 page https://www.suse.com/security/cve/CVE-2024-41044/ SUSE CVE CVE-2024-41044 page https://www.suse.com/security/cve/CVE-2024-41048/ SUSE CVE CVE-2024-41048 page https://www.suse.com/security/cve/CVE-2024-41057/ SUSE CVE CVE-2024-41057 page https://www.suse.com/security/cve/CVE-2024-41058/ SUSE CVE CVE-2024-41058 page https://www.suse.com/security/cve/CVE-2024-41059/ SUSE CVE CVE-2024-41059 page https://www.suse.com/security/cve/CVE-2024-41063/ SUSE CVE CVE-2024-41063 page https://www.suse.com/security/cve/CVE-2024-41064/ SUSE CVE CVE-2024-41064 page https://www.suse.com/security/cve/CVE-2024-41066/ SUSE CVE CVE-2024-41066 page https://www.suse.com/security/cve/CVE-2024-41069/ SUSE CVE CVE-2024-41069 page https://www.suse.com/security/cve/CVE-2024-41070/ SUSE CVE CVE-2024-41070 page https://www.suse.com/security/cve/CVE-2024-41071/ SUSE CVE CVE-2024-41071 page https://www.suse.com/security/cve/CVE-2024-41072/ SUSE CVE CVE-2024-41072 page https://www.suse.com/security/cve/CVE-2024-41076/ SUSE CVE CVE-2024-41076 page https://www.suse.com/security/cve/CVE-2024-41078/ SUSE CVE CVE-2024-41078 page https://www.suse.com/security/cve/CVE-2024-41081/ SUSE CVE CVE-2024-41081 page https://www.suse.com/security/cve/CVE-2024-41087/ SUSE CVE CVE-2024-41087 page https://www.suse.com/security/cve/CVE-2024-41090/ SUSE CVE CVE-2024-41090 page https://www.suse.com/security/cve/CVE-2024-41091/ SUSE CVE CVE-2024-41091 page https://www.suse.com/security/cve/CVE-2024-42070/ SUSE CVE CVE-2024-42070 page https://www.suse.com/security/cve/CVE-2024-42079/ SUSE CVE CVE-2024-42079 page https://www.suse.com/security/cve/CVE-2024-42093/ SUSE CVE CVE-2024-42093 page https://www.suse.com/security/cve/CVE-2024-42096/ SUSE CVE CVE-2024-42096 page https://www.suse.com/security/cve/CVE-2024-42105/ SUSE CVE CVE-2024-42105 page https://www.suse.com/security/cve/CVE-2024-42122/ SUSE CVE CVE-2024-42122 page https://www.suse.com/security/cve/CVE-2024-42124/ SUSE CVE CVE-2024-42124 page https://www.suse.com/security/cve/CVE-2024-42145/ SUSE CVE CVE-2024-42145 page https://www.suse.com/security/cve/CVE-2024-42161/ SUSE CVE CVE-2024-42161 page https://www.suse.com/security/cve/CVE-2024-42224/ SUSE CVE CVE-2024-42224 page https://www.suse.com/security/cve/CVE-2024-42230/ SUSE CVE CVE-2024-42230 page Container suse/sle-micro/rt-5.5:latest SUSE Linux Enterprise Live Patching 15 SP5 SUSE Linux Enterprise Micro 5.5 SUSE Real Time Module 15 SP5 openSUSE Leap 15.5 openSUSE Leap Micro 5.5 kernel-rt-5.14.21-150500.13.64.1 cluster-md-kmp-rt-5.14.21-150500.13.64.1 dlm-kmp-rt-5.14.21-150500.13.64.1 gfs2-kmp-rt-5.14.21-150500.13.64.1 kernel-devel-rt-5.14.21-150500.13.64.1 kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 kernel-rt-devel-5.14.21-150500.13.64.1 kernel-rt-extra-5.14.21-150500.13.64.1 kernel-rt-livepatch-5.14.21-150500.13.64.1 kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 kernel-rt-optional-5.14.21-150500.13.64.1 kernel-rt-vdso-5.14.21-150500.13.64.1 kernel-rt_debug-5.14.21-150500.13.64.1 kernel-rt_debug-devel-5.14.21-150500.13.64.1 kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 kernel-rt_debug-vdso-5.14.21-150500.13.64.1 kernel-source-rt-5.14.21-150500.13.64.1 kernel-syms-rt-5.14.21-150500.13.64.1 kselftests-kmp-rt-5.14.21-150500.13.64.1 ocfs2-kmp-rt-5.14.21-150500.13.64.1 reiserfs-kmp-rt-5.14.21-150500.13.64.1 kernel-rt-5.14.21-150500.13.64.1 as a component of Container suse/sle-micro/rt-5.5:latest kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 as a component of SUSE Linux Enterprise Live Patching 15 SP5 kernel-rt-5.14.21-150500.13.64.1 as a component of SUSE Linux Enterprise Micro 5.5 kernel-source-rt-5.14.21-150500.13.64.1 as a component of SUSE Linux Enterprise Micro 5.5 cluster-md-kmp-rt-5.14.21-150500.13.64.1 as a component of SUSE Real Time Module 15 SP5 dlm-kmp-rt-5.14.21-150500.13.64.1 as a component of SUSE Real Time Module 15 SP5 gfs2-kmp-rt-5.14.21-150500.13.64.1 as a component of SUSE Real Time Module 15 SP5 kernel-devel-rt-5.14.21-150500.13.64.1 as a component of SUSE Real Time Module 15 SP5 kernel-rt-5.14.21-150500.13.64.1 as a component of SUSE Real Time Module 15 SP5 kernel-rt-devel-5.14.21-150500.13.64.1 as a component of SUSE Real Time Module 15 SP5 kernel-rt-vdso-5.14.21-150500.13.64.1 as a component of SUSE Real Time Module 15 SP5 kernel-rt_debug-5.14.21-150500.13.64.1 as a component of SUSE Real Time Module 15 SP5 kernel-rt_debug-devel-5.14.21-150500.13.64.1 as a component of SUSE Real Time Module 15 SP5 kernel-rt_debug-vdso-5.14.21-150500.13.64.1 as a component of SUSE Real Time Module 15 SP5 kernel-source-rt-5.14.21-150500.13.64.1 as a component of SUSE Real Time Module 15 SP5 kernel-syms-rt-5.14.21-150500.13.64.1 as a component of SUSE Real Time Module 15 SP5 ocfs2-kmp-rt-5.14.21-150500.13.64.1 as a component of SUSE Real Time Module 15 SP5 cluster-md-kmp-rt-5.14.21-150500.13.64.1 as a component of openSUSE Leap 15.5 dlm-kmp-rt-5.14.21-150500.13.64.1 as a component of openSUSE Leap 15.5 gfs2-kmp-rt-5.14.21-150500.13.64.1 as a component of openSUSE Leap 15.5 kernel-devel-rt-5.14.21-150500.13.64.1 as a component of openSUSE Leap 15.5 kernel-rt-5.14.21-150500.13.64.1 as a component of openSUSE Leap 15.5 kernel-rt-devel-5.14.21-150500.13.64.1 as a component of openSUSE Leap 15.5 kernel-rt-extra-5.14.21-150500.13.64.1 as a component of openSUSE Leap 15.5 kernel-rt-livepatch-5.14.21-150500.13.64.1 as a component of openSUSE Leap 15.5 kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 as a component of openSUSE Leap 15.5 kernel-rt-optional-5.14.21-150500.13.64.1 as a component of openSUSE Leap 15.5 kernel-rt-vdso-5.14.21-150500.13.64.1 as a component of openSUSE Leap 15.5 kernel-rt_debug-5.14.21-150500.13.64.1 as a component of openSUSE Leap 15.5 kernel-rt_debug-devel-5.14.21-150500.13.64.1 as a component of openSUSE Leap 15.5 kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 as a component of openSUSE Leap 15.5 kernel-rt_debug-vdso-5.14.21-150500.13.64.1 as a component of openSUSE Leap 15.5 kernel-source-rt-5.14.21-150500.13.64.1 as a component of openSUSE Leap 15.5 kernel-syms-rt-5.14.21-150500.13.64.1 as a component of openSUSE Leap 15.5 kselftests-kmp-rt-5.14.21-150500.13.64.1 as a component of openSUSE Leap 15.5 ocfs2-kmp-rt-5.14.21-150500.13.64.1 as a component of openSUSE Leap 15.5 reiserfs-kmp-rt-5.14.21-150500.13.64.1 as a component of openSUSE Leap 15.5 kernel-rt-5.14.21-150500.13.64.1 as a component of openSUSE Leap Micro 5.5 In the Linux kernel, the following vulnerability has been resolved: phonet/pep: refuse to enable an unbound pipe This ioctl() implicitly assumed that the socket was already bound to a valid local socket name, i.e. Phonet object. If the socket was not bound, two separate problems would occur: 1) We'd send an pipe enablement request with an invalid source object. 2) Later socket calls could BUG on the socket unexpectedly being connected yet not bound to a valid object. CVE-2021-47086 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2021-47086.html CVE-2021-47086 https://bugzilla.suse.com/1220952 SUSE Bug 1220952 In the Linux kernel, the following vulnerability has been resolved: inet: fully convert sk->sk_rx_dst to RCU rules syzbot reported various issues around early demux, one being included in this changelog [1] sk->sk_rx_dst is using RCU protection without clearly documenting it. And following sequences in tcp_v4_do_rcv()/tcp_v6_do_rcv() are not following standard RCU rules. [a] dst_release(dst); [b] sk->sk_rx_dst = NULL; They look wrong because a delete operation of RCU protected pointer is supposed to clear the pointer before the call_rcu()/synchronize_rcu() guarding actual memory freeing. In some cases indeed, dst could be freed before [b] is done. We could cheat by clearing sk_rx_dst before calling dst_release(), but this seems the right time to stick to standard RCU annotations and debugging facilities. [1] BUG: KASAN: use-after-free in dst_check include/net/dst.h:470 [inline] BUG: KASAN: use-after-free in tcp_v4_early_demux+0x95b/0x960 net/ipv4/tcp_ipv4.c:1792 Read of size 2 at addr ffff88807f1cb73a by task syz-executor.5/9204 CPU: 0 PID: 9204 Comm: syz-executor.5 Not tainted 5.16.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 print_address_description.constprop.0.cold+0x8d/0x320 mm/kasan/report.c:247 __kasan_report mm/kasan/report.c:433 [inline] kasan_report.cold+0x83/0xdf mm/kasan/report.c:450 dst_check include/net/dst.h:470 [inline] tcp_v4_early_demux+0x95b/0x960 net/ipv4/tcp_ipv4.c:1792 ip_rcv_finish_core.constprop.0+0x15de/0x1e80 net/ipv4/ip_input.c:340 ip_list_rcv_finish.constprop.0+0x1b2/0x6e0 net/ipv4/ip_input.c:583 ip_sublist_rcv net/ipv4/ip_input.c:609 [inline] ip_list_rcv+0x34e/0x490 net/ipv4/ip_input.c:644 __netif_receive_skb_list_ptype net/core/dev.c:5508 [inline] __netif_receive_skb_list_core+0x549/0x8e0 net/core/dev.c:5556 __netif_receive_skb_list net/core/dev.c:5608 [inline] netif_receive_skb_list_internal+0x75e/0xd80 net/core/dev.c:5699 gro_normal_list net/core/dev.c:5853 [inline] gro_normal_list net/core/dev.c:5849 [inline] napi_complete_done+0x1f1/0x880 net/core/dev.c:6590 virtqueue_napi_complete drivers/net/virtio_net.c:339 [inline] virtnet_poll+0xca2/0x11b0 drivers/net/virtio_net.c:1557 __napi_poll+0xaf/0x440 net/core/dev.c:7023 napi_poll net/core/dev.c:7090 [inline] net_rx_action+0x801/0xb40 net/core/dev.c:7177 __do_softirq+0x29b/0x9c2 kernel/softirq.c:558 invoke_softirq kernel/softirq.c:432 [inline] __irq_exit_rcu+0x123/0x180 kernel/softirq.c:637 irq_exit_rcu+0x5/0x20 kernel/softirq.c:649 common_interrupt+0x52/0xc0 arch/x86/kernel/irq.c:240 asm_common_interrupt+0x1e/0x40 arch/x86/include/asm/idtentry.h:629 RIP: 0033:0x7f5e972bfd57 Code: 39 d1 73 14 0f 1f 80 00 00 00 00 48 8b 50 f8 48 83 e8 08 48 39 ca 77 f3 48 39 c3 73 3e 48 89 13 48 8b 50 f8 48 89 38 49 8b 0e <48> 8b 3e 48 83 c3 08 48 83 c6 08 eb bc 48 39 d1 72 9e 48 39 d0 73 RSP: 002b:00007fff8a413210 EFLAGS: 00000283 RAX: 00007f5e97108990 RBX: 00007f5e97108338 RCX: ffffffff81d3aa45 RDX: ffffffff81d3aa45 RSI: 00007f5e97108340 RDI: ffffffff81d3aa45 RBP: 00007f5e97107eb8 R08: 00007f5e97108d88 R09: 0000000093c2e8d9 R10: 0000000000000000 R11: 0000000000000000 R12: 00007f5e97107eb0 R13: 00007f5e97108338 R14: 00007f5e97107ea8 R15: 0000000000000019 </TASK> Allocated by task 13: kasan_save_stack+0x1e/0x50 mm/kasan/common.c:38 kasan_set_track mm/kasan/common.c:46 [inline] set_alloc_info mm/kasan/common.c:434 [inline] __kasan_slab_alloc+0x90/0xc0 mm/kasan/common.c:467 kasan_slab_alloc include/linux/kasan.h:259 [inline] slab_post_alloc_hook mm/slab.h:519 [inline] slab_alloc_node mm/slub.c:3234 [inline] slab_alloc mm/slub.c:3242 [inline] kmem_cache_alloc+0x202/0x3a0 mm/slub.c:3247 dst_alloc+0x146/0x1f0 net/core/dst.c:92 rt_dst_alloc+0x73/0x430 net/ipv4/route.c:1613 ip_route_input_slow+0x1817/0x3a20 net/ipv4/route.c:234 ---truncated--- CVE-2021-47103 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2021-47103.html CVE-2021-47103 https://bugzilla.suse.com/1221010 SUSE Bug 1221010 In the Linux kernel, the following vulnerability has been resolved: tipc: check for null after calling kmemdup kmemdup can return a null pointer so need to check for it, otherwise the null key will be dereferenced later in tipc_crypto_key_xmit as can be seen in the trace [1]. [1] https://syzkaller.appspot.com/bug?id=bca180abb29567b189efdbdb34cbf7ba851c2a58 CVE-2021-47186 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2021-47186.html CVE-2021-47186 https://bugzilla.suse.com/1222702 SUSE Bug 1222702 In the Linux kernel, the following vulnerability has been resolved: net: sched: flower: protect fl_walk() with rcu Patch that refactored fl_walk() to use idr_for_each_entry_continue_ul() also removed rcu protection of individual filters which causes following use-after-free when filter is deleted concurrently. Fix fl_walk() to obtain rcu read lock while iterating and taking the filter reference and temporary release the lock while calling arg->fn() callback that can sleep. KASAN trace: [ 352.773640] ================================================================== [ 352.775041] BUG: KASAN: use-after-free in fl_walk+0x159/0x240 [cls_flower] [ 352.776304] Read of size 4 at addr ffff8881c8251480 by task tc/2987 [ 352.777862] CPU: 3 PID: 2987 Comm: tc Not tainted 5.15.0-rc2+ #2 [ 352.778980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 [ 352.781022] Call Trace: [ 352.781573] dump_stack_lvl+0x46/0x5a [ 352.782332] print_address_description.constprop.0+0x1f/0x140 [ 352.783400] ? fl_walk+0x159/0x240 [cls_flower] [ 352.784292] ? fl_walk+0x159/0x240 [cls_flower] [ 352.785138] kasan_report.cold+0x83/0xdf [ 352.785851] ? fl_walk+0x159/0x240 [cls_flower] [ 352.786587] kasan_check_range+0x145/0x1a0 [ 352.787337] fl_walk+0x159/0x240 [cls_flower] [ 352.788163] ? fl_put+0x10/0x10 [cls_flower] [ 352.789007] ? __mutex_unlock_slowpath.constprop.0+0x220/0x220 [ 352.790102] tcf_chain_dump+0x231/0x450 [ 352.790878] ? tcf_chain_tp_delete_empty+0x170/0x170 [ 352.791833] ? __might_sleep+0x2e/0xc0 [ 352.792594] ? tfilter_notify+0x170/0x170 [ 352.793400] ? __mutex_unlock_slowpath.constprop.0+0x220/0x220 [ 352.794477] tc_dump_tfilter+0x385/0x4b0 [ 352.795262] ? tc_new_tfilter+0x1180/0x1180 [ 352.796103] ? __mod_node_page_state+0x1f/0xc0 [ 352.796974] ? __build_skb_around+0x10e/0x130 [ 352.797826] netlink_dump+0x2c0/0x560 [ 352.798563] ? netlink_getsockopt+0x430/0x430 [ 352.799433] ? __mutex_unlock_slowpath.constprop.0+0x220/0x220 [ 352.800542] __netlink_dump_start+0x356/0x440 [ 352.801397] rtnetlink_rcv_msg+0x3ff/0x550 [ 352.802190] ? tc_new_tfilter+0x1180/0x1180 [ 352.802872] ? rtnl_calcit.isra.0+0x1f0/0x1f0 [ 352.803668] ? tc_new_tfilter+0x1180/0x1180 [ 352.804344] ? _copy_from_iter_nocache+0x800/0x800 [ 352.805202] ? kasan_set_track+0x1c/0x30 [ 352.805900] netlink_rcv_skb+0xc6/0x1f0 [ 352.806587] ? rht_deferred_worker+0x6b0/0x6b0 [ 352.807455] ? rtnl_calcit.isra.0+0x1f0/0x1f0 [ 352.808324] ? netlink_ack+0x4d0/0x4d0 [ 352.809086] ? netlink_deliver_tap+0x62/0x3d0 [ 352.809951] netlink_unicast+0x353/0x480 [ 352.810744] ? netlink_attachskb+0x430/0x430 [ 352.811586] ? __alloc_skb+0xd7/0x200 [ 352.812349] netlink_sendmsg+0x396/0x680 [ 352.813132] ? netlink_unicast+0x480/0x480 [ 352.813952] ? __import_iovec+0x192/0x210 [ 352.814759] ? netlink_unicast+0x480/0x480 [ 352.815580] sock_sendmsg+0x6c/0x80 [ 352.816299] ____sys_sendmsg+0x3a5/0x3c0 [ 352.817096] ? kernel_sendmsg+0x30/0x30 [ 352.817873] ? __ia32_sys_recvmmsg+0x150/0x150 [ 352.818753] ___sys_sendmsg+0xd8/0x140 [ 352.819518] ? sendmsg_copy_msghdr+0x110/0x110 [ 352.820402] ? ___sys_recvmsg+0xf4/0x1a0 [ 352.821110] ? __copy_msghdr_from_user+0x260/0x260 [ 352.821934] ? _raw_spin_lock+0x81/0xd0 [ 352.822680] ? __handle_mm_fault+0xef3/0x1b20 [ 352.823549] ? rb_insert_color+0x2a/0x270 [ 352.824373] ? copy_page_range+0x16b0/0x16b0 [ 352.825209] ? perf_event_update_userpage+0x2d0/0x2d0 [ 352.826190] ? __fget_light+0xd9/0xf0 [ 352.826941] __sys_sendmsg+0xb3/0x130 [ 352.827613] ? __sys_sendmsg_sock+0x20/0x20 [ 352.828377] ? do_user_addr_fault+0x2c5/0x8a0 [ 352.829184] ? fpregs_assert_state_consistent+0x52/0x60 [ 352.830001] ? exit_to_user_mode_prepare+0x32/0x160 [ 352.830845] do_syscall_64+0x35/0x80 [ 352.831445] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 352.832331] RIP: 0033:0x7f7bee973c17 [ ---truncated--- CVE-2021-47402 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2021-47402.html CVE-2021-47402 https://bugzilla.suse.com/1225301 SUSE Bug 1225301 https://bugzilla.suse.com/1225302 SUSE Bug 1225302 In the Linux kernel, the following vulnerability has been resolved: ipv6: fix memory leak in fib6_rule_suppress The kernel leaks memory when a `fib` rule is present in IPv6 nftables firewall rules and a suppress_prefix rule is present in the IPv6 routing rules (used by certain tools such as wg-quick). In such scenarios, every incoming packet will leak an allocation in `ip6_dst_cache` slab cache. After some hours of `bpftrace`-ing and source code reading, I tracked down the issue to ca7a03c41753 ("ipv6: do not free rt if FIB_LOOKUP_NOREF is set on suppress rule"). The problem with that change is that the generic `args->flags` always have `FIB_LOOKUP_NOREF` set[1][2] but the IPv6-specific flag `RT6_LOOKUP_F_DST_NOREF` might not be, leading to `fib6_rule_suppress` not decreasing the refcount when needed. How to reproduce: - Add the following nftables rule to a prerouting chain: meta nfproto ipv6 fib saddr . mark . iif oif missing drop This can be done with: sudo nft create table inet test sudo nft create chain inet test test_chain '{ type filter hook prerouting priority filter + 10; policy accept; }' sudo nft add rule inet test test_chain meta nfproto ipv6 fib saddr . mark . iif oif missing drop - Run: sudo ip -6 rule add table main suppress_prefixlength 0 - Watch `sudo slabtop -o | grep ip6_dst_cache` to see memory usage increase with every incoming ipv6 packet. This patch exposes the protocol-specific flags to the protocol specific `suppress` function, and check the protocol-specific `flags` argument for RT6_LOOKUP_F_DST_NOREF instead of the generic FIB_LOOKUP_NOREF when decreasing the refcount, like this. [1]: https://github.com/torvalds/linux/blob/ca7a03c4175366a92cee0ccc4fec0038c3266e26/net/ipv6/fib6_rules.c#L71 [2]: https://github.com/torvalds/linux/blob/ca7a03c4175366a92cee0ccc4fec0038c3266e26/net/ipv6/fib6_rules.c#L99 CVE-2021-47546 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2021-47546.html CVE-2021-47546 https://bugzilla.suse.com/1225504 SUSE Bug 1225504 In the Linux kernel, the following vulnerability has been resolved: net: tulip: de4x5: fix the problem that the array 'lp->phy[8]' may be out of bound In line 5001, if all id in the array 'lp->phy[8]' is not 0, when the 'for' end, the 'k' is 8. At this time, the array 'lp->phy[8]' may be out of bound. CVE-2021-47547 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2021-47547.html CVE-2021-47547 https://bugzilla.suse.com/1225505 SUSE Bug 1225505 In the Linux kernel, the following vulnerability has been resolved: sit: do not call ipip6_dev_free() from sit_init_net() ipip6_dev_free is sit dev->priv_destructor, already called by register_netdevice() if something goes wrong. Alternative would be to make ipip6_dev_free() robust against multiple invocations, but other drivers do not implement this strategy. syzbot reported: dst_release underflow WARNING: CPU: 0 PID: 5059 at net/core/dst.c:173 dst_release+0xd8/0xe0 net/core/dst.c:173 Modules linked in: CPU: 1 PID: 5059 Comm: syz-executor.4 Not tainted 5.16.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:dst_release+0xd8/0xe0 net/core/dst.c:173 Code: 4c 89 f2 89 d9 31 c0 5b 41 5e 5d e9 da d5 44 f9 e8 1d 90 5f f9 c6 05 87 48 c6 05 01 48 c7 c7 80 44 99 8b 31 c0 e8 e8 67 29 f9 <0f> 0b eb 85 0f 1f 40 00 53 48 89 fb e8 f7 8f 5f f9 48 83 c3 a8 48 RSP: 0018:ffffc9000aa5faa0 EFLAGS: 00010246 RAX: d6894a925dd15a00 RBX: 00000000ffffffff RCX: 0000000000040000 RDX: ffffc90005e19000 RSI: 000000000003ffff RDI: 0000000000040000 RBP: 0000000000000000 R08: ffffffff816a1f42 R09: ffffed1017344f2c R10: ffffed1017344f2c R11: 0000000000000000 R12: 0000607f462b1358 R13: 1ffffffff1bfd305 R14: ffffe8ffffcb1358 R15: dffffc0000000000 FS: 00007f66c71a2700(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f88aaed5058 CR3: 0000000023e0f000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> dst_cache_destroy+0x107/0x1e0 net/core/dst_cache.c:160 ipip6_dev_free net/ipv6/sit.c:1414 [inline] sit_init_net+0x229/0x550 net/ipv6/sit.c:1936 ops_init+0x313/0x430 net/core/net_namespace.c:140 setup_net+0x35b/0x9d0 net/core/net_namespace.c:326 copy_net_ns+0x359/0x5c0 net/core/net_namespace.c:470 create_new_namespaces+0x4ce/0xa00 kernel/nsproxy.c:110 unshare_nsproxy_namespaces+0x11e/0x180 kernel/nsproxy.c:226 ksys_unshare+0x57d/0xb50 kernel/fork.c:3075 __do_sys_unshare kernel/fork.c:3146 [inline] __se_sys_unshare kernel/fork.c:3144 [inline] __x64_sys_unshare+0x34/0x40 kernel/fork.c:3144 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x44/0xd0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f66c882ce99 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f66c71a2168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 RAX: ffffffffffffffda RBX: 00007f66c893ff60 RCX: 00007f66c882ce99 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000048040200 RBP: 00007f66c8886ff1 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 00007fff6634832f R14: 00007f66c71a2300 R15: 0000000000022000 </TASK> CVE-2021-47588 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2021-47588.html CVE-2021-47588 https://bugzilla.suse.com/1226568 SUSE Bug 1226568 In the Linux kernel, the following vulnerability has been resolved: mptcp: fix deadlock in __mptcp_push_pending() __mptcp_push_pending() may call mptcp_flush_join_list() with subflow socket lock held. If such call hits mptcp_sockopt_sync_all() then subsequently __mptcp_sockopt_sync() could try to lock the subflow socket for itself, causing a deadlock. sysrq: Show Blocked State task:ss-server state:D stack: 0 pid: 938 ppid: 1 flags:0x00000000 Call Trace: <TASK> __schedule+0x2d6/0x10c0 ? __mod_memcg_state+0x4d/0x70 ? csum_partial+0xd/0x20 ? _raw_spin_lock_irqsave+0x26/0x50 schedule+0x4e/0xc0 __lock_sock+0x69/0x90 ? do_wait_intr_irq+0xa0/0xa0 __lock_sock_fast+0x35/0x50 mptcp_sockopt_sync_all+0x38/0xc0 __mptcp_push_pending+0x105/0x200 mptcp_sendmsg+0x466/0x490 sock_sendmsg+0x57/0x60 __sys_sendto+0xf0/0x160 ? do_wait_intr_irq+0xa0/0xa0 ? fpregs_restore_userregs+0x12/0xd0 __x64_sys_sendto+0x20/0x30 do_syscall_64+0x38/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f9ba546c2d0 RSP: 002b:00007ffdc3b762d8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 00007f9ba56c8060 RCX: 00007f9ba546c2d0 RDX: 000000000000077a RSI: 0000000000e5e180 RDI: 0000000000000234 RBP: 0000000000cc57f0 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9ba56c8060 R13: 0000000000b6ba60 R14: 0000000000cc7840 R15: 41d8685b1d7901b8 </TASK> Fix the issue by using __mptcp_flush_join_list() instead of plain mptcp_flush_join_list() inside __mptcp_push_pending(), as suggested by Florian. The sockopt sync will be deferred to the workqueue. CVE-2021-47590 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2021-47590.html CVE-2021-47590 https://bugzilla.suse.com/1226565 SUSE Bug 1226565 In the Linux kernel, the following vulnerability has been resolved: mptcp: remove tcp ulp setsockopt support TCP_ULP setsockopt cannot be used for mptcp because its already used internally to plumb subflow (tcp) sockets to the mptcp layer. syzbot managed to trigger a crash for mptcp connections that are in fallback mode: KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] CPU: 1 PID: 1083 Comm: syz-executor.3 Not tainted 5.16.0-rc2-syzkaller #0 RIP: 0010:tls_build_proto net/tls/tls_main.c:776 [inline] [..] __tcp_set_ulp net/ipv4/tcp_ulp.c:139 [inline] tcp_set_ulp+0x428/0x4c0 net/ipv4/tcp_ulp.c:160 do_tcp_setsockopt+0x455/0x37c0 net/ipv4/tcp.c:3391 mptcp_setsockopt+0x1b47/0x2400 net/mptcp/sockopt.c:638 Remove support for TCP_ULP setsockopt. CVE-2021-47591 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2021-47591.html CVE-2021-47591 https://bugzilla.suse.com/1226570 SUSE Bug 1226570 In the Linux kernel, the following vulnerability has been resolved: mptcp: clear 'kern' flag from fallback sockets The mptcp ULP extension relies on sk->sk_sock_kern being set correctly: It prevents setsockopt(fd, IPPROTO_TCP, TCP_ULP, "mptcp", 6); from working for plain tcp sockets (any userspace-exposed socket). But in case of fallback, accept() can return a plain tcp sk. In such case, sk is still tagged as 'kernel' and setsockopt will work. This will crash the kernel, The subflow extension has a NULL ctx->conn mptcp socket: BUG: KASAN: null-ptr-deref in subflow_data_ready+0x181/0x2b0 Call Trace: tcp_data_ready+0xf8/0x370 [..] CVE-2021-47593 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2021-47593.html CVE-2021-47593 https://bugzilla.suse.com/1226551 SUSE Bug 1226551 In the Linux kernel, the following vulnerability has been resolved: sch_cake: do not call cake_destroy() from cake_init() qdiscs are not supposed to call their own destroy() method from init(), because core stack already does that. syzbot was able to trigger use after free: DEBUG_LOCKS_WARN_ON(lock->magic != lock) WARNING: CPU: 0 PID: 21902 at kernel/locking/mutex.c:586 __mutex_lock_common kernel/locking/mutex.c:586 [inline] WARNING: CPU: 0 PID: 21902 at kernel/locking/mutex.c:586 __mutex_lock+0x9ec/0x12f0 kernel/locking/mutex.c:740 Modules linked in: CPU: 0 PID: 21902 Comm: syz-executor189 Not tainted 5.16.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:__mutex_lock_common kernel/locking/mutex.c:586 [inline] RIP: 0010:__mutex_lock+0x9ec/0x12f0 kernel/locking/mutex.c:740 Code: 08 84 d2 0f 85 19 08 00 00 8b 05 97 38 4b 04 85 c0 0f 85 27 f7 ff ff 48 c7 c6 20 00 ac 89 48 c7 c7 a0 fe ab 89 e8 bf 76 ba ff <0f> 0b e9 0d f7 ff ff 48 8b 44 24 40 48 8d b8 c8 08 00 00 48 89 f8 RSP: 0018:ffffc9000627f290 EFLAGS: 00010282 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: ffff88802315d700 RSI: ffffffff815f1db8 RDI: fffff52000c4fe44 RBP: ffff88818f28e000 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff815ebb5e R11: 0000000000000000 R12: 0000000000000000 R13: dffffc0000000000 R14: ffffc9000627f458 R15: 0000000093c30000 FS: 0000555556abc400(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fda689c3303 CR3: 000000001cfbb000 CR4: 0000000000350ef0 Call Trace: <TASK> tcf_chain0_head_change_cb_del+0x2e/0x3d0 net/sched/cls_api.c:810 tcf_block_put_ext net/sched/cls_api.c:1381 [inline] tcf_block_put_ext net/sched/cls_api.c:1376 [inline] tcf_block_put+0xbc/0x130 net/sched/cls_api.c:1394 cake_destroy+0x3f/0x80 net/sched/sch_cake.c:2695 qdisc_create.constprop.0+0x9da/0x10f0 net/sched/sch_api.c:1293 tc_modify_qdisc+0x4c5/0x1980 net/sched/sch_api.c:1660 rtnetlink_rcv_msg+0x413/0xb80 net/core/rtnetlink.c:5571 netlink_rcv_skb+0x153/0x420 net/netlink/af_netlink.c:2496 netlink_unicast_kernel net/netlink/af_netlink.c:1319 [inline] netlink_unicast+0x533/0x7d0 net/netlink/af_netlink.c:1345 netlink_sendmsg+0x904/0xdf0 net/netlink/af_netlink.c:1921 sock_sendmsg_nosec net/socket.c:704 [inline] sock_sendmsg+0xcf/0x120 net/socket.c:724 ____sys_sendmsg+0x6e8/0x810 net/socket.c:2409 ___sys_sendmsg+0xf3/0x170 net/socket.c:2463 __sys_sendmsg+0xe5/0x1b0 net/socket.c:2492 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f1bb06badb9 Code: Unable to access opcode bytes at RIP 0x7f1bb06bad8f. RSP: 002b:00007fff3012a658 EFLAGS: 00000246 ORIG_RAX: 000000000000002e RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f1bb06badb9 RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000003 R10: 0000000000000003 R11: 0000000000000246 R12: 00007fff3012a688 R13: 00007fff3012a6a0 R14: 00007fff3012a6e0 R15: 00000000000013c2 </TASK> CVE-2021-47598 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2021-47598.html CVE-2021-47598 https://bugzilla.suse.com/1226574 SUSE Bug 1226574 https://bugzilla.suse.com/1227471 SUSE Bug 1227471 In the Linux kernel, the following vulnerability has been resolved: btrfs: use latest_dev in btrfs_show_devname The test case btrfs/238 reports the warning below: WARNING: CPU: 3 PID: 481 at fs/btrfs/super.c:2509 btrfs_show_devname+0x104/0x1e8 [btrfs] CPU: 2 PID: 1 Comm: systemd Tainted: G W O 5.14.0-rc1-custom #72 Hardware name: QEMU QEMU Virtual Machine, BIOS 0.0.0 02/06/2015 Call trace: btrfs_show_devname+0x108/0x1b4 [btrfs] show_mountinfo+0x234/0x2c4 m_show+0x28/0x34 seq_read_iter+0x12c/0x3c4 vfs_read+0x29c/0x2c8 ksys_read+0x80/0xec __arm64_sys_read+0x28/0x34 invoke_syscall+0x50/0xf8 do_el0_svc+0x88/0x138 el0_svc+0x2c/0x8c el0t_64_sync_handler+0x84/0xe4 el0t_64_sync+0x198/0x19c Reason: While btrfs_prepare_sprout() moves the fs_devices::devices into fs_devices::seed_list, the btrfs_show_devname() searches for the devices and found none, leading to the warning as in above. Fix: latest_dev is updated according to the changes to the device list. That means we could use the latest_dev->name to show the device name in /proc/self/mounts, the pointer will be always valid as it's assigned before the device is deleted from the list in remove or replace. The RCU protection is sufficient as the device structure is freed after synchronization. CVE-2021-47599 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2021-47599.html CVE-2021-47599 https://bugzilla.suse.com/1226571 SUSE Bug 1226571 In the Linux kernel, the following vulnerability has been resolved: net: netlink: af_netlink: Prevent empty skb by adding a check on len. Adding a check on len parameter to avoid empty skb. This prevents a division error in netem_enqueue function which is caused when skb->len=0 and skb->data_len=0 in the randomized corruption step as shown below. skb->data[prandom_u32() % skb_headlen(skb)] ^= 1<<(prandom_u32() % 8); Crash Report: [ 343.170349] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.216110] netem: version 1.3 [ 343.235841] divide error: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 343.236680] CPU: 3 PID: 4288 Comm: reproducer Not tainted 5.16.0-rc1+ [ 343.237569] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.11.0-2.el7 04/01/2014 [ 343.238707] RIP: 0010:netem_enqueue+0x1590/0x33c0 [sch_netem] [ 343.239499] Code: 89 85 58 ff ff ff e8 5f 5d e9 d3 48 8b b5 48 ff ff ff 8b 8d 50 ff ff ff 8b 85 58 ff ff ff 48 8b bd 70 ff ff ff 31 d2 2b 4f 74 <f7> f1 48 b8 00 00 00 00 00 fc ff df 49 01 d5 4c 89 e9 48 c1 e9 03 [ 343.241883] RSP: 0018:ffff88800bcd7368 EFLAGS: 00010246 [ 343.242589] RAX: 00000000ba7c0a9c RBX: 0000000000000001 RCX: 0000000000000000 [ 343.243542] RDX: 0000000000000000 RSI: ffff88800f8edb10 RDI: ffff88800f8eda40 [ 343.244474] RBP: ffff88800bcd7458 R08: 0000000000000000 R09: ffffffff94fb8445 [ 343.245403] R10: ffffffff94fb8336 R11: ffffffff94fb8445 R12: 0000000000000000 [ 343.246355] R13: ffff88800a5a7000 R14: ffff88800a5b5800 R15: 0000000000000020 [ 343.247291] FS: 00007fdde2bd7700(0000) GS:ffff888109780000(0000) knlGS:0000000000000000 [ 343.248350] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.249120] CR2: 00000000200000c0 CR3: 000000000ef4c000 CR4: 00000000000006e0 [ 343.250076] Call Trace: [ 343.250423] <TASK> [ 343.250713] ? memcpy+0x4d/0x60 [ 343.251162] ? netem_init+0xa0/0xa0 [sch_netem] [ 343.251795] ? __sanitizer_cov_trace_pc+0x21/0x60 [ 343.252443] netem_enqueue+0xe28/0x33c0 [sch_netem] [ 343.253102] ? stack_trace_save+0x87/0xb0 [ 343.253655] ? filter_irq_stacks+0xb0/0xb0 [ 343.254220] ? netem_init+0xa0/0xa0 [sch_netem] [ 343.254837] ? __kasan_check_write+0x14/0x20 [ 343.255418] ? _raw_spin_lock+0x88/0xd6 [ 343.255953] dev_qdisc_enqueue+0x50/0x180 [ 343.256508] __dev_queue_xmit+0x1a7e/0x3090 [ 343.257083] ? netdev_core_pick_tx+0x300/0x300 [ 343.257690] ? check_kcov_mode+0x10/0x40 [ 343.258219] ? _raw_spin_unlock_irqrestore+0x29/0x40 [ 343.258899] ? __kasan_init_slab_obj+0x24/0x30 [ 343.259529] ? setup_object.isra.71+0x23/0x90 [ 343.260121] ? new_slab+0x26e/0x4b0 [ 343.260609] ? kasan_poison+0x3a/0x50 [ 343.261118] ? kasan_unpoison+0x28/0x50 [ 343.261637] ? __kasan_slab_alloc+0x71/0x90 [ 343.262214] ? memcpy+0x4d/0x60 [ 343.262674] ? write_comp_data+0x2f/0x90 [ 343.263209] ? __kasan_check_write+0x14/0x20 [ 343.263802] ? __skb_clone+0x5d6/0x840 [ 343.264329] ? __sanitizer_cov_trace_pc+0x21/0x60 [ 343.264958] dev_queue_xmit+0x1c/0x20 [ 343.265470] netlink_deliver_tap+0x652/0x9c0 [ 343.266067] netlink_unicast+0x5a0/0x7f0 [ 343.266608] ? netlink_attachskb+0x860/0x860 [ 343.267183] ? __sanitizer_cov_trace_pc+0x21/0x60 [ 343.267820] ? write_comp_data+0x2f/0x90 [ 343.268367] netlink_sendmsg+0x922/0xe80 [ 343.268899] ? netlink_unicast+0x7f0/0x7f0 [ 343.269472] ? __sanitizer_cov_trace_pc+0x21/0x60 [ 343.270099] ? write_comp_data+0x2f/0x90 [ 343.270644] ? netlink_unicast+0x7f0/0x7f0 [ 343.271210] sock_sendmsg+0x155/0x190 [ 343.271721] ____sys_sendmsg+0x75f/0x8f0 [ 343.272262] ? kernel_sendmsg+0x60/0x60 [ 343.272788] ? write_comp_data+0x2f/0x90 [ 343.273332] ? write_comp_data+0x2f/0x90 [ 343.273869] ___sys_sendmsg+0x10f/0x190 [ 343.274405] ? sendmsg_copy_msghdr+0x80/0x80 [ 343.274984] ? slab_post_alloc_hook+0x70/0x230 [ 343.275597] ? futex_wait_setup+0x240/0x240 [ 343.276175] ? security_file_alloc+0x3e/0x170 [ 343.276779] ? write_comp_d ---truncated--- CVE-2021-47606 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2021-47606.html CVE-2021-47606 https://bugzilla.suse.com/1226555 SUSE Bug 1226555 In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: Fix a deadlock in the error handler The following deadlock has been observed on a test setup: - All tags allocated - The SCSI error handler calls ufshcd_eh_host_reset_handler() - ufshcd_eh_host_reset_handler() queues work that calls ufshcd_err_handler() - ufshcd_err_handler() locks up as follows: Workqueue: ufs_eh_wq_0 ufshcd_err_handler.cfi_jt Call trace: __switch_to+0x298/0x5d8 __schedule+0x6cc/0xa94 schedule+0x12c/0x298 blk_mq_get_tag+0x210/0x480 __blk_mq_alloc_request+0x1c8/0x284 blk_get_request+0x74/0x134 ufshcd_exec_dev_cmd+0x68/0x640 ufshcd_verify_dev_init+0x68/0x35c ufshcd_probe_hba+0x12c/0x1cb8 ufshcd_host_reset_and_restore+0x88/0x254 ufshcd_reset_and_restore+0xd0/0x354 ufshcd_err_handler+0x408/0xc58 process_one_work+0x24c/0x66c worker_thread+0x3e8/0xa4c kthread+0x150/0x1b4 ret_from_fork+0x10/0x30 Fix this lockup by making ufshcd_exec_dev_cmd() allocate a reserved request. CVE-2021-47622 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2021-47622.html CVE-2021-47622 https://bugzilla.suse.com/1227917 SUSE Bug 1227917 In the Linux kernel, the following vulnerability has been resolved: powerpc/fixmap: Fix VM debug warning on unmap Unmapping a fixmap entry is done by calling __set_fixmap() with FIXMAP_PAGE_CLEAR as flags. Today, powerpc __set_fixmap() calls map_kernel_page(). map_kernel_page() is not happy when called a second time for the same page. WARNING: CPU: 0 PID: 1 at arch/powerpc/mm/pgtable.c:194 set_pte_at+0xc/0x1e8 CPU: 0 PID: 1 Comm: swapper Not tainted 5.16.0-rc3-s3k-dev-01993-g350ff07feb7d-dirty #682 NIP: c0017cd4 LR: c00187f0 CTR: 00000010 REGS: e1011d50 TRAP: 0700 Not tainted (5.16.0-rc3-s3k-dev-01993-g350ff07feb7d-dirty) MSR: 00029032 <EE,ME,IR,DR,RI> CR: 42000208 XER: 00000000 GPR00: c0165fec e1011e10 c14c0000 c0ee2550 ff800000 c0f3d000 00000000 c001686c GPR08: 00001000 b00045a9 00000001 c0f58460 c0f50000 00000000 c0007e10 00000000 GPR16: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000 GPR24: 00000000 00000000 c0ee2550 00000000 c0f57000 00000ff8 00000000 ff800000 NIP [c0017cd4] set_pte_at+0xc/0x1e8 LR [c00187f0] map_kernel_page+0x9c/0x100 Call Trace: [e1011e10] [c0736c68] vsnprintf+0x358/0x6c8 (unreliable) [e1011e30] [c0165fec] __set_fixmap+0x30/0x44 [e1011e40] [c0c13bdc] early_iounmap+0x11c/0x170 [e1011e70] [c0c06cb0] ioremap_legacy_serial_console+0x88/0xc0 [e1011e90] [c0c03634] do_one_initcall+0x80/0x178 [e1011ef0] [c0c0385c] kernel_init_freeable+0xb4/0x250 [e1011f20] [c0007e34] kernel_init+0x24/0x140 [e1011f30] [c0016268] ret_from_kernel_thread+0x5c/0x64 Instruction dump: 7fe3fb78 48019689 80010014 7c630034 83e1000c 5463d97e 7c0803a6 38210010 4e800020 81250000 712a0001 41820008 <0fe00000> 9421ffe0 93e1001c 48000030 Implement unmap_kernel_page() which clears an existing pte. CVE-2021-47623 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2021-47623.html CVE-2021-47623 https://bugzilla.suse.com/1227919 SUSE Bug 1227919 In the Linux kernel, the following vulnerability has been resolved: net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change The refcount leak issues take place in an error handling path. When the 3rd argument buf doesn't match with "offline", "online" or "remove", the function simply returns -EINVAL and forgets to decrease the reference count of a rpc_xprt object and a rpc_xprt_switch object increased by rpc_sysfs_xprt_kobj_get_xprt() and rpc_sysfs_xprt_kobj_get_xprt_switch(), causing reference count leaks of both unused objects. Fix this issue by jumping to the error handling path labelled with out_put when buf matches none of "offline", "online" or "remove". CVE-2021-47624 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2021-47624.html CVE-2021-47624 https://bugzilla.suse.com/1227920 SUSE Bug 1227920 In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/pt: Fix crash with stop filters in single-range mode Add a check for !buf->single before calling pt_buffer_region_size in a place where a missing check can cause a kernel crash. Fixes a bug introduced by commit 670638477aed ("perf/x86/intel/pt: Opportunistically use single range output mode"), which added a support for PT single-range output mode. Since that commit if a PT stop filter range is hit while tracing, the kernel will crash because of a null pointer dereference in pt_handle_status due to calling pt_buffer_region_size without a ToPA configured. The commit which introduced single-range mode guarded almost all uses of the ToPA buffer variables with checks of the buf->single variable, but missed the case where tracing was stopped by the PT hardware, which happens when execution hits a configured stop filter. Tested that hitting a stop filter while PT recording successfully records a trace with this patch but crashes without this patch. CVE-2022-48713 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48713.html CVE-2022-48713 https://bugzilla.suse.com/1227549 SUSE Bug 1227549 In the Linux kernel, the following vulnerability has been resolved: dma-buf: heaps: Fix potential spectre v1 gadget It appears like nr could be a Spectre v1 gadget as it's supplied by a user and used as an array index. Prevent the contents of kernel memory from being leaked to userspace via speculative execution by using array_index_nospec. [sumits: added fixes and cc: stable tags] CVE-2022-48730 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48730.html CVE-2022-48730 https://bugzilla.suse.com/1226713 SUSE Bug 1226713 In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix off by one in BIOS boundary checking Bounds checking when parsing init scripts embedded in the BIOS reject access to the last byte. This causes driver initialization to fail on Apple eMac's with GeForce 2 MX GPUs, leaving the system with no working console. This is probably only seen on OpenFirmware machines like PowerPC Macs because the BIOS image provided by OF is only the used parts of the ROM, not a power-of-two blocks read from PCI directly so PCs always have empty bytes at the end that are never accessed. CVE-2022-48732 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48732.html CVE-2022-48732 https://bugzilla.suse.com/1226716 SUSE Bug 1226716 In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: invalid parameter check in dpu_setup_dspp_pcc The function performs a check on the "ctx" input parameter, however, it is used before the check. Initialize the "base" variable after the sanity check to avoid a possible NULL pointer dereference. Addresses-Coverity-ID: 1493866 ("Null pointer dereference") CVE-2022-48749 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48749.html CVE-2022-48749 https://bugzilla.suse.com/1226650 SUSE Bug 1226650 In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: invalid parameter check in msm_dsi_phy_enable The function performs a check on the "phy" input parameter, however, it is used before the check. Initialize the "dev" variable after the sanity check to avoid a possible NULL pointer dereference. Addresses-Coverity-ID: 1493860 ("Null pointer dereference") CVE-2022-48756 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48756.html CVE-2022-48756 https://bugzilla.suse.com/1226698 SUSE Bug 1226698 In the Linux kernel, the following vulnerability has been resolved: xprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create If there are failures then we must not leave the non-NULL pointers with the error value, otherwise `rpcrdma_ep_destroy` gets confused and tries free them, resulting in an Oops. CVE-2022-48773 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48773.html CVE-2022-48773 https://bugzilla.suse.com/1227921 SUSE Bug 1227921 In the Linux kernel, the following vulnerability has been resolved: dmaengine: ptdma: Fix the error handling path in pt_core_init() In order to free resources correctly in the error handling path of pt_core_init(), 2 goto's have to be switched. Otherwise, some resources will leak and we will try to release things that have not been allocated yet. Also move a dev_err() to a place where it is more meaningful. CVE-2022-48774 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48774.html CVE-2022-48774 https://bugzilla.suse.com/1227923 SUSE Bug 1227923 In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Fix memory leak in vmbus_add_channel_kobj kobject_init_and_add() takes reference even when it fails. According to the doc of kobject_init_and_add(): If this function returns an error, kobject_put() must be called to properly clean up the memory associated with the object. Fix memory leak by calling kobject_put(). CVE-2022-48775 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48775.html CVE-2022-48775 https://bugzilla.suse.com/1227924 SUSE Bug 1227924 In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix missing free for pparts in cleanup Mtdpart doesn't free pparts when a cleanup function is declared. Add missing free for pparts in cleanup function for smem to fix the leak. CVE-2022-48776 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48776.html CVE-2022-48776 https://bugzilla.suse.com/1227925 SUSE Bug 1227925 In the Linux kernel, the following vulnerability has been resolved: mtd: parsers: qcom: Fix kernel panic on skipped partition In the event of a skipped partition (case when the entry name is empty) the kernel panics in the cleanup function as the name entry is NULL. Rework the parser logic by first checking the real partition number and then allocate the space and set the data for the valid partitions. The logic was also fundamentally wrong as with a skipped partition, the parts number returned was incorrect by not decreasing it for the skipped partitions. CVE-2022-48777 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48777.html CVE-2022-48777 https://bugzilla.suse.com/1227922 SUSE Bug 1227922 In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: gpmi: don't leak PM reference in error path If gpmi_nfc_apply_timings() fails, the PM runtime usage counter must be dropped. CVE-2022-48778 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48778.html CVE-2022-48778 https://bugzilla.suse.com/1227935 SUSE Bug 1227935 In the Linux kernel, the following vulnerability has been resolved: net/smc: Avoid overwriting the copies of clcsock callback functions The callback functions of clcsock will be saved and replaced during the fallback. But if the fallback happens more than once, then the copies of these callback functions will be overwritten incorrectly, resulting in a loop call issue: clcsk->sk_error_report |- smc_fback_error_report() <------------------------------| |- smc_fback_forward_wakeup() | (loop) |- clcsock_callback() (incorrectly overwritten) | |- smc->clcsk_error_report() ------------------| So this patch fixes the issue by saving these function pointers only once in the fallback and avoiding overwriting. CVE-2022-48780 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48780.html CVE-2022-48780 https://bugzilla.suse.com/1227995 SUSE Bug 1227995 In the Linux kernel, the following vulnerability has been resolved: net: dsa: lantiq_gswip: fix use after free in gswip_remove() of_node_put(priv->ds->slave_mii_bus->dev.of_node) should be done before mdiobus_free(priv->ds->slave_mii_bus). CVE-2022-48783 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48783.html CVE-2022-48783 https://bugzilla.suse.com/1227949 SUSE Bug 1227949 In the Linux kernel, the following vulnerability has been resolved: cfg80211: fix race in netlink owner interface destruction My previous fix here to fix the deadlock left a race where the exact same deadlock (see the original commit referenced below) can still happen if cfg80211_destroy_ifaces() already runs while nl80211_netlink_notify() is still marking some interfaces as nl_owner_dead. The race happens because we have two loops here - first we dev_close() all the netdevs, and then we destroy them. If we also have two netdevs (first one need only be a wdev though) then we can find one during the first iteration, close it, and go to the second iteration -- but then find two, and try to destroy also the one we didn't close yet. Fix this by only iterating once. CVE-2022-48784 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48784.html CVE-2022-48784 https://bugzilla.suse.com/1227938 SUSE Bug 1227938 In the Linux kernel, the following vulnerability has been resolved: ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() Some time ago 8965779d2c0e ("ipv6,mcast: always hold idev->lock before mca_lock") switched ipv6_get_lladdr() to __ipv6_get_lladdr(), which is rcu-unsafe version. That was OK, because idev->lock was held for these codepaths. In 88e2ca308094 ("mld: convert ifmcaddr6 to RCU") these external locks were removed, so we probably need to restore the original rcu-safe call. Otherwise, we occasionally get a machine crashed/stalled with the following in dmesg: [ 3405.966610][T230589] general protection fault, probably for non-canonical address 0xdead00000000008c: 0000 [#1] SMP NOPTI [ 3405.982083][T230589] CPU: 44 PID: 230589 Comm: kworker/44:3 Tainted: G O 5.15.19-cloudflare-2022.2.1 #1 [ 3405.998061][T230589] Hardware name: SUPA-COOL-SERV [ 3406.009552][T230589] Workqueue: mld mld_ifc_work [ 3406.017224][T230589] RIP: 0010:__ipv6_get_lladdr+0x34/0x60 [ 3406.025780][T230589] Code: 57 10 48 83 c7 08 48 89 e5 48 39 d7 74 3e 48 8d 82 38 ff ff ff eb 13 48 8b 90 d0 00 00 00 48 8d 82 38 ff ff ff 48 39 d7 74 22 <66> 83 78 32 20 77 1b 75 e4 89 ca 23 50 2c 75 dd 48 8b 50 08 48 8b [ 3406.055748][T230589] RSP: 0018:ffff94e4b3fc3d10 EFLAGS: 00010202 [ 3406.065617][T230589] RAX: dead00000000005a RBX: ffff94e4b3fc3d30 RCX: 0000000000000040 [ 3406.077477][T230589] RDX: dead000000000122 RSI: ffff94e4b3fc3d30 RDI: ffff8c3a31431008 [ 3406.089389][T230589] RBP: ffff94e4b3fc3d10 R08: 0000000000000000 R09: 0000000000000000 [ 3406.101445][T230589] R10: ffff8c3a31430000 R11: 000000000000000b R12: ffff8c2c37887100 [ 3406.113553][T230589] R13: ffff8c3a39537000 R14: 00000000000005dc R15: ffff8c3a31431000 [ 3406.125730][T230589] FS: 0000000000000000(0000) GS:ffff8c3b9fc80000(0000) knlGS:0000000000000000 [ 3406.138992][T230589] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3406.149895][T230589] CR2: 00007f0dfea1db60 CR3: 000000387b5f2000 CR4: 0000000000350ee0 [ 3406.162421][T230589] Call Trace: [ 3406.170235][T230589] <TASK> [ 3406.177736][T230589] mld_newpack+0xfe/0x1a0 [ 3406.186686][T230589] add_grhead+0x87/0xa0 [ 3406.195498][T230589] add_grec+0x485/0x4e0 [ 3406.204310][T230589] ? newidle_balance+0x126/0x3f0 [ 3406.214024][T230589] mld_ifc_work+0x15d/0x450 [ 3406.223279][T230589] process_one_work+0x1e6/0x380 [ 3406.232982][T230589] worker_thread+0x50/0x3a0 [ 3406.242371][T230589] ? rescuer_thread+0x360/0x360 [ 3406.252175][T230589] kthread+0x127/0x150 [ 3406.261197][T230589] ? set_kthread_struct+0x40/0x40 [ 3406.271287][T230589] ret_from_fork+0x22/0x30 [ 3406.280812][T230589] </TASK> [ 3406.288937][T230589] Modules linked in: ... [last unloaded: kheaders] [ 3406.476714][T230589] ---[ end trace 3525a7655f2f3b9e ]--- CVE-2022-48785 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48785.html CVE-2022-48785 https://bugzilla.suse.com/1227927 SUSE Bug 1227927 In the Linux kernel, the following vulnerability has been resolved: vsock: remove vsock from connected table when connect is interrupted by a signal vsock_connect() expects that the socket could already be in the TCP_ESTABLISHED state when the connecting task wakes up with a signal pending. If this happens the socket will be in the connected table, and it is not removed when the socket state is reset. In this situation it's common for the process to retry connect(), and if the connection is successful the socket will be added to the connected table a second time, corrupting the list. Prevent this by calling vsock_remove_connected() if a signal is received while waiting for a connection. This is harmless if the socket is not in the connected table, and if it is in the table then removing it will prevent list corruption from a double add. Note for backporting: this patch requires d5afa82c977e ("vsock: correct removal of socket from the list"), which is in all current stable trees except 4.9.y. CVE-2022-48786 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48786.html CVE-2022-48786 https://bugzilla.suse.com/1227996 SUSE Bug 1227996 In the Linux kernel, the following vulnerability has been resolved: iwlwifi: fix use-after-free If no firmware was present at all (or, presumably, all of the firmware files failed to parse), we end up unbinding by calling device_release_driver(), which calls remove(), which then in iwlwifi calls iwl_drv_stop(), freeing the 'drv' struct. However the new code I added will still erroneously access it after it was freed. Set 'failure=false' in this case to avoid the access, all data was already freed anyway. CVE-2022-48787 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48787.html CVE-2022-48787 https://bugzilla.suse.com/1227932 SUSE Bug 1227932 In the Linux kernel, the following vulnerability has been resolved: nvme-rdma: fix possible use-after-free in transport error_recovery work While nvme_rdma_submit_async_event_work is checking the ctrl and queue state before preparing the AER command and scheduling io_work, in order to fully prevent a race where this check is not reliable the error recovery work must flush async_event_work before continuing to destroy the admin queue after setting the ctrl state to RESETTING such that there is no race .submit_async_event and the error recovery handler itself changing the ctrl state. CVE-2022-48788 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48788.html CVE-2022-48788 https://bugzilla.suse.com/1227952 SUSE Bug 1227952 In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: fix possible use-after-free in transport error_recovery work While nvme_tcp_submit_async_event_work is checking the ctrl and queue state before preparing the AER command and scheduling io_work, in order to fully prevent a race where this check is not reliable the error recovery work must flush async_event_work before continuing to destroy the admin queue after setting the ctrl state to RESETTING such that there is no race .submit_async_event and the error recovery handler itself changing the ctrl state. CVE-2022-48789 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48789.html CVE-2022-48789 https://bugzilla.suse.com/1228000 SUSE Bug 1228000 In the Linux kernel, the following vulnerability has been resolved: nvme: fix a possible use-after-free in controller reset during load Unlike .queue_rq, in .submit_async_event drivers may not check the ctrl readiness for AER submission. This may lead to a use-after-free condition that was observed with nvme-tcp. The race condition may happen in the following scenario: 1. driver executes its reset_ctrl_work 2. -> nvme_stop_ctrl - flushes ctrl async_event_work 3. ctrl sends AEN which is received by the host, which in turn schedules AEN handling 4. teardown admin queue (which releases the queue socket) 5. AEN processed, submits another AER, calling the driver to submit 6. driver attempts to send the cmd ==> use-after-free In order to fix that, add ctrl state check to validate the ctrl is actually able to accept the AER submission. This addresses the above race in controller resets because the driver during teardown should: 1. change ctrl state to RESETTING 2. flush async_event_work (as well as other async work elements) So after 1,2, any other AER command will find the ctrl state to be RESETTING and bail out without submitting the AER. CVE-2022-48790 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48790.html CVE-2022-48790 https://bugzilla.suse.com/1227941 SUSE Bug 1227941 In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free for aborted TMF sas_task Currently a use-after-free may occur if a TMF sas_task is aborted before we handle the IO completion in mpi_ssp_completion(). The abort occurs due to timeout. When the timeout occurs, the SAS_TASK_STATE_ABORTED flag is set and the sas_task is freed in pm8001_exec_internal_tmf_task(). However, if the I/O completion occurs later, the I/O completion still thinks that the sas_task is available. Fix this by clearing the ccb->task if the TMF times out - the I/O completion handler does nothing if this pointer is cleared. CVE-2022-48791 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48791.html CVE-2022-48791 https://bugzilla.suse.com/1228002 SUSE Bug 1228002 https://bugzilla.suse.com/1228012 SUSE Bug 1228012 In the Linux kernel, the following vulnerability has been resolved: scsi: pm8001: Fix use-after-free for aborted SSP/STP sas_task Currently a use-after-free may occur if a sas_task is aborted by the upper layer before we handle the I/O completion in mpi_ssp_completion() or mpi_sata_completion(). In this case, the following are the two steps in handling those I/O completions: - Call complete() to inform the upper layer handler of completion of the I/O. - Release driver resources associated with the sas_task in pm8001_ccb_task_free() call. When complete() is called, the upper layer may free the sas_task. As such, we should not touch the associated sas_task afterwards, but we do so in the pm8001_ccb_task_free() call. Fix by swapping the complete() and pm8001_ccb_task_free() calls ordering. CVE-2022-48792 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48792.html CVE-2022-48792 https://bugzilla.suse.com/1228013 SUSE Bug 1228013 https://bugzilla.suse.com/1228017 SUSE Bug 1228017 In the Linux kernel, the following vulnerability has been resolved: KVM: x86: nSVM: fix potential NULL derefernce on nested migration Turns out that due to review feedback and/or rebases I accidentally moved the call to nested_svm_load_cr3 to be too early, before the NPT is enabled, which is very wrong to do. KVM can't even access guest memory at that point as nested NPT is needed for that, and of course it won't initialize the walk_mmu, which is main issue the patch was addressing. Fix this for real. CVE-2022-48793 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48793.html CVE-2022-48793 https://bugzilla.suse.com/1228019 SUSE Bug 1228019 In the Linux kernel, the following vulnerability has been resolved: net: ieee802154: at86rf230: Stop leaking skb's Upon error the ieee802154_xmit_complete() helper is not called. Only ieee802154_wake_queue() is called manually. In the Tx case we then leak the skb structure. Free the skb structure upon error before returning when appropriate. As the 'is_tx = 0' cannot be moved in the complete handler because of a possible race between the delay in switching to STATE_RX_AACK_ON and a new interrupt, we introduce an intermediate 'was_tx' boolean just for this purpose. There is no Fixes tag applying here, many changes have been made on this area and the issue kind of always existed. CVE-2022-48794 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48794.html CVE-2022-48794 https://bugzilla.suse.com/1228025 SUSE Bug 1228025 In the Linux kernel, the following vulnerability has been resolved: iommu: Fix potential use-after-free during probe Kasan has reported the following use after free on dev->iommu. when a device probe fails and it is in process of freeing dev->iommu in dev_iommu_free function, a deferred_probe_work_func runs in parallel and tries to access dev->iommu->fwspec in of_iommu_configure path thus causing use after free. BUG: KASAN: use-after-free in of_iommu_configure+0xb4/0x4a4 Read of size 8 at addr ffffff87a2f1acb8 by task kworker/u16:2/153 Workqueue: events_unbound deferred_probe_work_func Call trace: dump_backtrace+0x0/0x33c show_stack+0x18/0x24 dump_stack_lvl+0x16c/0x1e0 print_address_description+0x84/0x39c __kasan_report+0x184/0x308 kasan_report+0x50/0x78 __asan_load8+0xc0/0xc4 of_iommu_configure+0xb4/0x4a4 of_dma_configure_id+0x2fc/0x4d4 platform_dma_configure+0x40/0x5c really_probe+0x1b4/0xb74 driver_probe_device+0x11c/0x228 __device_attach_driver+0x14c/0x304 bus_for_each_drv+0x124/0x1b0 __device_attach+0x25c/0x334 device_initial_probe+0x24/0x34 bus_probe_device+0x78/0x134 deferred_probe_work_func+0x130/0x1a8 process_one_work+0x4c8/0x970 worker_thread+0x5c8/0xaec kthread+0x1f8/0x220 ret_from_fork+0x10/0x18 Allocated by task 1: ____kasan_kmalloc+0xd4/0x114 __kasan_kmalloc+0x10/0x1c kmem_cache_alloc_trace+0xe4/0x3d4 __iommu_probe_device+0x90/0x394 probe_iommu_group+0x70/0x9c bus_for_each_dev+0x11c/0x19c bus_iommu_probe+0xb8/0x7d4 bus_set_iommu+0xcc/0x13c arm_smmu_bus_init+0x44/0x130 [arm_smmu] arm_smmu_device_probe+0xb88/0xc54 [arm_smmu] platform_drv_probe+0xe4/0x13c really_probe+0x2c8/0xb74 driver_probe_device+0x11c/0x228 device_driver_attach+0xf0/0x16c __driver_attach+0x80/0x320 bus_for_each_dev+0x11c/0x19c driver_attach+0x38/0x48 bus_add_driver+0x1dc/0x3a4 driver_register+0x18c/0x244 __platform_driver_register+0x88/0x9c init_module+0x64/0xff4 [arm_smmu] do_one_initcall+0x17c/0x2f0 do_init_module+0xe8/0x378 load_module+0x3f80/0x4a40 __se_sys_finit_module+0x1a0/0x1e4 __arm64_sys_finit_module+0x44/0x58 el0_svc_common+0x100/0x264 do_el0_svc+0x38/0xa4 el0_svc+0x20/0x30 el0_sync_handler+0x68/0xac el0_sync+0x160/0x180 Freed by task 1: kasan_set_track+0x4c/0x84 kasan_set_free_info+0x28/0x4c ____kasan_slab_free+0x120/0x15c __kasan_slab_free+0x18/0x28 slab_free_freelist_hook+0x204/0x2fc kfree+0xfc/0x3a4 __iommu_probe_device+0x284/0x394 probe_iommu_group+0x70/0x9c bus_for_each_dev+0x11c/0x19c bus_iommu_probe+0xb8/0x7d4 bus_set_iommu+0xcc/0x13c arm_smmu_bus_init+0x44/0x130 [arm_smmu] arm_smmu_device_probe+0xb88/0xc54 [arm_smmu] platform_drv_probe+0xe4/0x13c really_probe+0x2c8/0xb74 driver_probe_device+0x11c/0x228 device_driver_attach+0xf0/0x16c __driver_attach+0x80/0x320 bus_for_each_dev+0x11c/0x19c driver_attach+0x38/0x48 bus_add_driver+0x1dc/0x3a4 driver_register+0x18c/0x244 __platform_driver_register+0x88/0x9c init_module+0x64/0xff4 [arm_smmu] do_one_initcall+0x17c/0x2f0 do_init_module+0xe8/0x378 load_module+0x3f80/0x4a40 __se_sys_finit_module+0x1a0/0x1e4 __arm64_sys_finit_module+0x44/0x58 el0_svc_common+0x100/0x264 do_el0_svc+0x38/0xa4 el0_svc+0x20/0x30 el0_sync_handler+0x68/0xac el0_sync+0x160/0x180 Fix this by setting dev->iommu to NULL first and then freeing dev_iommu structure in dev_iommu_free function. CVE-2022-48796 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48796.html CVE-2022-48796 https://bugzilla.suse.com/1228028 SUSE Bug 1228028 In the Linux kernel, the following vulnerability has been resolved: mm: don't try to NUMA-migrate COW pages that have other uses Oded Gabbay reports that enabling NUMA balancing causes corruption with his Gaudi accelerator test load: "All the details are in the bug, but the bottom line is that somehow, this patch causes corruption when the numa balancing feature is enabled AND we don't use process affinity AND we use GUP to pin pages so our accelerator can DMA to/from system memory. Either disabling numa balancing, using process affinity to bind to specific numa-node or reverting this patch causes the bug to disappear" and Oded bisected the issue to commit 09854ba94c6a ("mm: do_wp_page() simplification"). Now, the NUMA balancing shouldn't actually be changing the writability of a page, and as such shouldn't matter for COW. But it appears it does. Suspicious. However, regardless of that, the condition for enabling NUMA faults in change_pte_range() is nonsensical. It uses "page_mapcount(page)" to decide if a COW page should be NUMA-protected or not, and that makes absolutely no sense. The number of mappings a page has is irrelevant: not only does GUP get a reference to a page as in Oded's case, but the other mappings migth be paged out and the only reference to them would be in the page count. Since we should never try to NUMA-balance a page that we can't move anyway due to other references, just fix the code to use 'page_count()'. Oded confirms that that fixes his issue. Now, this does imply that something in NUMA balancing ends up changing page protections (other than the obvious one of making the page inaccessible to get the NUMA faulting information). Otherwise the COW simplification wouldn't matter - since doing the GUP on the page would make sure it's writable. The cause of that permission change would be good to figure out too, since it clearly results in spurious COW events - but fixing the nonsensical test that just happened to work before is obviously the CorrectThing(tm) to do regardless. CVE-2022-48797 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48797.html CVE-2022-48797 https://bugzilla.suse.com/1228035 SUSE Bug 1228035 In the Linux kernel, the following vulnerability has been resolved: s390/cio: verify the driver availability for path_event call If no driver is attached to a device or the driver does not provide the path_event function, an FCES path-event on this device could end up in a kernel-panic. Verify the driver availability before the path_event function call. CVE-2022-48798 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48798.html CVE-2022-48798 https://bugzilla.suse.com/1227945 SUSE Bug 1227945 In the Linux kernel, the following vulnerability has been resolved: perf: Fix list corruption in perf_cgroup_switch() There's list corruption on cgrp_cpuctx_list. This happens on the following path: perf_cgroup_switch: list_for_each_entry(cgrp_cpuctx_list) cpu_ctx_sched_in ctx_sched_in ctx_pinned_sched_in merge_sched_in perf_cgroup_event_disable: remove the event from the list Use list_for_each_entry_safe() to allow removing an entry during iteration. CVE-2022-48799 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48799.html CVE-2022-48799 https://bugzilla.suse.com/1227953 SUSE Bug 1227953 In the Linux kernel, the following vulnerability has been resolved: mm: vmscan: remove deadlock due to throttling failing to make progress A soft lockup bug in kcompactd was reported in a private bugzilla with the following visible in dmesg; watchdog: BUG: soft lockup - CPU#33 stuck for 26s! [kcompactd0:479] watchdog: BUG: soft lockup - CPU#33 stuck for 52s! [kcompactd0:479] watchdog: BUG: soft lockup - CPU#33 stuck for 78s! [kcompactd0:479] watchdog: BUG: soft lockup - CPU#33 stuck for 104s! [kcompactd0:479] The machine had 256G of RAM with no swap and an earlier failed allocation indicated that node 0 where kcompactd was run was potentially unreclaimable; Node 0 active_anon:29355112kB inactive_anon:2913528kB active_file:0kB inactive_file:0kB unevictable:64kB isolated(anon):0kB isolated(file):0kB mapped:8kB dirty:0kB writeback:0kB shmem:26780kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 23480320kB writeback_tmp:0kB kernel_stack:2272kB pagetables:24500kB all_unreclaimable? yes Vlastimil Babka investigated a crash dump and found that a task migrating pages was trying to drain PCP lists; PID: 52922 TASK: ffff969f820e5000 CPU: 19 COMMAND: "kworker/u128:3" Call Trace: __schedule schedule schedule_timeout wait_for_completion __flush_work __drain_all_pages __alloc_pages_slowpath.constprop.114 __alloc_pages alloc_migration_target migrate_pages migrate_to_node do_migrate_pages cpuset_migrate_mm_workfn process_one_work worker_thread kthread ret_from_fork This failure is specific to CONFIG_PREEMPT=n builds. The root of the problem is that kcompact0 is not rescheduling on a CPU while a task that has isolated a large number of the pages from the LRU is waiting on kcompact0 to reschedule so the pages can be released. While shrink_inactive_list() only loops once around too_many_isolated, reclaim can continue without rescheduling if sc->skipped_deactivate == 1 which could happen if there was no file LRU and the inactive anon list was not low. CVE-2022-48800 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48800.html CVE-2022-48800 https://bugzilla.suse.com/1227954 SUSE Bug 1227954 In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Fix file related error handling in IIO_BUFFER_GET_FD_IOCTL If we fail to copy the just created file descriptor to userland, we try to clean up by putting back 'fd' and freeing 'ib'. The code uses put_unused_fd() for the former which is wrong, as the file descriptor was already published by fd_install() which gets called internally by anon_inode_getfd(). This makes the error handling code leaving a half cleaned up file descriptor table around and a partially destructed 'file' object, allowing userland to play use-after-free tricks on us, by abusing the still usable fd and making the code operate on a dangling 'file->private_data' pointer. Instead of leaving the kernel in a partially corrupted state, don't attempt to explicitly clean up and leave this to the process exit path that'll release any still valid fds, including the one created by the previous call to anon_inode_getfd(). Simply return -EFAULT to indicate the error. CVE-2022-48801 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48801.html CVE-2022-48801 https://bugzilla.suse.com/1227956 SUSE Bug 1227956 https://bugzilla.suse.com/1228023 SUSE Bug 1228023 In the Linux kernel, the following vulnerability has been resolved: fs/proc: task_mmu.c: don't read mapcount for migration entry The syzbot reported the below BUG: kernel BUG at include/linux/page-flags.h:785! invalid opcode: 0000 [#1] PREEMPT SMP KASAN CPU: 1 PID: 4392 Comm: syz-executor560 Not tainted 5.16.0-rc6-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:PageDoubleMap include/linux/page-flags.h:785 [inline] RIP: 0010:__page_mapcount+0x2d2/0x350 mm/util.c:744 Call Trace: page_mapcount include/linux/mm.h:837 [inline] smaps_account+0x470/0xb10 fs/proc/task_mmu.c:466 smaps_pte_entry fs/proc/task_mmu.c:538 [inline] smaps_pte_range+0x611/0x1250 fs/proc/task_mmu.c:601 walk_pmd_range mm/pagewalk.c:128 [inline] walk_pud_range mm/pagewalk.c:205 [inline] walk_p4d_range mm/pagewalk.c:240 [inline] walk_pgd_range mm/pagewalk.c:277 [inline] __walk_page_range+0xe23/0x1ea0 mm/pagewalk.c:379 walk_page_vma+0x277/0x350 mm/pagewalk.c:530 smap_gather_stats.part.0+0x148/0x260 fs/proc/task_mmu.c:768 smap_gather_stats fs/proc/task_mmu.c:741 [inline] show_smap+0xc6/0x440 fs/proc/task_mmu.c:822 seq_read_iter+0xbb0/0x1240 fs/seq_file.c:272 seq_read+0x3e0/0x5b0 fs/seq_file.c:162 vfs_read+0x1b5/0x600 fs/read_write.c:479 ksys_read+0x12d/0x250 fs/read_write.c:619 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae The reproducer was trying to read /proc/$PID/smaps when calling MADV_FREE at the mean time. MADV_FREE may split THPs if it is called for partial THP. It may trigger the below race: CPU A CPU B ----- ----- smaps walk: MADV_FREE: page_mapcount() PageCompound() split_huge_page() page = compound_head(page) PageDoubleMap(page) When calling PageDoubleMap() this page is not a tail page of THP anymore so the BUG is triggered. This could be fixed by elevated refcount of the page before calling mapcount, but that would prevent it from counting migration entries, and it seems overkilling because the race just could happen when PMD is split so all PTE entries of tail pages are actually migration entries, and smaps_account() does treat migration entries as mapcount == 1 as Kirill pointed out. Add a new parameter for smaps_account() to tell this entry is migration entry then skip calling page_mapcount(). Don't skip getting mapcount for device private entries since they do track references with mapcount. Pagemap also has the similar issue although it was not reported. Fixed it as well. [shy828301@gmail.com: v4] Link: https://lkml.kernel.org/r/20220203182641.824731-1-shy828301@gmail.com [nathan@kernel.org: avoid unused variable warning in pagemap_pmd_range()] Link: https://lkml.kernel.org/r/20220207171049.1102239-1-nathan@kernel.org CVE-2022-48802 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48802.html CVE-2022-48802 https://bugzilla.suse.com/1227942 SUSE Bug 1227942 In the Linux kernel, the following vulnerability has been resolved: phy: ti: Fix missing sentinel for clk_div_table _get_table_maxdiv() tries to access "clk_div_table" array out of bound defined in phy-j721e-wiz.c. Add a sentinel entry to prevent the following global-out-of-bounds error reported by enabling KASAN. [ 9.552392] BUG: KASAN: global-out-of-bounds in _get_maxdiv+0xc0/0x148 [ 9.558948] Read of size 4 at addr ffff8000095b25a4 by task kworker/u4:1/38 [ 9.565926] [ 9.567441] CPU: 1 PID: 38 Comm: kworker/u4:1 Not tainted 5.16.0-116492-gdaadb3bd0e8d-dirty #360 [ 9.576242] Hardware name: Texas Instruments J721e EVM (DT) [ 9.581832] Workqueue: events_unbound deferred_probe_work_func [ 9.587708] Call trace: [ 9.590174] dump_backtrace+0x20c/0x218 [ 9.594038] show_stack+0x18/0x68 [ 9.597375] dump_stack_lvl+0x9c/0xd8 [ 9.601062] print_address_description.constprop.0+0x78/0x334 [ 9.606830] kasan_report+0x1f0/0x260 [ 9.610517] __asan_load4+0x9c/0xd8 [ 9.614030] _get_maxdiv+0xc0/0x148 [ 9.617540] divider_determine_rate+0x88/0x488 [ 9.622005] divider_round_rate_parent+0xc8/0x124 [ 9.626729] wiz_clk_div_round_rate+0x54/0x68 [ 9.631113] clk_core_determine_round_nolock+0x124/0x158 [ 9.636448] clk_core_round_rate_nolock+0x68/0x138 [ 9.641260] clk_core_set_rate_nolock+0x268/0x3a8 [ 9.645987] clk_set_rate+0x50/0xa8 [ 9.649499] cdns_sierra_phy_init+0x88/0x248 [ 9.653794] phy_init+0x98/0x108 [ 9.657046] cdns_pcie_enable_phy+0xa0/0x170 [ 9.661340] cdns_pcie_init_phy+0x250/0x2b0 [ 9.665546] j721e_pcie_probe+0x4b8/0x798 [ 9.669579] platform_probe+0x8c/0x108 [ 9.673350] really_probe+0x114/0x630 [ 9.677037] __driver_probe_device+0x18c/0x220 [ 9.681505] driver_probe_device+0xac/0x150 [ 9.685712] __device_attach_driver+0xec/0x170 [ 9.690178] bus_for_each_drv+0xf0/0x158 [ 9.694124] __device_attach+0x184/0x210 [ 9.698070] device_initial_probe+0x14/0x20 [ 9.702277] bus_probe_device+0xec/0x100 [ 9.706223] deferred_probe_work_func+0x124/0x180 [ 9.710951] process_one_work+0x4b0/0xbc0 [ 9.714983] worker_thread+0x74/0x5d0 [ 9.718668] kthread+0x214/0x230 [ 9.721919] ret_from_fork+0x10/0x20 [ 9.725520] [ 9.727032] The buggy address belongs to the variable: [ 9.732183] clk_div_table+0x24/0x440 CVE-2022-48803 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48803.html CVE-2022-48803 https://bugzilla.suse.com/1227965 SUSE Bug 1227965 In the Linux kernel, the following vulnerability has been resolved: vt_ioctl: fix array_index_nospec in vt_setactivate array_index_nospec ensures that an out-of-bounds value is set to zero on the transient path. Decreasing the value by one afterwards causes a transient integer underflow. vsa.console should be decreased first and then sanitized with array_index_nospec. Kasper Acknowledgements: Jakob Koschel, Brian Johannesmeyer, Kaveh Razavi, Herbert Bos, Cristiano Giuffrida from the VUSec group at VU Amsterdam. CVE-2022-48804 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48804.html CVE-2022-48804 https://bugzilla.suse.com/1227968 SUSE Bug 1227968 In the Linux kernel, the following vulnerability has been resolved: net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup ax88179_rx_fixup() contains several out-of-bounds accesses that can be triggered by a malicious (or defective) USB device, in particular: - The metadata array (hdr_off..hdr_off+2*pkt_cnt) can be out of bounds, causing OOB reads and (on big-endian systems) OOB endianness flips. - A packet can overlap the metadata array, causing a later OOB endianness flip to corrupt data used by a cloned SKB that has already been handed off into the network stack. - A packet SKB can be constructed whose tail is far beyond its end, causing out-of-bounds heap data to be considered part of the SKB's data. I have tested that this can be used by a malicious USB device to send a bogus ICMPv6 Echo Request and receive an ICMPv6 Echo Reply in response that contains random kernel heap data. It's probably also possible to get OOB writes from this on a little-endian system somehow - maybe by triggering skb_cow() via IP options processing -, but I haven't tested that. CVE-2022-48805 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48805.html CVE-2022-48805 https://bugzilla.suse.com/1227969 SUSE Bug 1227969 In the Linux kernel, the following vulnerability has been resolved: eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX Commit effa453168a7 ("i2c: i801: Don't silently correct invalid transfer size") revealed that ee1004_eeprom_read() did not properly limit how many bytes to read at once. In particular, i2c_smbus_read_i2c_block_data_or_emulated() takes the length to read as an u8. If count == 256 after taking into account the offset and page boundary, the cast to u8 overflows. And this is common when user space tries to read the entire EEPROM at once. To fix it, limit each read to I2C_SMBUS_BLOCK_MAX (32) bytes, already the maximum length i2c_smbus_read_i2c_block_data_or_emulated() allows. CVE-2022-48806 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48806.html CVE-2022-48806 https://bugzilla.suse.com/1227948 SUSE Bug 1227948 In the Linux kernel, the following vulnerability has been resolved: ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler Currently, the same handler is called for both a NETDEV_BONDING_INFO LAG unlink notification as for a NETDEV_UNREGISTER call. This is causing a problem though, since the netdev_notifier_info passed has a different structure depending on which event is passed. The problem manifests as a call trace from a BUG: KASAN stack-out-of-bounds error. Fix this by creating a handler specific to NETDEV_UNREGISTER that only is passed valid elements in the netdev_notifier_info struct for the NETDEV_UNREGISTER event. Also included is the removal of an unbalanced dev_put on the peer_netdev and related braces. CVE-2022-48807 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48807.html CVE-2022-48807 https://bugzilla.suse.com/1227970 SUSE Bug 1227970 https://bugzilla.suse.com/1228024 SUSE Bug 1228024 In the Linux kernel, the following vulnerability has been resolved: net: fix a memleak when uncloning an skb dst and its metadata When uncloning an skb dst and its associated metadata, a new dst+metadata is allocated and later replaces the old one in the skb. This is helpful to have a non-shared dst+metadata attached to a specific skb. The issue is the uncloned dst+metadata is initialized with a refcount of 1, which is increased to 2 before attaching it to the skb. When tun_dst_unclone returns, the dst+metadata is only referenced from a single place (the skb) while its refcount is 2. Its refcount will never drop to 0 (when the skb is consumed), leading to a memory leak. Fix this by removing the call to dst_hold in tun_dst_unclone, as the dst+metadata refcount is already 1. CVE-2022-48809 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48809.html CVE-2022-48809 https://bugzilla.suse.com/1227947 SUSE Bug 1227947 In the Linux kernel, the following vulnerability has been resolved: ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path ip[6]mr_free_table() can only be called under RTNL lock. RTNL: assertion failed at net/core/dev.c (10367) WARNING: CPU: 1 PID: 5890 at net/core/dev.c:10367 unregister_netdevice_many+0x1246/0x1850 net/core/dev.c:10367 Modules linked in: CPU: 1 PID: 5890 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller-11627-g422ee58dc0ef #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 RIP: 0010:unregister_netdevice_many+0x1246/0x1850 net/core/dev.c:10367 Code: 0f 85 9b ee ff ff e8 69 07 4b fa ba 7f 28 00 00 48 c7 c6 00 90 ae 8a 48 c7 c7 40 90 ae 8a c6 05 6d b1 51 06 01 e8 8c 90 d8 01 <0f> 0b e9 70 ee ff ff e8 3e 07 4b fa 4c 89 e7 e8 86 2a 59 fa e9 ee RSP: 0018:ffffc900046ff6e0 EFLAGS: 00010286 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: ffff888050f51d00 RSI: ffffffff815fa008 RDI: fffff520008dfece RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: ffffffff815f3d6e R11: 0000000000000000 R12: 00000000fffffff4 R13: dffffc0000000000 R14: ffffc900046ff750 R15: ffff88807b7dc000 FS: 00007f4ab736e700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fee0b4f8990 CR3: 000000001e7d2000 CR4: 00000000003506e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> mroute_clean_tables+0x244/0xb40 net/ipv6/ip6mr.c:1509 ip6mr_free_table net/ipv6/ip6mr.c:389 [inline] ip6mr_rules_init net/ipv6/ip6mr.c:246 [inline] ip6mr_net_init net/ipv6/ip6mr.c:1306 [inline] ip6mr_net_init+0x3f0/0x4e0 net/ipv6/ip6mr.c:1298 ops_init+0xaf/0x470 net/core/net_namespace.c:140 setup_net+0x54f/0xbb0 net/core/net_namespace.c:331 copy_net_ns+0x318/0x760 net/core/net_namespace.c:475 create_new_namespaces+0x3f6/0xb20 kernel/nsproxy.c:110 copy_namespaces+0x391/0x450 kernel/nsproxy.c:178 copy_process+0x2e0c/0x7300 kernel/fork.c:2167 kernel_clone+0xe7/0xab0 kernel/fork.c:2555 __do_sys_clone+0xc8/0x110 kernel/fork.c:2672 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7f4ab89f9059 Code: Unable to access opcode bytes at RIP 0x7f4ab89f902f. RSP: 002b:00007f4ab736e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 RAX: ffffffffffffffda RBX: 00007f4ab8b0bf60 RCX: 00007f4ab89f9059 RDX: 0000000020000280 RSI: 0000000020000270 RDI: 0000000040200000 RBP: 00007f4ab8a5308d R08: 0000000020000300 R09: 0000000020000300 R10: 00000000200002c0 R11: 0000000000000206 R12: 0000000000000000 R13: 00007ffc3977cc1f R14: 00007f4ab736e300 R15: 0000000000022000 </TASK> CVE-2022-48810 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48810.html CVE-2022-48810 https://bugzilla.suse.com/1227936 SUSE Bug 1227936 In the Linux kernel, the following vulnerability has been resolved: ibmvnic: don't release napi in __ibmvnic_open() If __ibmvnic_open() encounters an error such as when setting link state, it calls release_resources() which frees the napi structures needlessly. Instead, have __ibmvnic_open() only clean up the work it did so far (i.e. disable napi and irqs) and leave the rest to the callers. If caller of __ibmvnic_open() is ibmvnic_open(), it should release the resources immediately. If the caller is do_reset() or do_hard_reset(), they will release the resources on the next reset. This fixes following crash that occurred when running the drmgr command several times to add/remove a vnic interface: [102056] ibmvnic 30000003 env3: Disabling rx_scrq[6] irq [102056] ibmvnic 30000003 env3: Disabling rx_scrq[7] irq [102056] ibmvnic 30000003 env3: Replenished 8 pools Kernel attempted to read user page (10) - exploit attempt? (uid: 0) BUG: Kernel NULL pointer dereference on read at 0x00000010 Faulting instruction address: 0xc000000000a3c840 Oops: Kernel access of bad area, sig: 11 [#1] LE PAGE_SIZE=64K MMU=Radix SMP NR_CPUS=2048 NUMA pSeries ... CPU: 9 PID: 102056 Comm: kworker/9:2 Kdump: loaded Not tainted 5.16.0-rc5-autotest-g6441998e2e37 #1 Workqueue: events_long __ibmvnic_reset [ibmvnic] NIP: c000000000a3c840 LR: c0080000029b5378 CTR: c000000000a3c820 REGS: c0000000548e37e0 TRAP: 0300 Not tainted (5.16.0-rc5-autotest-g6441998e2e37) MSR: 8000000000009033 <SF,EE,ME,IR,DR,RI,LE> CR: 28248484 XER: 00000004 CFAR: c0080000029bdd24 DAR: 0000000000000010 DSISR: 40000000 IRQMASK: 0 GPR00: c0080000029b55d0 c0000000548e3a80 c0000000028f0200 0000000000000000 ... NIP [c000000000a3c840] napi_enable+0x20/0xc0 LR [c0080000029b5378] __ibmvnic_open+0xf0/0x430 [ibmvnic] Call Trace: [c0000000548e3a80] [0000000000000006] 0x6 (unreliable) [c0000000548e3ab0] [c0080000029b55d0] __ibmvnic_open+0x348/0x430 [ibmvnic] [c0000000548e3b40] [c0080000029bcc28] __ibmvnic_reset+0x500/0xdf0 [ibmvnic] [c0000000548e3c60] [c000000000176228] process_one_work+0x288/0x570 [c0000000548e3d00] [c000000000176588] worker_thread+0x78/0x660 [c0000000548e3da0] [c0000000001822f0] kthread+0x1c0/0x1d0 [c0000000548e3e10] [c00000000000cf64] ret_from_kernel_thread+0x5c/0x64 Instruction dump: 7d2948f8 792307e0 4e800020 60000000 3c4c01eb 384239e0 f821ffd1 39430010 38a0fff6 e92d1100 f9210028 39200000 <e9030010> f9010020 60420000 e9210020 ---[ end trace 5f8033b08fd27706 ]--- CVE-2022-48811 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48811.html CVE-2022-48811 https://bugzilla.suse.com/1227928 SUSE Bug 1227928 In the Linux kernel, the following vulnerability has been resolved: net: dsa: lantiq_gswip: don't use devres for mdiobus As explained in commits: 74b6d7d13307 ("net: dsa: realtek: register the MDIO bus under devres") 5135e96a3dd2 ("net: dsa: don't allocate the slave_mii_bus using devres") mdiobus_free() will panic when called from devm_mdiobus_free() <- devres_release_all() <- __device_release_driver(), and that mdiobus was not previously unregistered. The GSWIP switch is a platform device, so the initial set of constraints that I thought would cause this (I2C or SPI buses which call ->remove on ->shutdown) do not apply. But there is one more which applies here. If the DSA master itself is on a bus that calls ->remove from ->shutdown (like dpaa2-eth, which is on the fsl-mc bus), there is a device link between the switch and the DSA master, and device_links_unbind_consumers() will unbind the GSWIP switch driver on shutdown. So the same treatment must be applied to all DSA switch drivers, which is: either use devres for both the mdiobus allocation and registration, or don't use devres at all. The gswip driver has the code structure in place for orderly mdiobus removal, so just replace devm_mdiobus_alloc() with the non-devres variant, and add manual free where necessary, to ensure that we don't let devres free a still-registered bus. CVE-2022-48812 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48812.html CVE-2022-48812 https://bugzilla.suse.com/1227971 SUSE Bug 1227971 In the Linux kernel, the following vulnerability has been resolved: net: dsa: felix: don't use devres for mdiobus As explained in commits: 74b6d7d13307 ("net: dsa: realtek: register the MDIO bus under devres") 5135e96a3dd2 ("net: dsa: don't allocate the slave_mii_bus using devres") mdiobus_free() will panic when called from devm_mdiobus_free() <- devres_release_all() <- __device_release_driver(), and that mdiobus was not previously unregistered. The Felix VSC9959 switch is a PCI device, so the initial set of constraints that I thought would cause this (I2C or SPI buses which call ->remove on ->shutdown) do not apply. But there is one more which applies here. If the DSA master itself is on a bus that calls ->remove from ->shutdown (like dpaa2-eth, which is on the fsl-mc bus), there is a device link between the switch and the DSA master, and device_links_unbind_consumers() will unbind the felix switch driver on shutdown. So the same treatment must be applied to all DSA switch drivers, which is: either use devres for both the mdiobus allocation and registration, or don't use devres at all. The felix driver has the code structure in place for orderly mdiobus removal, so just replace devm_mdiobus_alloc_size() with the non-devres variant, and add manual free where necessary, to ensure that we don't let devres free a still-registered bus. CVE-2022-48813 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48813.html CVE-2022-48813 https://bugzilla.suse.com/1227963 SUSE Bug 1227963 In the Linux kernel, the following vulnerability has been resolved: net: dsa: seville: register the mdiobus under devres As explained in commits: 74b6d7d13307 ("net: dsa: realtek: register the MDIO bus under devres") 5135e96a3dd2 ("net: dsa: don't allocate the slave_mii_bus using devres") mdiobus_free() will panic when called from devm_mdiobus_free() <- devres_release_all() <- __device_release_driver(), and that mdiobus was not previously unregistered. The Seville VSC9959 switch is a platform device, so the initial set of constraints that I thought would cause this (I2C or SPI buses which call ->remove on ->shutdown) do not apply. But there is one more which applies here. If the DSA master itself is on a bus that calls ->remove from ->shutdown (like dpaa2-eth, which is on the fsl-mc bus), there is a device link between the switch and the DSA master, and device_links_unbind_consumers() will unbind the seville switch driver on shutdown. So the same treatment must be applied to all DSA switch drivers, which is: either use devres for both the mdiobus allocation and registration, or don't use devres at all. The seville driver has a code structure that could accommodate both the mdiobus_unregister and mdiobus_free calls, but it has an external dependency upon mscc_miim_setup() from mdio-mscc-miim.c, which calls devm_mdiobus_alloc_size() on its behalf. So rather than restructuring that, and exporting yet one more symbol mscc_miim_teardown(), let's work with devres and replace of_mdiobus_register with the devres variant. When we use all-devres, we can ensure that devres doesn't free a still-registered bus (it either runs both callbacks, or none). CVE-2022-48814 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48814.html CVE-2022-48814 https://bugzilla.suse.com/1227944 SUSE Bug 1227944 In the Linux kernel, the following vulnerability has been resolved: net: dsa: bcm_sf2: don't use devres for mdiobus As explained in commits: 74b6d7d13307 ("net: dsa: realtek: register the MDIO bus under devres") 5135e96a3dd2 ("net: dsa: don't allocate the slave_mii_bus using devres") mdiobus_free() will panic when called from devm_mdiobus_free() <- devres_release_all() <- __device_release_driver(), and that mdiobus was not previously unregistered. The Starfighter 2 is a platform device, so the initial set of constraints that I thought would cause this (I2C or SPI buses which call ->remove on ->shutdown) do not apply. But there is one more which applies here. If the DSA master itself is on a bus that calls ->remove from ->shutdown (like dpaa2-eth, which is on the fsl-mc bus), there is a device link between the switch and the DSA master, and device_links_unbind_consumers() will unbind the bcm_sf2 switch driver on shutdown. So the same treatment must be applied to all DSA switch drivers, which is: either use devres for both the mdiobus allocation and registration, or don't use devres at all. The bcm_sf2 driver has the code structure in place for orderly mdiobus removal, so just replace devm_mdiobus_alloc() with the non-devres variant, and add manual free where necessary, to ensure that we don't let devres free a still-registered bus. CVE-2022-48815 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48815.html CVE-2022-48815 https://bugzilla.suse.com/1227933 SUSE Bug 1227933 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: lock against ->sock changing during sysfs read ->sock can be set to NULL asynchronously unless ->recv_mutex is held. So it is important to hold that mutex. Otherwise a sysfs read can trigger an oops. Commit 17f09d3f619a ("SUNRPC: Check if the xprt is connected before handling sysfs reads") appears to attempt to fix this problem, but it only narrows the race window. CVE-2022-48816 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48816.html CVE-2022-48816 https://bugzilla.suse.com/1228038 SUSE Bug 1228038 In the Linux kernel, the following vulnerability has been resolved: net: dsa: ar9331: register the mdiobus under devres As explained in commits: 74b6d7d13307 ("net: dsa: realtek: register the MDIO bus under devres") 5135e96a3dd2 ("net: dsa: don't allocate the slave_mii_bus using devres") mdiobus_free() will panic when called from devm_mdiobus_free() <- devres_release_all() <- __device_release_driver(), and that mdiobus was not previously unregistered. The ar9331 is an MDIO device, so the initial set of constraints that I thought would cause this (I2C or SPI buses which call ->remove on ->shutdown) do not apply. But there is one more which applies here. If the DSA master itself is on a bus that calls ->remove from ->shutdown (like dpaa2-eth, which is on the fsl-mc bus), there is a device link between the switch and the DSA master, and device_links_unbind_consumers() will unbind the ar9331 switch driver on shutdown. So the same treatment must be applied to all DSA switch drivers, which is: either use devres for both the mdiobus allocation and registration, or don't use devres at all. The ar9331 driver doesn't have a complex code structure for mdiobus removal, so just replace of_mdiobus_register with the devres variant in order to be all-devres and ensure that we don't free a still-registered bus. CVE-2022-48817 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48817.html CVE-2022-48817 https://bugzilla.suse.com/1227931 SUSE Bug 1227931 In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: don't use devres for mdiobus As explained in commits: 74b6d7d13307 ("net: dsa: realtek: register the MDIO bus under devres") 5135e96a3dd2 ("net: dsa: don't allocate the slave_mii_bus using devres") mdiobus_free() will panic when called from devm_mdiobus_free() <- devres_release_all() <- __device_release_driver(), and that mdiobus was not previously unregistered. The mv88e6xxx is an MDIO device, so the initial set of constraints that I thought would cause this (I2C or SPI buses which call ->remove on ->shutdown) do not apply. But there is one more which applies here. If the DSA master itself is on a bus that calls ->remove from ->shutdown (like dpaa2-eth, which is on the fsl-mc bus), there is a device link between the switch and the DSA master, and device_links_unbind_consumers() will unbind the Marvell switch driver on shutdown. systemd-shutdown[1]: Powering off. mv88e6085 0x0000000008b96000:00 sw_gl0: Link is Down fsl-mc dpbp.9: Removing from iommu group 7 fsl-mc dpbp.8: Removing from iommu group 7 ------------[ cut here ]------------ kernel BUG at drivers/net/phy/mdio_bus.c:677! Internal error: Oops - BUG: 0 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 1 Comm: systemd-shutdow Not tainted 5.16.5-00040-gdc05f73788e5 #15 pc : mdiobus_free+0x44/0x50 lr : devm_mdiobus_free+0x10/0x20 Call trace: mdiobus_free+0x44/0x50 devm_mdiobus_free+0x10/0x20 devres_release_all+0xa0/0x100 __device_release_driver+0x190/0x220 device_release_driver_internal+0xac/0xb0 device_links_unbind_consumers+0xd4/0x100 __device_release_driver+0x4c/0x220 device_release_driver_internal+0xac/0xb0 device_links_unbind_consumers+0xd4/0x100 __device_release_driver+0x94/0x220 device_release_driver+0x28/0x40 bus_remove_device+0x118/0x124 device_del+0x174/0x420 fsl_mc_device_remove+0x24/0x40 __fsl_mc_device_remove+0xc/0x20 device_for_each_child+0x58/0xa0 dprc_remove+0x90/0xb0 fsl_mc_driver_remove+0x20/0x5c __device_release_driver+0x21c/0x220 device_release_driver+0x28/0x40 bus_remove_device+0x118/0x124 device_del+0x174/0x420 fsl_mc_bus_remove+0x80/0x100 fsl_mc_bus_shutdown+0xc/0x1c platform_shutdown+0x20/0x30 device_shutdown+0x154/0x330 kernel_power_off+0x34/0x6c __do_sys_reboot+0x15c/0x250 __arm64_sys_reboot+0x20/0x30 invoke_syscall.constprop.0+0x4c/0xe0 do_el0_svc+0x4c/0x150 el0_svc+0x24/0xb0 el0t_64_sync_handler+0xa8/0xb0 el0t_64_sync+0x178/0x17c So the same treatment must be applied to all DSA switch drivers, which is: either use devres for both the mdiobus allocation and registration, or don't use devres at all. The Marvell driver already has a good structure for mdiobus removal, so just plug in mdiobus_free and get rid of devres. CVE-2022-48818 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48818.html CVE-2022-48818 https://bugzilla.suse.com/1228039 SUSE Bug 1228039 In the Linux kernel, the following vulnerability has been resolved: phy: stm32: fix a refcount leak in stm32_usbphyc_pll_enable() This error path needs to decrement "usbphyc->n_pll_cons.counter" before returning. CVE-2022-48820 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48820.html CVE-2022-48820 https://bugzilla.suse.com/1227972 SUSE Bug 1227972 In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: avoid double fput() on failed usercopy If the copy back to userland fails for the FASTRPC_IOCTL_ALLOC_DMA_BUFF ioctl(), we shouldn't assume that 'buf->dmabuf' is still valid. In fact, dma_buf_fd() called fd_install() before, i.e. "consumed" one reference, leaving us with none. Calling dma_buf_put() will therefore put a reference we no longer own, leading to a valid file descritor table entry for an already released 'file' object which is a straight use-after-free. Simply avoid calling dma_buf_put() and rely on the process exit code to do the necessary cleanup, if needed, i.e. if the file descriptor is still valid. CVE-2022-48821 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48821.html CVE-2022-48821 https://bugzilla.suse.com/1227976 SUSE Bug 1227976 https://bugzilla.suse.com/1228022 SUSE Bug 1228022 In the Linux kernel, the following vulnerability has been resolved: usb: f_fs: Fix use-after-free for epfile Consider a case where ffs_func_eps_disable is called from ffs_func_disable as part of composition switch and at the same time ffs_epfile_release get called from userspace. ffs_epfile_release will free up the read buffer and call ffs_data_closed which in turn destroys ffs->epfiles and mark it as NULL. While this was happening the driver has already initialized the local epfile in ffs_func_eps_disable which is now freed and waiting to acquire the spinlock. Once spinlock is acquired the driver proceeds with the stale value of epfile and tries to free the already freed read buffer causing use-after-free. Following is the illustration of the race: CPU1 CPU2 ffs_func_eps_disable epfiles (local copy) ffs_epfile_release ffs_data_closed if (last file closed) ffs_data_reset ffs_data_clear ffs_epfiles_destroy spin_lock dereference epfiles Fix this races by taking epfiles local copy & assigning it under spinlock and if epfiles(local) is null then update it in ffs->epfiles then finally destroy it. Extending the scope further from the race, protecting the ep related structures, and concurrent accesses. CVE-2022-48822 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48822.html CVE-2022-48822 https://bugzilla.suse.com/1228040 SUSE Bug 1228040 https://bugzilla.suse.com/1228136 SUSE Bug 1228136 In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Fix refcount issue when LOGO is received during TMF Hung task call trace was seen during LOGO processing. [ 974.309060] [0000:00:00.0]:[qedf_eh_device_reset:868]: 1:0:2:0: LUN RESET Issued... [ 974.309065] [0000:00:00.0]:[qedf_initiate_tmf:2422]: tm_flags 0x10 sc_cmd 00000000c16b930f op = 0x2a target_id = 0x2 lun=0 [ 974.309178] [0000:00:00.0]:[qedf_initiate_tmf:2431]: portid=016900 tm_flags =LUN RESET [ 974.309222] [0000:00:00.0]:[qedf_initiate_tmf:2438]: orig io_req = 00000000ec78df8f xid = 0x180 ref_cnt = 1. [ 974.309625] host1: rport 016900: Received LOGO request while in state Ready [ 974.309627] host1: rport 016900: Delete port [ 974.309642] host1: rport 016900: work event 3 [ 974.309644] host1: rport 016900: lld callback ev 3 [ 974.313243] [0000:61:00.2]:[qedf_execute_tmf:2383]:1: fcport is uploading, not executing flush. [ 974.313295] [0000:61:00.2]:[qedf_execute_tmf:2400]:1: task mgmt command success... [ 984.031088] INFO: task jbd2/dm-15-8:7645 blocked for more than 120 seconds. [ 984.031136] Not tainted 4.18.0-305.el8.x86_64 #1 [ 984.031166] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 984.031209] jbd2/dm-15-8 D 0 7645 2 0x80004080 [ 984.031212] Call Trace: [ 984.031222] __schedule+0x2c4/0x700 [ 984.031230] ? unfreeze_partials.isra.83+0x16e/0x1a0 [ 984.031233] ? bit_wait_timeout+0x90/0x90 [ 984.031235] schedule+0x38/0xa0 [ 984.031238] io_schedule+0x12/0x40 [ 984.031240] bit_wait_io+0xd/0x50 [ 984.031243] __wait_on_bit+0x6c/0x80 [ 984.031248] ? free_buffer_head+0x21/0x50 [ 984.031251] out_of_line_wait_on_bit+0x91/0xb0 [ 984.031257] ? init_wait_var_entry+0x50/0x50 [ 984.031268] jbd2_journal_commit_transaction+0x112e/0x19f0 [jbd2] [ 984.031280] kjournald2+0xbd/0x270 [jbd2] [ 984.031284] ? finish_wait+0x80/0x80 [ 984.031291] ? commit_timeout+0x10/0x10 [jbd2] [ 984.031294] kthread+0x116/0x130 [ 984.031300] ? kthread_flush_work_fn+0x10/0x10 [ 984.031305] ret_from_fork+0x1f/0x40 There was a ref count issue when LOGO is received during TMF. This leads to one of the I/Os hanging with the driver. Fix the ref count. CVE-2022-48823 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48823.html CVE-2022-48823 https://bugzilla.suse.com/1228045 SUSE Bug 1228045 In the Linux kernel, the following vulnerability has been resolved: scsi: myrs: Fix crash in error case In myrs_detect(), cs->disable_intr is NULL when privdata->hw_init() fails with non-zero. In this case, myrs_cleanup(cs) will call a NULL ptr and crash the kernel. [ 1.105606] myrs 0000:00:03.0: Unknown Initialization Error 5A [ 1.105872] myrs 0000:00:03.0: Failed to initialize Controller [ 1.106082] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 1.110774] Call Trace: [ 1.110950] myrs_cleanup+0xe4/0x150 [myrs] [ 1.111135] myrs_probe.cold+0x91/0x56a [myrs] [ 1.111302] ? DAC960_GEM_intr_handler+0x1f0/0x1f0 [myrs] [ 1.111500] local_pci_probe+0x48/0x90 CVE-2022-48824 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48824.html CVE-2022-48824 https://bugzilla.suse.com/1227964 SUSE Bug 1227964 In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Add stag_work to all the vports Call trace seen when creating NPIV ports, only 32 out of 64 show online. stag work was not initialized for vport, hence initialize the stag work. WARNING: CPU: 8 PID: 645 at kernel/workqueue.c:1635 __queue_delayed_work+0x68/0x80 CPU: 8 PID: 645 Comm: kworker/8:1 Kdump: loaded Tainted: G IOE --------- -- 4.18.0-348.el8.x86_64 #1 Hardware name: Dell Inc. PowerEdge MX740c/0177V9, BIOS 2.12.2 07/09/2021 Workqueue: events fc_lport_timeout [libfc] RIP: 0010:__queue_delayed_work+0x68/0x80 Code: 89 b2 88 00 00 00 44 89 82 90 00 00 00 48 01 c8 48 89 42 50 41 81 f8 00 20 00 00 75 1d e9 60 24 07 00 44 89 c7 e9 98 f6 ff ff <0f> 0b eb c5 0f 0b eb a1 0f 0b eb a7 0f 0b eb ac 44 89 c6 e9 40 23 RSP: 0018:ffffae514bc3be40 EFLAGS: 00010006 RAX: ffff8d25d6143750 RBX: 0000000000000202 RCX: 0000000000000002 RDX: ffff8d2e31383748 RSI: ffff8d25c000d600 RDI: ffff8d2e31383788 RBP: ffff8d2e31380de0 R08: 0000000000002000 R09: ffff8d2e31383750 R10: ffffffffc0c957e0 R11: ffff8d2624800000 R12: ffff8d2e31380a58 R13: ffff8d2d915eb000 R14: ffff8d25c499b5c0 R15: ffff8d2e31380e18 FS: 0000000000000000(0000) GS:ffff8d2d1fb00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055fd0484b8b8 CR3: 00000008ffc10006 CR4: 00000000007706e0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: queue_delayed_work_on+0x36/0x40 qedf_elsct_send+0x57/0x60 [qedf] fc_lport_enter_flogi+0x90/0xc0 [libfc] fc_lport_timeout+0xb7/0x140 [libfc] process_one_work+0x1a7/0x360 ? create_worker+0x1a0/0x1a0 worker_thread+0x30/0x390 ? create_worker+0x1a0/0x1a0 kthread+0x116/0x130 ? kthread_flush_work_fn+0x10/0x10 ret_from_fork+0x35/0x40 ---[ end trace 008f00f722f2c2ff ]-- Initialize stag work for all the vports. CVE-2022-48825 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48825.html CVE-2022-48825 https://bugzilla.suse.com/1228056 SUSE Bug 1228056 In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Fix deadlock on DSI device attach error DSI device attach to DSI host will be done with host device's lock held. Un-registering host in "device attach" error path (ex: probe retry) will result in deadlock with below call trace and non operational DSI display. Startup Call trace: [ 35.043036] rt_mutex_slowlock.constprop.21+0x184/0x1b8 [ 35.043048] mutex_lock_nested+0x7c/0xc8 [ 35.043060] device_del+0x4c/0x3e8 [ 35.043075] device_unregister+0x20/0x40 [ 35.043082] mipi_dsi_remove_device_fn+0x18/0x28 [ 35.043093] device_for_each_child+0x68/0xb0 [ 35.043105] mipi_dsi_host_unregister+0x40/0x90 [ 35.043115] vc4_dsi_host_attach+0xf0/0x120 [vc4] [ 35.043199] mipi_dsi_attach+0x30/0x48 [ 35.043209] tc358762_probe+0x128/0x164 [tc358762] [ 35.043225] mipi_dsi_drv_probe+0x28/0x38 [ 35.043234] really_probe+0xc0/0x318 [ 35.043244] __driver_probe_device+0x80/0xe8 [ 35.043254] driver_probe_device+0xb8/0x118 [ 35.043263] __device_attach_driver+0x98/0xe8 [ 35.043273] bus_for_each_drv+0x84/0xd8 [ 35.043281] __device_attach+0xf0/0x150 [ 35.043290] device_initial_probe+0x1c/0x28 [ 35.043300] bus_probe_device+0xa4/0xb0 [ 35.043308] deferred_probe_work_func+0xa0/0xe0 [ 35.043318] process_one_work+0x254/0x700 [ 35.043330] worker_thread+0x4c/0x448 [ 35.043339] kthread+0x19c/0x1a8 [ 35.043348] ret_from_fork+0x10/0x20 Shutdown Call trace: [ 365.565417] Call trace: [ 365.565423] __switch_to+0x148/0x200 [ 365.565452] __schedule+0x340/0x9c8 [ 365.565467] schedule+0x48/0x110 [ 365.565479] schedule_timeout+0x3b0/0x448 [ 365.565496] wait_for_completion+0xac/0x138 [ 365.565509] __flush_work+0x218/0x4e0 [ 365.565523] flush_work+0x1c/0x28 [ 365.565536] wait_for_device_probe+0x68/0x158 [ 365.565550] device_shutdown+0x24/0x348 [ 365.565561] kernel_restart_prepare+0x40/0x50 [ 365.565578] kernel_restart+0x20/0x70 [ 365.565591] __do_sys_reboot+0x10c/0x220 [ 365.565605] __arm64_sys_reboot+0x2c/0x38 [ 365.565619] invoke_syscall+0x4c/0x110 [ 365.565634] el0_svc_common.constprop.3+0xfc/0x120 [ 365.565648] do_el0_svc+0x2c/0x90 [ 365.565661] el0_svc+0x4c/0xf0 [ 365.565671] el0t_64_sync_handler+0x90/0xb8 [ 365.565682] el0t_64_sync+0x180/0x184 CVE-2022-48826 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48826.html CVE-2022-48826 https://bugzilla.suse.com/1227975 SUSE Bug 1227975 In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix the behavior of READ near OFFSET_MAX Dan Aloni reports: > Due to commit 8cfb9015280d ("NFS: Always provide aligned buffers to > the RPC read layers") on the client, a read of 0xfff is aligned up > to server rsize of 0x1000. > > As a result, in a test where the server has a file of size > 0x7fffffffffffffff, and the client tries to read from the offset > 0x7ffffffffffff000, the read causes loff_t overflow in the server > and it returns an NFS code of EINVAL to the client. The client as > a result indefinitely retries the request. The Linux NFS client does not handle NFS?ERR_INVAL, even though all NFS specifications permit servers to return that status code for a READ. Instead of NFS?ERR_INVAL, have out-of-range READ requests succeed and return a short result. Set the EOF flag in the result to prevent the client from retrying the READ request. This behavior appears to be consistent with Solaris NFS servers. Note that NFSv3 and NFSv4 use u64 offset values on the wire. These must be converted to loff_t internally before use -- an implicit type cast is not adequate for this purpose. Otherwise VFS checks against sb->s_maxbytes do not work properly. CVE-2022-48827 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48827.html CVE-2022-48827 https://bugzilla.suse.com/1228037 SUSE Bug 1228037 In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix ia_size underflow iattr::ia_size is a loff_t, which is a signed 64-bit type. NFSv3 and NFSv4 both define file size as an unsigned 64-bit type. Thus there is a range of valid file size values an NFS client can send that is already larger than Linux can handle. Currently decode_fattr4() dumps a full u64 value into ia_size. If that value happens to be larger than S64_MAX, then ia_size underflows. I'm about to fix up the NFSv3 behavior as well, so let's catch the underflow in the common code path: nfsd_setattr(). CVE-2022-48828 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48828.html CVE-2022-48828 https://bugzilla.suse.com/1228054 SUSE Bug 1228054 In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes iattr::ia_size is a loff_t, so these NFSv3 procedures must be careful to deal with incoming client size values that are larger than s64_max without corrupting the value. Silently capping the value results in storing a different value than the client passed in which is unexpected behavior, so remove the min_t() check in decode_sattr3(). Note that RFC 1813 permits only the WRITE procedure to return NFS3ERR_FBIG. We believe that NFSv3 reference implementations also return NFS3ERR_FBIG when ia_size is too large. CVE-2022-48829 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48829.html CVE-2022-48829 https://bugzilla.suse.com/1228055 SUSE Bug 1228055 In the Linux kernel, the following vulnerability has been resolved: can: isotp: fix potential CAN frame reception race in isotp_rcv() When receiving a CAN frame the current code logic does not consider concurrently receiving processes which do not show up in real world usage. Ziyang Xuan writes: The following syz problem is one of the scenarios. so->rx.len is changed by isotp_rcv_ff() during isotp_rcv_cf(), so->rx.len equals 0 before alloc_skb() and equals 4096 after alloc_skb(). That will trigger skb_over_panic() in skb_put(). ======================================================= CPU: 1 PID: 19 Comm: ksoftirqd/1 Not tainted 5.16.0-rc8-syzkaller #0 RIP: 0010:skb_panic+0x16c/0x16e net/core/skbuff.c:113 Call Trace: <TASK> skb_over_panic net/core/skbuff.c:118 [inline] skb_put.cold+0x24/0x24 net/core/skbuff.c:1990 isotp_rcv_cf net/can/isotp.c:570 [inline] isotp_rcv+0xa38/0x1e30 net/can/isotp.c:668 deliver net/can/af_can.c:574 [inline] can_rcv_filter+0x445/0x8d0 net/can/af_can.c:635 can_receive+0x31d/0x580 net/can/af_can.c:665 can_rcv+0x120/0x1c0 net/can/af_can.c:696 __netif_receive_skb_one_core+0x114/0x180 net/core/dev.c:5465 __netif_receive_skb+0x24/0x1b0 net/core/dev.c:5579 Therefore we make sure the state changes and data structures stay consistent at CAN frame reception time by adding a spin_lock in isotp_rcv(). This fixes the issue reported by syzkaller but does not affect real world operation. CVE-2022-48830 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48830.html CVE-2022-48830 https://bugzilla.suse.com/1227982 SUSE Bug 1227982 In the Linux kernel, the following vulnerability has been resolved: ima: fix reference leak in asymmetric_verify() Don't leak a reference to the key if its algorithm is unknown. CVE-2022-48831 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48831.html CVE-2022-48831 https://bugzilla.suse.com/1227986 SUSE Bug 1227986 In the Linux kernel, the following vulnerability has been resolved: usb: usbtmc: Fix bug in pipe direction for control transfers The syzbot fuzzer reported a minor bug in the usbtmc driver: usb 5-1: BOGUS control dir, pipe 80001e80 doesn't match bRequestType 0 WARNING: CPU: 0 PID: 3813 at drivers/usb/core/urb.c:412 usb_submit_urb+0x13a5/0x1970 drivers/usb/core/urb.c:410 Modules linked in: CPU: 0 PID: 3813 Comm: syz-executor122 Not tainted 5.17.0-rc5-syzkaller-00306-g2293be58d6a1 #0 ... Call Trace: <TASK> usb_start_wait_urb+0x113/0x530 drivers/usb/core/message.c:58 usb_internal_control_msg drivers/usb/core/message.c:102 [inline] usb_control_msg+0x2a5/0x4b0 drivers/usb/core/message.c:153 usbtmc_ioctl_request drivers/usb/class/usbtmc.c:1947 [inline] The problem is that usbtmc_ioctl_request() uses usb_rcvctrlpipe() for all of its transfers, whether they are in or out. It's easy to fix. CVE-2022-48834 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48834.html CVE-2022-48834 https://bugzilla.suse.com/1228062 SUSE Bug 1228062 In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Page fault in reply q processing A page fault was encountered in mpt3sas on a LUN reset error path: [ 145.763216] mpt3sas_cm1: Task abort tm failed: handle(0x0002),timeout(30) tr_method(0x0) smid(3) msix_index(0) [ 145.778932] scsi 1:0:0:0: task abort: FAILED scmd(0x0000000024ba29a2) [ 145.817307] scsi 1:0:0:0: attempting device reset! scmd(0x0000000024ba29a2) [ 145.827253] scsi 1:0:0:0: [sg1] tag#2 CDB: Receive Diagnostic 1c 01 01 ff fc 00 [ 145.837617] scsi target1:0:0: handle(0x0002), sas_address(0x500605b0000272b9), phy(0) [ 145.848598] scsi target1:0:0: enclosure logical id(0x500605b0000272b8), slot(0) [ 149.858378] mpt3sas_cm1: Poll ReplyDescriptor queues for completion of smid(0), task_type(0x05), handle(0x0002) [ 149.875202] BUG: unable to handle page fault for address: 00000007fffc445d [ 149.885617] #PF: supervisor read access in kernel mode [ 149.894346] #PF: error_code(0x0000) - not-present page [ 149.903123] PGD 0 P4D 0 [ 149.909387] Oops: 0000 [#1] PREEMPT SMP NOPTI [ 149.917417] CPU: 24 PID: 3512 Comm: scsi_eh_1 Kdump: loaded Tainted: G S O 5.10.89-altav-1 #1 [ 149.934327] Hardware name: DDN 200NVX2 /200NVX2-MB , BIOS ATHG2.2.02.01 09/10/2021 [ 149.951871] RIP: 0010:_base_process_reply_queue+0x4b/0x900 [mpt3sas] [ 149.961889] Code: 0f 84 22 02 00 00 8d 48 01 49 89 fd 48 8d 57 38 f0 0f b1 4f 38 0f 85 d8 01 00 00 49 8b 45 10 45 31 e4 41 8b 55 0c 48 8d 1c d0 <0f> b6 03 83 e0 0f 3c 0f 0f 85 a2 00 00 00 e9 e6 01 00 00 0f b7 ee [ 149.991952] RSP: 0018:ffffc9000f1ebcb8 EFLAGS: 00010246 [ 150.000937] RAX: 0000000000000055 RBX: 00000007fffc445d RCX: 000000002548f071 [ 150.011841] RDX: 00000000ffff8881 RSI: 0000000000000001 RDI: ffff888125ed50d8 [ 150.022670] RBP: 0000000000000000 R08: 0000000000000000 R09: c0000000ffff7fff [ 150.033445] R10: ffffc9000f1ebb68 R11: ffffc9000f1ebb60 R12: 0000000000000000 [ 150.044204] R13: ffff888125ed50d8 R14: 0000000000000080 R15: 34cdc00034cdea80 [ 150.054963] FS: 0000000000000000(0000) GS:ffff88dfaf200000(0000) knlGS:0000000000000000 [ 150.066715] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.076078] CR2: 00000007fffc445d CR3: 000000012448a006 CR4: 0000000000770ee0 [ 150.086887] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 150.097670] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 150.108323] PKRU: 55555554 [ 150.114690] Call Trace: [ 150.120497] ? printk+0x48/0x4a [ 150.127049] mpt3sas_scsih_issue_tm.cold.114+0x2e/0x2b3 [mpt3sas] [ 150.136453] mpt3sas_scsih_issue_locked_tm+0x86/0xb0 [mpt3sas] [ 150.145759] scsih_dev_reset+0xea/0x300 [mpt3sas] [ 150.153891] scsi_eh_ready_devs+0x541/0x9e0 [scsi_mod] [ 150.162206] ? __scsi_host_match+0x20/0x20 [scsi_mod] [ 150.170406] ? scsi_try_target_reset+0x90/0x90 [scsi_mod] [ 150.178925] ? blk_mq_tagset_busy_iter+0x45/0x60 [ 150.186638] ? scsi_try_target_reset+0x90/0x90 [scsi_mod] [ 150.195087] scsi_error_handler+0x3a5/0x4a0 [scsi_mod] [ 150.203206] ? __schedule+0x1e9/0x610 [ 150.209783] ? scsi_eh_get_sense+0x210/0x210 [scsi_mod] [ 150.217924] kthread+0x12e/0x150 [ 150.224041] ? kthread_worker_fn+0x130/0x130 [ 150.231206] ret_from_fork+0x1f/0x30 This is caused by mpt3sas_base_sync_reply_irqs() using an invalid reply_q pointer outside of the list_for_each_entry() loop. At the end of the full list traversal the pointer is invalid. Move the _base_process_reply_queue() call inside of the loop. CVE-2022-48835 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48835.html CVE-2022-48835 https://bugzilla.suse.com/1228060 SUSE Bug 1228060 In the Linux kernel, the following vulnerability has been resolved: Input: aiptek - properly check endpoint type Syzbot reported warning in usb_submit_urb() which is caused by wrong endpoint type. There was a check for the number of endpoints, but not for the type of endpoint. Fix it by replacing old desc.bNumEndpoints check with usb_find_common_endpoints() helper for finding endpoints Fail log: usb 5-1: BOGUS urb xfer, pipe 1 != type 3 WARNING: CPU: 2 PID: 48 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0 drivers/usb/core/urb.c:502 Modules linked in: CPU: 2 PID: 48 Comm: kworker/2:2 Not tainted 5.17.0-rc6-syzkaller-00226-g07ebd38a0da2 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 Workqueue: usb_hub_wq hub_event ... Call Trace: <TASK> aiptek_open+0xd5/0x130 drivers/input/tablet/aiptek.c:830 input_open_device+0x1bb/0x320 drivers/input/input.c:629 kbd_connect+0xfe/0x160 drivers/tty/vt/keyboard.c:1593 CVE-2022-48836 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48836.html CVE-2022-48836 https://bugzilla.suse.com/1227989 SUSE Bug 1227989 In the Linux kernel, the following vulnerability has been resolved: usb: gadget: rndis: prevent integer overflow in rndis_set_response() If "BufOffset" is very large the "BufOffset + 8" operation can have an integer overflow. CVE-2022-48837 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48837.html CVE-2022-48837 https://bugzilla.suse.com/1227987 SUSE Bug 1227987 In the Linux kernel, the following vulnerability has been resolved: usb: gadget: Fix use-after-free bug by not setting udc->dev.driver The syzbot fuzzer found a use-after-free bug: BUG: KASAN: use-after-free in dev_uevent+0x712/0x780 drivers/base/core.c:2320 Read of size 8 at addr ffff88802b934098 by task udevd/3689 CPU: 2 PID: 3689 Comm: udevd Not tainted 5.17.0-rc4-syzkaller-00229-g4f12b742eb2b #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 print_address_description.constprop.0.cold+0x8d/0x303 mm/kasan/report.c:255 __kasan_report mm/kasan/report.c:442 [inline] kasan_report.cold+0x83/0xdf mm/kasan/report.c:459 dev_uevent+0x712/0x780 drivers/base/core.c:2320 uevent_show+0x1b8/0x380 drivers/base/core.c:2391 dev_attr_show+0x4b/0x90 drivers/base/core.c:2094 Although the bug manifested in the driver core, the real cause was a race with the gadget core. dev_uevent() does: if (dev->driver) add_uevent_var(env, "DRIVER=%s", dev->driver->name); and between the test and the dereference of dev->driver, the gadget core sets dev->driver to NULL. The race wouldn't occur if the gadget core registered its devices on a real bus, using the standard synchronization techniques of the driver core. However, it's not necessary to make such a large change in order to fix this bug; all we need to do is make sure that udc->dev.driver is always NULL. In fact, there is no reason for udc->dev.driver ever to be set to anything, let alone to the value it currently gets: the address of the gadget's driver. After all, a gadget driver only knows how to manage a gadget, not how to manage a UDC. This patch simply removes the statements in the gadget core that touch udc->dev.driver. CVE-2022-48838 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48838.html CVE-2022-48838 https://bugzilla.suse.com/1227988 SUSE Bug 1227988 In the Linux kernel, the following vulnerability has been resolved: net/packet: fix slab-out-of-bounds access in packet_recvmsg() syzbot found that when an AF_PACKET socket is using PACKET_COPY_THRESH and mmap operations, tpacket_rcv() is queueing skbs with garbage in skb->cb[], triggering a too big copy [1] Presumably, users of af_packet using mmap() already gets correct metadata from the mapped buffer, we can simply make sure to clear 12 bytes that might be copied to user space later. BUG: KASAN: stack-out-of-bounds in memcpy include/linux/fortify-string.h:225 [inline] BUG: KASAN: stack-out-of-bounds in packet_recvmsg+0x56c/0x1150 net/packet/af_packet.c:3489 Write of size 165 at addr ffffc9000385fb78 by task syz-executor233/3631 CPU: 0 PID: 3631 Comm: syz-executor233 Not tainted 5.17.0-rc7-syzkaller-02396-g0b3660695e80 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 print_address_description.constprop.0.cold+0xf/0x336 mm/kasan/report.c:255 __kasan_report mm/kasan/report.c:442 [inline] kasan_report.cold+0x83/0xdf mm/kasan/report.c:459 check_region_inline mm/kasan/generic.c:183 [inline] kasan_check_range+0x13d/0x180 mm/kasan/generic.c:189 memcpy+0x39/0x60 mm/kasan/shadow.c:66 memcpy include/linux/fortify-string.h:225 [inline] packet_recvmsg+0x56c/0x1150 net/packet/af_packet.c:3489 sock_recvmsg_nosec net/socket.c:948 [inline] sock_recvmsg net/socket.c:966 [inline] sock_recvmsg net/socket.c:962 [inline] ____sys_recvmsg+0x2c4/0x600 net/socket.c:2632 ___sys_recvmsg+0x127/0x200 net/socket.c:2674 __sys_recvmsg+0xe2/0x1a0 net/socket.c:2704 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x44/0xae RIP: 0033:0x7fdfd5954c29 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 41 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007ffcf8e71e48 EFLAGS: 00000246 ORIG_RAX: 000000000000002f RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fdfd5954c29 RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000005 RBP: 0000000000000000 R08: 000000000000000d R09: 000000000000000d R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf8e71e60 R13: 00000000000f4240 R14: 000000000000c1ff R15: 00007ffcf8e71e54 </TASK> addr ffffc9000385fb78 is located in stack of task syz-executor233/3631 at offset 32 in frame: ____sys_recvmsg+0x0/0x600 include/linux/uio.h:246 this frame has 1 object: [32, 160) 'addr' Memory state around the buggy address: ffffc9000385fa80: 00 04 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00 00 ffffc9000385fb00: 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 >ffffc9000385fb80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f3 ^ ffffc9000385fc00: f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00 f1 ffffc9000385fc80: f1 f1 f1 00 f2 f2 f2 00 f2 f2 f2 00 00 00 00 00 ================================================================== CVE-2022-48839 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48839.html CVE-2022-48839 https://bugzilla.suse.com/1227985 SUSE Bug 1227985 In the Linux kernel, the following vulnerability has been resolved: iavf: Fix hang during reboot/shutdown Recent commit 974578017fc1 ("iavf: Add waiting so the port is initialized in remove") adds a wait-loop at the beginning of iavf_remove() to ensure that port initialization is finished prior unregistering net device. This causes a regression in reboot/shutdown scenario because in this case callback iavf_shutdown() is called and this callback detaches the device, makes it down if it is running and sets its state to __IAVF_REMOVE. Later shutdown callback of associated PF driver (e.g. ice_shutdown) is called. That callback calls among other things sriov_disable() that calls indirectly iavf_remove() (see stack trace below). As the adapter state is already __IAVF_REMOVE then the mentioned loop is end-less and shutdown process hangs. The patch fixes this by checking adapter's state at the beginning of iavf_remove() and skips the rest of the function if the adapter is already in remove state (shutdown is in progress). Reproducer: 1. Create VF on PF driven by ice or i40e driver 2. Ensure that the VF is bound to iavf driver 3. Reboot [52625.981294] sysrq: SysRq : Show Blocked State [52625.988377] task:reboot state:D stack: 0 pid:17359 ppid: 1 f2 [52625.996732] Call Trace: [52625.999187] __schedule+0x2d1/0x830 [52626.007400] schedule+0x35/0xa0 [52626.010545] schedule_hrtimeout_range_clock+0x83/0x100 [52626.020046] usleep_range+0x5b/0x80 [52626.023540] iavf_remove+0x63/0x5b0 [iavf] [52626.027645] pci_device_remove+0x3b/0xc0 [52626.031572] device_release_driver_internal+0x103/0x1f0 [52626.036805] pci_stop_bus_device+0x72/0xa0 [52626.040904] pci_stop_and_remove_bus_device+0xe/0x20 [52626.045870] pci_iov_remove_virtfn+0xba/0x120 [52626.050232] sriov_disable+0x2f/0xe0 [52626.053813] ice_free_vfs+0x7c/0x340 [ice] [52626.057946] ice_remove+0x220/0x240 [ice] [52626.061967] ice_shutdown+0x16/0x50 [ice] [52626.065987] pci_device_shutdown+0x34/0x60 [52626.070086] device_shutdown+0x165/0x1c5 [52626.074011] kernel_restart+0xe/0x30 [52626.077593] __do_sys_reboot+0x1d2/0x210 [52626.093815] do_syscall_64+0x5b/0x1a0 [52626.097483] entry_SYSCALL_64_after_hwframe+0x65/0xca CVE-2022-48840 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48840.html CVE-2022-48840 https://bugzilla.suse.com/1227990 SUSE Bug 1227990 In the Linux kernel, the following vulnerability has been resolved: ice: fix NULL pointer dereference in ice_update_vsi_tx_ring_stats() It is possible to do NULL pointer dereference in routine that updates Tx ring stats. Currently only stats and bytes are updated when ring pointer is valid, but later on ring is accessed to propagate gathered Tx stats onto VSI stats. Change the existing logic to move to next ring when ring is NULL. CVE-2022-48841 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48841.html CVE-2022-48841 https://bugzilla.suse.com/1227991 SUSE Bug 1227991 In the Linux kernel, the following vulnerability has been resolved: ice: Fix race condition during interface enslave Commit 5dbbbd01cbba83 ("ice: Avoid RTNL lock when re-creating auxiliary device") changes a process of re-creation of aux device so ice_plug_aux_dev() is called from ice_service_task() context. This unfortunately opens a race window that can result in dead-lock when interface has left LAG and immediately enters LAG again. Reproducer: ``` #!/bin/sh ip link add lag0 type bond mode 1 miimon 100 ip link set lag0 for n in {1..10}; do echo Cycle: $n ip link set ens7f0 master lag0 sleep 1 ip link set ens7f0 nomaster done ``` This results in: [20976.208697] Workqueue: ice ice_service_task [ice] [20976.213422] Call Trace: [20976.215871] __schedule+0x2d1/0x830 [20976.219364] schedule+0x35/0xa0 [20976.222510] schedule_preempt_disabled+0xa/0x10 [20976.227043] __mutex_lock.isra.7+0x310/0x420 [20976.235071] enum_all_gids_of_dev_cb+0x1c/0x100 [ib_core] [20976.251215] ib_enum_roce_netdev+0xa4/0xe0 [ib_core] [20976.256192] ib_cache_setup_one+0x33/0xa0 [ib_core] [20976.261079] ib_register_device+0x40d/0x580 [ib_core] [20976.266139] irdma_ib_register_device+0x129/0x250 [irdma] [20976.281409] irdma_probe+0x2c1/0x360 [irdma] [20976.285691] auxiliary_bus_probe+0x45/0x70 [20976.289790] really_probe+0x1f2/0x480 [20976.298509] driver_probe_device+0x49/0xc0 [20976.302609] bus_for_each_drv+0x79/0xc0 [20976.306448] __device_attach+0xdc/0x160 [20976.310286] bus_probe_device+0x9d/0xb0 [20976.314128] device_add+0x43c/0x890 [20976.321287] __auxiliary_device_add+0x43/0x60 [20976.325644] ice_plug_aux_dev+0xb2/0x100 [ice] [20976.330109] ice_service_task+0xd0c/0xed0 [ice] [20976.342591] process_one_work+0x1a7/0x360 [20976.350536] worker_thread+0x30/0x390 [20976.358128] kthread+0x10a/0x120 [20976.365547] ret_from_fork+0x1f/0x40 ... [20976.438030] task:ip state:D stack: 0 pid:213658 ppid:213627 flags:0x00004084 [20976.446469] Call Trace: [20976.448921] __schedule+0x2d1/0x830 [20976.452414] schedule+0x35/0xa0 [20976.455559] schedule_preempt_disabled+0xa/0x10 [20976.460090] __mutex_lock.isra.7+0x310/0x420 [20976.464364] device_del+0x36/0x3c0 [20976.467772] ice_unplug_aux_dev+0x1a/0x40 [ice] [20976.472313] ice_lag_event_handler+0x2a2/0x520 [ice] [20976.477288] notifier_call_chain+0x47/0x70 [20976.481386] __netdev_upper_dev_link+0x18b/0x280 [20976.489845] bond_enslave+0xe05/0x1790 [bonding] [20976.494475] do_setlink+0x336/0xf50 [20976.502517] __rtnl_newlink+0x529/0x8b0 [20976.543441] rtnl_newlink+0x43/0x60 [20976.546934] rtnetlink_rcv_msg+0x2b1/0x360 [20976.559238] netlink_rcv_skb+0x4c/0x120 [20976.563079] netlink_unicast+0x196/0x230 [20976.567005] netlink_sendmsg+0x204/0x3d0 [20976.570930] sock_sendmsg+0x4c/0x50 [20976.574423] ____sys_sendmsg+0x1eb/0x250 [20976.586807] ___sys_sendmsg+0x7c/0xc0 [20976.606353] __sys_sendmsg+0x57/0xa0 [20976.609930] do_syscall_64+0x5b/0x1a0 [20976.613598] entry_SYSCALL_64_after_hwframe+0x65/0xca 1. Command 'ip link ... set nomaster' causes that ice_plug_aux_dev() is called from ice_service_task() context, aux device is created and associated device->lock is taken. 2. Command 'ip link ... set master...' calls ice's notifier under RTNL lock and that notifier calls ice_unplug_aux_dev(). That function tries to take aux device->lock but this is already taken by ice_plug_aux_dev() in step 1 3. Later ice_plug_aux_dev() tries to take RTNL lock but this is already taken in step 2 4. Dead-lock The patch fixes this issue by following changes: - Bit ICE_FLAG_PLUG_AUX_DEV is kept to be set during ice_plug_aux_dev() call in ice_service_task() - The bit is checked in ice_clear_rdma_cap() and only if it is not set then ice_unplug_aux_dev() is called. If it is set (in other words plugging of aux device was requested and ice_plug_aux_dev() is potentially running) then the function only clears the ---truncated--- CVE-2022-48842 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48842.html CVE-2022-48842 https://bugzilla.suse.com/1228064 SUSE Bug 1228064 In the Linux kernel, the following vulnerability has been resolved: drm/vrr: Set VRR capable prop only if it is attached to connector VRR capable property is not attached by default to the connector It is attached only if VRR is supported. So if the driver tries to call drm core set prop function without it being attached that causes NULL dereference. CVE-2022-48843 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48843.html CVE-2022-48843 https://bugzilla.suse.com/1228066 SUSE Bug 1228066 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix leaking sent_cmd skb sent_cmd memory is not freed before freeing hci_dev causing it to leak it contents. CVE-2022-48844 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48844.html CVE-2022-48844 https://bugzilla.suse.com/1228068 SUSE Bug 1228068 In the Linux kernel, the following vulnerability has been resolved: block: release rq qos structures for queue without disk blkcg_init_queue() may add rq qos structures to request queue, previously blk_cleanup_queue() calls rq_qos_exit() to release them, but commit 8e141f9eb803 ("block: drain file system I/O on del_gendisk") moves rq_qos_exit() into del_gendisk(), so memory leak is caused because queues may not have disk, such as un-present scsi luns, nvme admin queue, ... Fixes the issue by adding rq_qos_exit() to blk_cleanup_queue() back. BTW, v5.18 won't need this patch any more since we move blkcg_init_queue()/blkcg_exit_queue() into disk allocation/release handler, and patches have been in for-5.18/block. CVE-2022-48846 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48846.html CVE-2022-48846 https://bugzilla.suse.com/1227992 SUSE Bug 1227992 In the Linux kernel, the following vulnerability has been resolved: watch_queue: Fix filter limit check In watch_queue_set_filter(), there are a couple of places where we check that the filter type value does not exceed what the type_filter bitmap can hold. One place calculates the number of bits by: if (tf[i].type >= sizeof(wfilter->type_filter) * 8) which is fine, but the second does: if (tf[i].type >= sizeof(wfilter->type_filter) * BITS_PER_LONG) which is not. This can lead to a couple of out-of-bounds writes due to a too-large type: (1) __set_bit() on wfilter->type_filter (2) Writing more elements in wfilter->filters[] than we allocated. Fix this by just using the proper WATCH_TYPE__NR instead, which is the number of types we actually know about. The bug may cause an oops looking something like: BUG: KASAN: slab-out-of-bounds in watch_queue_set_filter+0x659/0x740 Write of size 4 at addr ffff88800d2c66bc by task watch_queue_oob/611 ... Call Trace: <TASK> dump_stack_lvl+0x45/0x59 print_address_description.constprop.0+0x1f/0x150 ... kasan_report.cold+0x7f/0x11b ... watch_queue_set_filter+0x659/0x740 ... __x64_sys_ioctl+0x127/0x190 do_syscall_64+0x43/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae Allocated by task 611: kasan_save_stack+0x1e/0x40 __kasan_kmalloc+0x81/0xa0 watch_queue_set_filter+0x23a/0x740 __x64_sys_ioctl+0x127/0x190 do_syscall_64+0x43/0x90 entry_SYSCALL_64_after_hwframe+0x44/0xae The buggy address belongs to the object at ffff88800d2c66a0 which belongs to the cache kmalloc-32 of size 32 The buggy address is located 28 bytes inside of 32-byte region [ffff88800d2c66a0, ffff88800d2c66c0) CVE-2022-48847 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48847.html CVE-2022-48847 https://bugzilla.suse.com/1227993 SUSE Bug 1227993 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: bypass tiling flag check in virtual display case (v2) vkms leverages common amdgpu framebuffer creation, and also as it does not support FB modifier, there is no need to check tiling flags when initing framebuffer when virtual display is enabled. This can fix below calltrace: amdgpu 0000:00:08.0: GFX9+ requires FB check based on format modifier WARNING: CPU: 0 PID: 1023 at drivers/gpu/drm/amd/amdgpu/amdgpu_display.c:1150 amdgpu_display_framebuffer_init+0x8e7/0xb40 [amdgpu] v2: check adev->enable_virtual_display instead as vkms can be enabled in bare metal as well. CVE-2022-48849 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48849.html CVE-2022-48849 https://bugzilla.suse.com/1228061 SUSE Bug 1228061 In the Linux kernel, the following vulnerability has been resolved: net-sysfs: add check for netdevice being present to speed_show When bringing down the netdevice or system shutdown, a panic can be triggered while accessing the sysfs path because the device is already removed. [ 755.549084] mlx5_core 0000:12:00.1: Shutdown was called [ 756.404455] mlx5_core 0000:12:00.0: Shutdown was called ... [ 757.937260] BUG: unable to handle kernel NULL pointer dereference at (null) [ 758.031397] IP: [<ffffffff8ee11acb>] dma_pool_alloc+0x1ab/0x280 crash> bt ... PID: 12649 TASK: ffff8924108f2100 CPU: 1 COMMAND: "amsd" ... #9 [ffff89240e1a38b0] page_fault at ffffffff8f38c778 [exception RIP: dma_pool_alloc+0x1ab] RIP: ffffffff8ee11acb RSP: ffff89240e1a3968 RFLAGS: 00010046 RAX: 0000000000000246 RBX: ffff89243d874100 RCX: 0000000000001000 RDX: 0000000000000000 RSI: 0000000000000246 RDI: ffff89243d874090 RBP: ffff89240e1a39c0 R8: 000000000001f080 R9: ffff8905ffc03c00 R10: ffffffffc04680d4 R11: ffffffff8edde9fd R12: 00000000000080d0 R13: ffff89243d874090 R14: ffff89243d874080 R15: 0000000000000000 ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018 #10 [ffff89240e1a39c8] mlx5_alloc_cmd_msg at ffffffffc04680f3 [mlx5_core] #11 [ffff89240e1a3a18] cmd_exec at ffffffffc046ad62 [mlx5_core] #12 [ffff89240e1a3ab8] mlx5_cmd_exec at ffffffffc046b4fb [mlx5_core] #13 [ffff89240e1a3ae8] mlx5_core_access_reg at ffffffffc0475434 [mlx5_core] #14 [ffff89240e1a3b40] mlx5e_get_fec_caps at ffffffffc04a7348 [mlx5_core] #15 [ffff89240e1a3bb0] get_fec_supported_advertised at ffffffffc04992bf [mlx5_core] #16 [ffff89240e1a3c08] mlx5e_get_link_ksettings at ffffffffc049ab36 [mlx5_core] #17 [ffff89240e1a3ce8] __ethtool_get_link_ksettings at ffffffff8f25db46 #18 [ffff89240e1a3d48] speed_show at ffffffff8f277208 #19 [ffff89240e1a3dd8] dev_attr_show at ffffffff8f0b70e3 #20 [ffff89240e1a3df8] sysfs_kf_seq_show at ffffffff8eedbedf #21 [ffff89240e1a3e18] kernfs_seq_show at ffffffff8eeda596 #22 [ffff89240e1a3e28] seq_read at ffffffff8ee76d10 #23 [ffff89240e1a3e98] kernfs_fop_read at ffffffff8eedaef5 #24 [ffff89240e1a3ed8] vfs_read at ffffffff8ee4e3ff #25 [ffff89240e1a3f08] sys_read at ffffffff8ee4f27f #26 [ffff89240e1a3f50] system_call_fastpath at ffffffff8f395f92 crash> net_device.state ffff89443b0c0000 state = 0x5 (__LINK_STATE_START| __LINK_STATE_NOCARRIER) To prevent this scenario, we also make sure that the netdevice is present. CVE-2022-48850 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48850.html CVE-2022-48850 https://bugzilla.suse.com/1228071 SUSE Bug 1228071 In the Linux kernel, the following vulnerability has been resolved: staging: gdm724x: fix use after free in gdm_lte_rx() The netif_rx_ni() function frees the skb so we can't dereference it to save the skb->len. CVE-2022-48851 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48851.html CVE-2022-48851 https://bugzilla.suse.com/1227997 SUSE Bug 1227997 In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hdmi: Unregister codec device on unbind On bind we will register the HDMI codec device but we don't unregister it on unbind, leading to a device leakage. Unregister our device at unbind. CVE-2022-48852 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48852.html CVE-2022-48852 https://bugzilla.suse.com/1228067 SUSE Bug 1228067 In the Linux kernel, the following vulnerability has been resolved: swiotlb: fix info leak with DMA_FROM_DEVICE The problem I'm addressing was discovered by the LTP test covering cve-2018-1000204. A short description of what happens follows: 1) The test case issues a command code 00 (TEST UNIT READY) via the SG_IO interface with: dxfer_len == 524288, dxdfer_dir == SG_DXFER_FROM_DEV and a corresponding dxferp. The peculiar thing about this is that TUR is not reading from the device. 2) In sg_start_req() the invocation of blk_rq_map_user() effectively bounces the user-space buffer. As if the device was to transfer into it. Since commit a45b599ad808 ("scsi: sg: allocate with __GFP_ZERO in sg_build_indirect()") we make sure this first bounce buffer is allocated with GFP_ZERO. 3) For the rest of the story we keep ignoring that we have a TUR, so the device won't touch the buffer we prepare as if the we had a DMA_FROM_DEVICE type of situation. My setup uses a virtio-scsi device and the buffer allocated by SG is mapped by the function virtqueue_add_split() which uses DMA_FROM_DEVICE for the "in" sgs (here scatter-gather and not scsi generics). This mapping involves bouncing via the swiotlb (we need swiotlb to do virtio in protected guest like s390 Secure Execution, or AMD SEV). 4) When the SCSI TUR is done, we first copy back the content of the second (that is swiotlb) bounce buffer (which most likely contains some previous IO data), to the first bounce buffer, which contains all zeros. Then we copy back the content of the first bounce buffer to the user-space buffer. 5) The test case detects that the buffer, which it zero-initialized, ain't all zeros and fails. One can argue that this is an swiotlb problem, because without swiotlb we leak all zeros, and the swiotlb should be transparent in a sense that it does not affect the outcome (if all other participants are well behaved). Copying the content of the original buffer into the swiotlb buffer is the only way I can think of to make swiotlb transparent in such scenarios. So let's do just that if in doubt, but allow the driver to tell us that the whole mapped buffer is going to be overwritten, in which case we can preserve the old behavior and avoid the performance impact of the extra bounce. CVE-2022-48853 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48853.html CVE-2022-48853 https://bugzilla.suse.com/1228015 SUSE Bug 1228015 In the Linux kernel, the following vulnerability has been resolved: sctp: fix kernel-infoleak for SCTP sockets syzbot reported a kernel infoleak [1] of 4 bytes. After analysis, it turned out r->idiag_expires is not initialized if inet_sctp_diag_fill() calls inet_diag_msg_common_fill() Make sure to clear idiag_timer/idiag_retrans/idiag_expires and let inet_diag_msg_sctpasoc_fill() fill them again if needed. [1] BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:121 [inline] BUG: KMSAN: kernel-infoleak in copyout lib/iov_iter.c:154 [inline] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x6ef/0x25a0 lib/iov_iter.c:668 instrument_copy_to_user include/linux/instrumented.h:121 [inline] copyout lib/iov_iter.c:154 [inline] _copy_to_iter+0x6ef/0x25a0 lib/iov_iter.c:668 copy_to_iter include/linux/uio.h:162 [inline] simple_copy_to_iter+0xf3/0x140 net/core/datagram.c:519 __skb_datagram_iter+0x2d5/0x11b0 net/core/datagram.c:425 skb_copy_datagram_iter+0xdc/0x270 net/core/datagram.c:533 skb_copy_datagram_msg include/linux/skbuff.h:3696 [inline] netlink_recvmsg+0x669/0x1c80 net/netlink/af_netlink.c:1977 sock_recvmsg_nosec net/socket.c:948 [inline] sock_recvmsg net/socket.c:966 [inline] __sys_recvfrom+0x795/0xa10 net/socket.c:2097 __do_sys_recvfrom net/socket.c:2115 [inline] __se_sys_recvfrom net/socket.c:2111 [inline] __x64_sys_recvfrom+0x19d/0x210 net/socket.c:2111 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x44/0xae Uninit was created at: slab_post_alloc_hook mm/slab.h:737 [inline] slab_alloc_node mm/slub.c:3247 [inline] __kmalloc_node_track_caller+0xe0c/0x1510 mm/slub.c:4975 kmalloc_reserve net/core/skbuff.c:354 [inline] __alloc_skb+0x545/0xf90 net/core/skbuff.c:426 alloc_skb include/linux/skbuff.h:1158 [inline] netlink_dump+0x3e5/0x16c0 net/netlink/af_netlink.c:2248 __netlink_dump_start+0xcf8/0xe90 net/netlink/af_netlink.c:2373 netlink_dump_start include/linux/netlink.h:254 [inline] inet_diag_handler_cmd+0x2e7/0x400 net/ipv4/inet_diag.c:1341 sock_diag_rcv_msg+0x24a/0x620 netlink_rcv_skb+0x40c/0x7e0 net/netlink/af_netlink.c:2494 sock_diag_rcv+0x63/0x80 net/core/sock_diag.c:277 netlink_unicast_kernel net/netlink/af_netlink.c:1317 [inline] netlink_unicast+0x1093/0x1360 net/netlink/af_netlink.c:1343 netlink_sendmsg+0x14d9/0x1720 net/netlink/af_netlink.c:1919 sock_sendmsg_nosec net/socket.c:705 [inline] sock_sendmsg net/socket.c:725 [inline] sock_write_iter+0x594/0x690 net/socket.c:1061 do_iter_readv_writev+0xa7f/0xc70 do_iter_write+0x52c/0x1500 fs/read_write.c:851 vfs_writev fs/read_write.c:924 [inline] do_writev+0x645/0xe00 fs/read_write.c:967 __do_sys_writev fs/read_write.c:1040 [inline] __se_sys_writev fs/read_write.c:1037 [inline] __x64_sys_writev+0xe5/0x120 fs/read_write.c:1037 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x44/0xae Bytes 68-71 of 2508 are uninitialized Memory access of size 2508 starts at ffff888114f9b000 Data copied to user address 00007f7fe09ff2e0 CPU: 1 PID: 3478 Comm: syz-executor306 Not tainted 5.17.0-rc4-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 CVE-2022-48855 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48855.html CVE-2022-48855 https://bugzilla.suse.com/1228003 SUSE Bug 1228003 In the Linux kernel, the following vulnerability has been resolved: gianfar: ethtool: Fix refcount leak in gfar_get_ts_info The of_find_compatible_node() function returns a node pointer with refcount incremented, We should use of_node_put() on it when done Add the missing of_node_put() to release the refcount. CVE-2022-48856 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48856.html CVE-2022-48856 https://bugzilla.suse.com/1228004 SUSE Bug 1228004 In the Linux kernel, the following vulnerability has been resolved: NFC: port100: fix use-after-free in port100_send_complete Syzbot reported UAF in port100_send_complete(). The root case is in missing usb_kill_urb() calls on error handling path of ->probe function. port100_send_complete() accesses devm allocated memory which will be freed on probe failure. We should kill this urbs before returning an error from probe function to prevent reported use-after-free Fail log: BUG: KASAN: use-after-free in port100_send_complete+0x16e/0x1a0 drivers/nfc/port100.c:935 Read of size 1 at addr ffff88801bb59540 by task ksoftirqd/2/26 ... Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106 print_address_description.constprop.0.cold+0x8d/0x303 mm/kasan/report.c:255 __kasan_report mm/kasan/report.c:442 [inline] kasan_report.cold+0x83/0xdf mm/kasan/report.c:459 port100_send_complete+0x16e/0x1a0 drivers/nfc/port100.c:935 __usb_hcd_giveback_urb+0x2b0/0x5c0 drivers/usb/core/hcd.c:1670 ... Allocated by task 1255: kasan_save_stack+0x1e/0x40 mm/kasan/common.c:38 kasan_set_track mm/kasan/common.c:45 [inline] set_alloc_info mm/kasan/common.c:436 [inline] ____kasan_kmalloc mm/kasan/common.c:515 [inline] ____kasan_kmalloc mm/kasan/common.c:474 [inline] __kasan_kmalloc+0xa6/0xd0 mm/kasan/common.c:524 alloc_dr drivers/base/devres.c:116 [inline] devm_kmalloc+0x96/0x1d0 drivers/base/devres.c:823 devm_kzalloc include/linux/device.h:209 [inline] port100_probe+0x8a/0x1320 drivers/nfc/port100.c:1502 Freed by task 1255: kasan_save_stack+0x1e/0x40 mm/kasan/common.c:38 kasan_set_track+0x21/0x30 mm/kasan/common.c:45 kasan_set_free_info+0x20/0x30 mm/kasan/generic.c:370 ____kasan_slab_free mm/kasan/common.c:366 [inline] ____kasan_slab_free+0xff/0x140 mm/kasan/common.c:328 kasan_slab_free include/linux/kasan.h:236 [inline] __cache_free mm/slab.c:3437 [inline] kfree+0xf8/0x2b0 mm/slab.c:3794 release_nodes+0x112/0x1a0 drivers/base/devres.c:501 devres_release_all+0x114/0x190 drivers/base/devres.c:530 really_probe+0x626/0xcc0 drivers/base/dd.c:670 CVE-2022-48857 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48857.html CVE-2022-48857 https://bugzilla.suse.com/1228005 SUSE Bug 1228005 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix a race on command flush flow Fix a refcount use after free warning due to a race on command entry. Such race occurs when one of the commands releases its last refcount and frees its index and entry while another process running command flush flow takes refcount to this command entry. The process which handles commands flush may see this command as needed to be flushed if the other process released its refcount but didn't release the index yet. Fix it by adding the needed spin lock. It fixes the following warning trace: refcount_t: addition on 0; use-after-free. WARNING: CPU: 11 PID: 540311 at lib/refcount.c:25 refcount_warn_saturate+0x80/0xe0 ... RIP: 0010:refcount_warn_saturate+0x80/0xe0 ... Call Trace: <TASK> mlx5_cmd_trigger_completions+0x293/0x340 [mlx5_core] mlx5_cmd_flush+0x3a/0xf0 [mlx5_core] enter_error_state+0x44/0x80 [mlx5_core] mlx5_fw_fatal_reporter_err_work+0x37/0xe0 [mlx5_core] process_one_work+0x1be/0x390 worker_thread+0x4d/0x3d0 ? rescuer_thread+0x350/0x350 kthread+0x141/0x160 ? set_kthread_struct+0x40/0x40 ret_from_fork+0x1f/0x30 </TASK> CVE-2022-48858 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48858.html CVE-2022-48858 https://bugzilla.suse.com/1228006 SUSE Bug 1228006 In the Linux kernel, the following vulnerability has been resolved: net: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr This node pointer is returned by of_find_compatible_node() with refcount incremented. Calling of_node_put() to aovid the refcount leak. CVE-2022-48859 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48859.html CVE-2022-48859 https://bugzilla.suse.com/1228007 SUSE Bug 1228007 In the Linux kernel, the following vulnerability has been resolved: ethernet: Fix error handling in xemaclite_of_probe This node pointer is returned by of_parse_phandle() with refcount incremented in this function. Calling of_node_put() to avoid the refcount leak. As the remove function do. CVE-2022-48860 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48860.html CVE-2022-48860 https://bugzilla.suse.com/1228008 SUSE Bug 1228008 In the Linux kernel, the following vulnerability has been resolved: vdpa: fix use-after-free on vp_vdpa_remove When vp_vdpa driver is unbind, vp_vdpa is freed in vdpa_unregister_device and then vp_vdpa->mdev.pci_dev is dereferenced in vp_modern_remove, triggering use-after-free. Call Trace of unbinding driver free vp_vdpa : do_syscall_64 vfs_write kernfs_fop_write_iter device_release_driver_internal pci_device_remove vp_vdpa_remove vdpa_unregister_device kobject_release device_release kfree Call Trace of dereference vp_vdpa->mdev.pci_dev: vp_modern_remove pci_release_selected_regions pci_release_region pci_resource_len pci_resource_end (dev)->resource[(bar)].end CVE-2022-48861 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48861.html CVE-2022-48861 https://bugzilla.suse.com/1228009 SUSE Bug 1228009 In the Linux kernel, the following vulnerability has been resolved: vhost: fix hung thread due to erroneous iotlb entries In vhost_iotlb_add_range_ctx(), range size can overflow to 0 when start is 0 and last is ULONG_MAX. One instance where it can happen is when userspace sends an IOTLB message with iova=size=uaddr=0 (vhost_process_iotlb_msg). So, an entry with size = 0, start = 0, last = ULONG_MAX ends up in the iotlb. Next time a packet is sent, iotlb_access_ok() loops indefinitely due to that erroneous entry. Call Trace: <TASK> iotlb_access_ok+0x21b/0x3e0 drivers/vhost/vhost.c:1340 vq_meta_prefetch+0xbc/0x280 drivers/vhost/vhost.c:1366 vhost_transport_do_send_pkt+0xe0/0xfd0 drivers/vhost/vsock.c:104 vhost_worker+0x23d/0x3d0 drivers/vhost/vhost.c:372 kthread+0x2e9/0x3a0 kernel/kthread.c:377 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295 </TASK> Reported by syzbot at: https://syzkaller.appspot.com/bug?extid=0abd373e2e50d704db87 To fix this, do two things: 1. Return -EINVAL in vhost_chr_write_iter() when userspace asks to map a range with size 0. 2. Fix vhost_iotlb_add_range_ctx() to handle the range [0, ULONG_MAX] by splitting it into two entries. CVE-2022-48862 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48862.html CVE-2022-48862 https://bugzilla.suse.com/1228010 SUSE Bug 1228010 In the Linux kernel, the following vulnerability has been resolved: mISDN: Fix memory leak in dsp_pipeline_build() dsp_pipeline_build() allocates dup pointer by kstrdup(cfg), but then it updates dup variable by strsep(&dup, "|"). As a result when it calls kfree(dup), the dup variable contains NULL. Found by Linux Driver Verification project (linuxtesting.org) with SVACE. CVE-2022-48863 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48863.html CVE-2022-48863 https://bugzilla.suse.com/1228063 SUSE Bug 1228063 In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command When control vq receives a VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command request from the driver, presently there is no validation against the number of queue pairs to configure, or even if multiqueue had been negotiated or not is unverified. This may lead to kernel panic due to uninitialized resource for the queues were there any bogus request sent down by untrusted driver. Tie up the loose ends there. CVE-2022-48864 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48864.html CVE-2022-48864 https://bugzilla.suse.com/1228011 SUSE Bug 1228011 In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts Syzbot reported an slab-out-of-bounds Read in thrustmaster_probe() bug. The root case is in missing validation check of actual number of endpoints. Code should not blindly access usb_host_interface::endpoint array, since it may contain less endpoints than code expects. Fix it by adding missing validaion check and print an error if number of endpoints do not match expected number CVE-2022-48866 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2022-48866.html CVE-2022-48866 https://bugzilla.suse.com/1228014 SUSE Bug 1228014 https://bugzilla.suse.com/1228785 SUSE Bug 1228785 A race problem was found in fs/proc/task_mmu.c in the memory management sub-component in the Linux kernel. This issue may allow a local attacker with user privilege to cause a denial of service. CVE-2023-1582 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2023-1582.html CVE-2023-1582 https://bugzilla.suse.com/1209636 SUSE Bug 1209636 An issue was discovered in the USB subsystem in the Linux kernel through 6.4.2. There is an out-of-bounds and crash in read_descriptors in drivers/usb/core/sysfs.c. CVE-2023-37453 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2023-37453.html CVE-2023-37453 https://bugzilla.suse.com/1213123 SUSE Bug 1213123 In the Linux kernel, the following vulnerability has been resolved: net: prevent mss overflow in skb_segment() Once again syzbot is able to crash the kernel in skb_segment() [1] GSO_BY_FRAGS is a forbidden value, but unfortunately the following computation in skb_segment() can reach it quite easily : mss = mss * partial_segs; 65535 = 3 * 5 * 17 * 257, so many initial values of mss can lead to a bad final result. Make sure to limit segmentation so that the new mss value is smaller than GSO_BY_FRAGS. [1] general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] CPU: 1 PID: 5079 Comm: syz-executor993 Not tainted 6.7.0-rc4-syzkaller-00141-g1ae4cd3cbdd0 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/10/2023 RIP: 0010:skb_segment+0x181d/0x3f30 net/core/skbuff.c:4551 Code: 83 e3 02 e9 fb ed ff ff e8 90 68 1c f9 48 8b 84 24 f8 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 8a 21 00 00 48 8b 84 24 f8 00 RSP: 0018:ffffc900043473d0 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: 0000000000010046 RCX: ffffffff886b1597 RDX: 000000000000000e RSI: ffffffff886b2520 RDI: 0000000000000070 RBP: ffffc90004347578 R08: 0000000000000005 R09: 000000000000ffff R10: 000000000000ffff R11: 0000000000000002 R12: ffff888063202ac0 R13: 0000000000010000 R14: 000000000000ffff R15: 0000000000000046 FS: 0000555556e7e380(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020010000 CR3: 0000000027ee2000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> udp6_ufo_fragment+0xa0e/0xd00 net/ipv6/udp_offload.c:109 ipv6_gso_segment+0x534/0x17e0 net/ipv6/ip6_offload.c:120 skb_mac_gso_segment+0x290/0x610 net/core/gso.c:53 __skb_gso_segment+0x339/0x710 net/core/gso.c:124 skb_gso_segment include/net/gso.h:83 [inline] validate_xmit_skb+0x36c/0xeb0 net/core/dev.c:3626 __dev_queue_xmit+0x6f3/0x3d60 net/core/dev.c:4338 dev_queue_xmit include/linux/netdevice.h:3134 [inline] packet_xmit+0x257/0x380 net/packet/af_packet.c:276 packet_snd net/packet/af_packet.c:3087 [inline] packet_sendmsg+0x24c6/0x5220 net/packet/af_packet.c:3119 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0xd5/0x180 net/socket.c:745 __sys_sendto+0x255/0x340 net/socket.c:2190 __do_sys_sendto net/socket.c:2202 [inline] __se_sys_sendto net/socket.c:2198 [inline] __x64_sys_sendto+0xe0/0x1b0 net/socket.c:2198 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x40/0x110 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b RIP: 0033:0x7f8692032aa9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 d1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff8d685418 EFLAGS: 00000246 ORIG_RAX: 000000000000002c RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f8692032aa9 RDX: 0000000000010048 RSI: 00000000200000c0 RDI: 0000000000000003 RBP: 00000000000f4240 R08: 0000000020000540 R09: 0000000000000014 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff8d685480 R13: 0000000000000001 R14: 00007fff8d685480 R15: 0000000000000003 </TASK> Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:skb_segment+0x181d/0x3f30 net/core/skbuff.c:4551 Code: 83 e3 02 e9 fb ed ff ff e8 90 68 1c f9 48 8b 84 24 f8 00 00 00 48 8d 78 70 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 8a 21 00 00 48 8b 84 24 f8 00 RSP: 0018:ffffc900043473d0 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: 0000000000010046 RCX: ffffffff886b1597 RDX: 000000000000000e RSI: ffffffff886b2520 RDI: 0000000000000070 RBP: ffffc90004347578 R0 ---truncated--- CVE-2023-52435 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2023-52435.html CVE-2023-52435 https://bugzilla.suse.com/1220138 SUSE Bug 1220138 In the Linux kernel, the following vulnerability has been resolved: net: rds: Fix possible NULL-pointer dereference In rds_rdma_cm_event_handler_cmn() check, if conn pointer exists before dereferencing it as rdma_set_service_type() argument Found by Linux Verification Center (linuxtesting.org) with SVACE. CVE-2023-52573 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2023-52573.html CVE-2023-52573 https://bugzilla.suse.com/1220869 SUSE Bug 1220869 In the Linux kernel, the following vulnerability has been resolved: net/core: Fix ETH_P_1588 flow dissector When a PTP ethernet raw frame with a size of more than 256 bytes followed by a 0xff pattern is sent to __skb_flow_dissect, nhoff value calculation is wrong. For example: hdr->message_length takes the wrong value (0xffff) and it does not replicate real header length. In this case, 'nhoff' value was overridden and the PTP header was badly dissected. This leads to a kernel crash. net/core: flow_dissector net/core flow dissector nhoff = 0x0000000e net/core flow dissector hdr->message_length = 0x0000ffff net/core flow dissector nhoff = 0x0001000d (u16 overflow) ... skb linear: 00000000: 00 a0 c9 00 00 00 00 a0 c9 00 00 00 88 skb frag: 00000000: f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Using the size of the ptp_header struct will allow the corrected calculation of the nhoff value. net/core flow dissector nhoff = 0x0000000e net/core flow dissector nhoff = 0x00000030 (sizeof ptp_header) ... skb linear: 00000000: 00 a0 c9 00 00 00 00 a0 c9 00 00 00 88 f7 ff ff skb linear: 00000010: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff skb linear: 00000020: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff skb frag: 00000000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Kernel trace: [ 74.984279] ------------[ cut here ]------------ [ 74.989471] kernel BUG at include/linux/skbuff.h:2440! [ 74.995237] invalid opcode: 0000 [#1] PREEMPT SMP NOPTI [ 75.001098] CPU: 4 PID: 0 Comm: swapper/4 Tainted: G U 5.15.85-intel-ese-standard-lts #1 [ 75.011629] Hardware name: Intel Corporation A-Island (CPU:AlderLake)/A-Island (ID:06), BIOS SB_ADLP.01.01.00.01.03.008.D-6A9D9E73-dirty Mar 30 2023 [ 75.026507] RIP: 0010:eth_type_trans+0xd0/0x130 [ 75.031594] Code: 03 88 47 78 eb c7 8b 47 68 2b 47 6c 48 8b 97 c0 00 00 00 83 f8 01 7e 1b 48 85 d2 74 06 66 83 3a ff 74 09 b8 00 04 00 00 eb ab <0f> 0b b8 00 01 00 00 eb a2 48 85 ff 74 eb 48 8d 54 24 06 31 f6 b9 [ 75.052612] RSP: 0018:ffff9948c0228de0 EFLAGS: 00010297 [ 75.058473] RAX: 00000000000003f2 RBX: ffff8e47047dc300 RCX: 0000000000001003 [ 75.066462] RDX: ffff8e4e8c9ea040 RSI: ffff8e4704e0a000 RDI: ffff8e47047dc300 [ 75.074458] RBP: ffff8e4704e2acc0 R08: 00000000000003f3 R09: 0000000000000800 [ 75.082466] R10: 000000000000000d R11: ffff9948c0228dec R12: ffff8e4715e4e010 [ 75.090461] R13: ffff9948c0545018 R14: 0000000000000001 R15: 0000000000000800 [ 75.098464] FS: 0000000000000000(0000) GS:ffff8e4e8fb00000(0000) knlGS:0000000000000000 [ 75.107530] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 75.113982] CR2: 00007f5eb35934a0 CR3: 0000000150e0a002 CR4: 0000000000770ee0 [ 75.121980] PKRU: 55555554 [ 75.125035] Call Trace: [ 75.127792] <IRQ> [ 75.130063] ? eth_get_headlen+0xa4/0xc0 [ 75.134472] igc_process_skb_fields+0xcd/0x150 [ 75.139461] igc_poll+0xc80/0x17b0 [ 75.143272] __napi_poll+0x27/0x170 [ 75.147192] net_rx_action+0x234/0x280 [ 75.151409] __do_softirq+0xef/0x2f4 [ 75.155424] irq_exit_rcu+0xc7/0x110 [ 75.159432] common_interrupt+0xb8/0xd0 [ 75.163748] </IRQ> [ 75.166112] <TASK> [ 75.168473] asm_common_interrupt+0x22/0x40 [ 75.173175] RIP: 0010:cpuidle_enter_state+0xe2/0x350 [ 75.178749] Code: 85 c0 0f 8f 04 02 00 00 31 ff e8 39 6c 67 ff 45 84 ff 74 12 9c 58 f6 c4 02 0f 85 50 02 00 00 31 ff e8 52 b0 6d ff fb 45 85 f6 <0f> 88 b1 00 00 00 49 63 ce 4c 2b 2c 24 48 89 c8 48 6b d1 68 48 c1 [ 75.199757] RSP: 0018:ffff9948c013bea8 EFLAGS: 00000202 [ 75.205614] RAX: ffff8e4e8fb00000 RBX: ffffb948bfd23900 RCX: 000000000000001f [ 75.213619] RDX: 0000000000000004 RSI: ffffffff94206161 RDI: ffffffff94212e20 [ 75.221620] RBP: 0000000000000004 R08: 000000117568973a R09: 0000000000000001 [ 75.229622] R10: 000000000000afc8 R11: ffff8e4e8fb29ce4 R12: ffffffff945ae980 [ 75.237628] R13: 000000117568973a R14: 0000000000000004 R15: 0000000000000000 [ 75.245635] ? ---truncated--- CVE-2023-52580 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2023-52580.html CVE-2023-52580 https://bugzilla.suse.com/1220876 SUSE Bug 1220876 In the Linux kernel, the following vulnerability has been resolved: reiserfs: Avoid touching renamed directory if parent does not change The VFS will not be locking moved directory if its parent does not change. Change reiserfs rename code to avoid touching renamed directory if its parent does not change as without locking that can corrupt the filesystem. CVE-2023-52591 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2023-52591.html CVE-2023-52591 https://bugzilla.suse.com/1221044 SUSE Bug 1221044 https://bugzilla.suse.com/1221578 SUSE Bug 1221578 https://bugzilla.suse.com/1221598 SUSE Bug 1221598 In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself sock_map proto callbacks should never call themselves by design. Protect against bugs like [1] and break out of the recursive loop to avoid a stack overflow in favor of a resource leak. [1] https://lore.kernel.org/all/00000000000073b14905ef2e7401@google.com/ CVE-2023-52735 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2023-52735.html CVE-2023-52735 https://bugzilla.suse.com/1225475 SUSE Bug 1225475 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free in smb2_query_info_compound() The following UAF was triggered when running fstests generic/072 with KASAN enabled against Windows Server 2022 and mount options 'multichannel,max_channels=2,vers=3.1.1,mfsymlinks,noperm' BUG: KASAN: slab-use-after-free in smb2_query_info_compound+0x423/0x6d0 [cifs] Read of size 8 at addr ffff888014941048 by task xfs_io/27534 CPU: 0 PID: 27534 Comm: xfs_io Not tainted 6.6.0-rc7 #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.2-3-gd478f380-rebuilt.opensuse.org 04/01/2014 Call Trace: dump_stack_lvl+0x4a/0x80 print_report+0xcf/0x650 ? srso_alias_return_thunk+0x5/0x7f ? srso_alias_return_thunk+0x5/0x7f ? __phys_addr+0x46/0x90 kasan_report+0xda/0x110 ? smb2_query_info_compound+0x423/0x6d0 [cifs] ? smb2_query_info_compound+0x423/0x6d0 [cifs] smb2_query_info_compound+0x423/0x6d0 [cifs] ? __pfx_smb2_query_info_compound+0x10/0x10 [cifs] ? srso_alias_return_thunk+0x5/0x7f ? __stack_depot_save+0x39/0x480 ? kasan_save_stack+0x33/0x60 ? kasan_set_track+0x25/0x30 ? ____kasan_slab_free+0x126/0x170 smb2_queryfs+0xc2/0x2c0 [cifs] ? __pfx_smb2_queryfs+0x10/0x10 [cifs] ? __pfx___lock_acquire+0x10/0x10 smb311_queryfs+0x210/0x220 [cifs] ? __pfx_smb311_queryfs+0x10/0x10 [cifs] ? srso_alias_return_thunk+0x5/0x7f ? __lock_acquire+0x480/0x26c0 ? lock_release+0x1ed/0x640 ? srso_alias_return_thunk+0x5/0x7f ? do_raw_spin_unlock+0x9b/0x100 cifs_statfs+0x18c/0x4b0 [cifs] statfs_by_dentry+0x9b/0xf0 fd_statfs+0x4e/0xb0 __do_sys_fstatfs+0x7f/0xe0 ? __pfx___do_sys_fstatfs+0x10/0x10 ? srso_alias_return_thunk+0x5/0x7f ? lockdep_hardirqs_on_prepare+0x136/0x200 ? srso_alias_return_thunk+0x5/0x7f do_syscall_64+0x3f/0x90 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 Allocated by task 27534: kasan_save_stack+0x33/0x60 kasan_set_track+0x25/0x30 __kasan_kmalloc+0x8f/0xa0 open_cached_dir+0x71b/0x1240 [cifs] smb2_query_info_compound+0x5c3/0x6d0 [cifs] smb2_queryfs+0xc2/0x2c0 [cifs] smb311_queryfs+0x210/0x220 [cifs] cifs_statfs+0x18c/0x4b0 [cifs] statfs_by_dentry+0x9b/0xf0 fd_statfs+0x4e/0xb0 __do_sys_fstatfs+0x7f/0xe0 do_syscall_64+0x3f/0x90 entry_SYSCALL_64_after_hwframe+0x6e/0xd8 Freed by task 27534: kasan_save_stack+0x33/0x60 kasan_set_track+0x25/0x30 kasan_save_free_info+0x2b/0x50 ____kasan_slab_free+0x126/0x170 slab_free_freelist_hook+0xd0/0x1e0 __kmem_cache_free+0x9d/0x1b0 open_cached_dir+0xff5/0x1240 [cifs] smb2_query_info_compound+0x5c3/0x6d0 [cifs] smb2_queryfs+0xc2/0x2c0 [cifs] This is a race between open_cached_dir() and cached_dir_lease_break() where the cache entry for the open directory handle receives a lease break while creating it. And before returning from open_cached_dir(), we put the last reference of the new @cfid because of !@cfid->has_lease. Besides the UAF, while running xfstests a lot of missed lease breaks have been noticed in tests that run several concurrent statfs(2) calls on those cached fids CIFS: VFS: \\w22-root1.gandalf.test No task to wake, unknown frame... CIFS: VFS: \\w22-root1.gandalf.test Cmd: 18 Err: 0x0 Flags: 0x1... CIFS: VFS: \\w22-root1.gandalf.test smb buf 00000000715bfe83 len 108 CIFS: VFS: Dump pending requests: CIFS: VFS: \\w22-root1.gandalf.test No task to wake, unknown frame... CIFS: VFS: \\w22-root1.gandalf.test Cmd: 18 Err: 0x0 Flags: 0x1... CIFS: VFS: \\w22-root1.gandalf.test smb buf 000000005aa7316e len 108 ... To fix both, in open_cached_dir() ensure that @cfid->has_lease is set right before sending out compounded request so that any potential lease break will be get processed by demultiplex thread while we're still caching @cfid. And, if open failed for some reason, re-check @cfid->has_lease to decide whether or not put lease reference. CVE-2023-52751 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2023-52751.html CVE-2023-52751 https://bugzilla.suse.com/1225489 SUSE Bug 1225489 In the Linux kernel, the following vulnerability has been resolved: virtio-blk: fix implicit overflow on virtio_max_dma_size The following codes have an implicit conversion from size_t to u32: (u32)max_size = (size_t)virtio_max_dma_size(vdev); This may lead overflow, Ex (size_t)4G -> (u32)0. Once virtio_max_dma_size() has a larger size than U32_MAX, use U32_MAX instead. CVE-2023-52762 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2023-52762.html CVE-2023-52762 https://bugzilla.suse.com/1225573 SUSE Bug 1225573 In the Linux kernel, the following vulnerability has been resolved: net/smc: avoid data corruption caused by decline We found a data corruption issue during testing of SMC-R on Redis applications. The benchmark has a low probability of reporting a strange error as shown below. "Error: Protocol error, got "\xe2" as reply type byte" Finally, we found that the retrieved error data was as follows: 0xE2 0xD4 0xC3 0xD9 0x04 0x00 0x2C 0x20 0xA6 0x56 0x00 0x16 0x3E 0x0C 0xCB 0x04 0x02 0x01 0x00 0x00 0x20 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0x00 0xE2 It is quite obvious that this is a SMC DECLINE message, which means that the applications received SMC protocol message. We found that this was caused by the following situations: client server | clc proposal -------------> | clc accept <------------- | clc confirm -------------> wait llc confirm send llc confirm |failed llc confirm | x------ (after 2s)timeout wait llc confirm rsp wait decline (after 1s) timeout (after 2s) timeout | decline --------------> | decline <-------------- As a result, a decline message was sent in the implementation, and this message was read from TCP by the already-fallback connection. This patch double the client timeout as 2x of the server value, With this simple change, the Decline messages should never cross or collide (during Confirm link timeout). This issue requires an immediate solution, since the protocol updates involve a more long-term solution. CVE-2023-52775 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2023-52775.html CVE-2023-52775 https://bugzilla.suse.com/1225088 SUSE Bug 1225088 In the Linux kernel, the following vulnerability has been resolved: drm/amd: check num of link levels when update pcie param In SR-IOV environment, the value of pcie_table->num_of_link_levels will be 0, and num_of_levels - 1 will cause array index out of bounds CVE-2023-52812 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2023-52812.html CVE-2023-52812 https://bugzilla.suse.com/1225564 SUSE Bug 1225564 In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix coverity issue with unintentional integer overflow 1. Instead of multiplying 2 variable of different types. Change to assign a value of one variable and then multiply the other variable. 2. Add a int variable for multiplier calculation instead of calculating different types multiplier with dma_addr_t variable directly. CVE-2023-52857 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2023-52857.html CVE-2023-52857 https://bugzilla.suse.com/1225581 SUSE Bug 1225581 In the Linux kernel, the following vulnerability has been resolved: hwmon: (axi-fan-control) Fix possible NULL pointer dereference axi_fan_control_irq_handler(), dependent on the private axi_fan_control_data structure, might be called before the hwmon device is registered. That will cause an "Unable to handle kernel NULL pointer dereference" error. CVE-2023-52863 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2023-52863.html CVE-2023-52863 https://bugzilla.suse.com/1225586 SUSE Bug 1225586 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix UAF in svc_tcp_listen_data_ready() After the listener svc_sock is freed, and before invoking svc_tcp_accept() for the established child sock, there is a window that the newsock retaining a freed listener svc_sock in sk_user_data which cloning from parent. In the race window, if data is received on the newsock, we will observe use-after-free report in svc_tcp_listen_data_ready(). Reproduce by two tasks: 1. while :; do rpc.nfsd 0 ; rpc.nfsd; done 2. while :; do echo "" | ncat -4 127.0.0.1 2049 ; done KASAN report: ================================================================== BUG: KASAN: slab-use-after-free in svc_tcp_listen_data_ready+0x1cf/0x1f0 [sunrpc] Read of size 8 at addr ffff888139d96228 by task nc/102553 CPU: 7 PID: 102553 Comm: nc Not tainted 6.3.0+ #18 Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 11/12/2020 Call Trace: <IRQ> dump_stack_lvl+0x33/0x50 print_address_description.constprop.0+0x27/0x310 print_report+0x3e/0x70 kasan_report+0xae/0xe0 svc_tcp_listen_data_ready+0x1cf/0x1f0 [sunrpc] tcp_data_queue+0x9f4/0x20e0 tcp_rcv_established+0x666/0x1f60 tcp_v4_do_rcv+0x51c/0x850 tcp_v4_rcv+0x23fc/0x2e80 ip_protocol_deliver_rcu+0x62/0x300 ip_local_deliver_finish+0x267/0x350 ip_local_deliver+0x18b/0x2d0 ip_rcv+0x2fb/0x370 __netif_receive_skb_one_core+0x166/0x1b0 process_backlog+0x24c/0x5e0 __napi_poll+0xa2/0x500 net_rx_action+0x854/0xc90 __do_softirq+0x1bb/0x5de do_softirq+0xcb/0x100 </IRQ> <TASK> ... </TASK> Allocated by task 102371: kasan_save_stack+0x1e/0x40 kasan_set_track+0x21/0x30 __kasan_kmalloc+0x7b/0x90 svc_setup_socket+0x52/0x4f0 [sunrpc] svc_addsock+0x20d/0x400 [sunrpc] __write_ports_addfd+0x209/0x390 [nfsd] write_ports+0x239/0x2c0 [nfsd] nfsctl_transaction_write+0xac/0x110 [nfsd] vfs_write+0x1c3/0xae0 ksys_write+0xed/0x1c0 do_syscall_64+0x38/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc Freed by task 102551: kasan_save_stack+0x1e/0x40 kasan_set_track+0x21/0x30 kasan_save_free_info+0x2a/0x50 __kasan_slab_free+0x106/0x190 __kmem_cache_free+0x133/0x270 svc_xprt_free+0x1e2/0x350 [sunrpc] svc_xprt_destroy_all+0x25a/0x440 [sunrpc] nfsd_put+0x125/0x240 [nfsd] nfsd_svc+0x2cb/0x3c0 [nfsd] write_threads+0x1ac/0x2a0 [nfsd] nfsctl_transaction_write+0xac/0x110 [nfsd] vfs_write+0x1c3/0xae0 ksys_write+0xed/0x1c0 do_syscall_64+0x38/0x90 entry_SYSCALL_64_after_hwframe+0x72/0xdc Fix the UAF by simply doing nothing in svc_tcp_listen_data_ready() if state != TCP_LISTEN, that will avoid dereferencing svsk for all child socket. CVE-2023-52885 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2023-52885.html CVE-2023-52885 https://bugzilla.suse.com/1227750 SUSE Bug 1227750 https://bugzilla.suse.com/1227753 SUSE Bug 1227753 In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix race by not overwriting udev->descriptor in hub_port_init() Syzbot reported an out-of-bounds read in sysfs.c:read_descriptors(): BUG: KASAN: slab-out-of-bounds in read_descriptors+0x263/0x280 drivers/usb/core/sysfs.c:883 Read of size 8 at addr ffff88801e78b8c8 by task udevd/5011 CPU: 0 PID: 5011 Comm: udevd Not tainted 6.4.0-rc6-syzkaller-00195-g40f71e7cd3c6 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd9/0x150 lib/dump_stack.c:106 print_address_description.constprop.0+0x2c/0x3c0 mm/kasan/report.c:351 print_report mm/kasan/report.c:462 [inline] kasan_report+0x11c/0x130 mm/kasan/report.c:572 read_descriptors+0x263/0x280 drivers/usb/core/sysfs.c:883 ... Allocated by task 758: ... __do_kmalloc_node mm/slab_common.c:966 [inline] __kmalloc+0x5e/0x190 mm/slab_common.c:979 kmalloc include/linux/slab.h:563 [inline] kzalloc include/linux/slab.h:680 [inline] usb_get_configuration+0x1f7/0x5170 drivers/usb/core/config.c:887 usb_enumerate_device drivers/usb/core/hub.c:2407 [inline] usb_new_device+0x12b0/0x19d0 drivers/usb/core/hub.c:2545 As analyzed by Khazhy Kumykov, the cause of this bug is a race between read_descriptors() and hub_port_init(): The first routine uses a field in udev->descriptor, not expecting it to change, while the second overwrites it. Prior to commit 45bf39f8df7f ("USB: core: Don't hold device lock while reading the "descriptors" sysfs file") this race couldn't occur, because the routines were mutually exclusive thanks to the device locking. Removing that locking from read_descriptors() exposed it to the race. The best way to fix the bug is to keep hub_port_init() from changing udev->descriptor once udev has been initialized and registered. Drivers expect the descriptors stored in the kernel to be immutable; we should not undermine this expectation. In fact, this change should have been made long ago. So now hub_port_init() will take an additional argument, specifying a buffer in which to store the device descriptor it reads. (If udev has not yet been initialized, the buffer pointer will be NULL and then hub_port_init() will store the device descriptor in udev as before.) This eliminates the data race responsible for the out-of-bounds read. The changes to hub_port_init() appear more extensive than they really are, because of indentation changes resulting from an attempt to avoid writing to other parts of the usb_device structure after it has been initialized. Similar changes should be made to the code that reads the BOS descriptor, but that can be handled in a separate patch later on. This patch is sufficient to fix the bug found by syzbot. CVE-2023-52886 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2023-52886.html CVE-2023-52886 https://bugzilla.suse.com/1227981 SUSE Bug 1227981 printer_write in drivers/usb/gadget/function/f_printer.c in the Linux kernel through 6.7.4 does not properly call usb_ep_queue, which might allow attackers to cause a denial of service or have unspecified other impact. CVE-2024-25741 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-25741.html CVE-2024-25741 https://bugzilla.suse.com/1219832 SUSE Bug 1219832 In the Linux kernel, the following vulnerability has been resolved: tls: fix race between async notify and socket close The submitting thread (one which called recvmsg/sendmsg) may exit as soon as the async crypto handler calls complete() so any code past that point risks touching already freed data. Try to avoid the locking and extra flags altogether. Have the main thread hold an extra reference, this way we can depend solely on the atomic ref counter for synchronization. Don't futz with reiniting the completion, either, we are now tightly controlling when completion fires. CVE-2024-26583 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-26583.html CVE-2024-26583 https://bugzilla.suse.com/1220185 SUSE Bug 1220185 In the Linux kernel, the following vulnerability has been resolved: net: tls: handle backlogging of crypto requests Since we're setting the CRYPTO_TFM_REQ_MAY_BACKLOG flag on our requests to the crypto API, crypto_aead_{encrypt,decrypt} can return -EBUSY instead of -EINPROGRESS in valid situations. For example, when the cryptd queue for AESNI is full (easy to trigger with an artificially low cryptd.cryptd_max_cpu_qlen), requests will be enqueued to the backlog but still processed. In that case, the async callback will also be called twice: first with err == -EINPROGRESS, which it seems we can just ignore, then with err == 0. Compared to Sabrina's original patch this version uses the new tls_*crypt_async_wait() helpers and converts the EBUSY to EINPROGRESS to avoid having to modify all the error handling paths. The handling is identical. CVE-2024-26584 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-26584.html CVE-2024-26584 https://bugzilla.suse.com/1220186 SUSE Bug 1220186 In the Linux kernel, the following vulnerability has been resolved: tls: fix race between tx work scheduling and socket close Similarly to previous commit, the submitting thread (recvmsg/sendmsg) may exit as soon as the async crypto handler calls complete(). Reorder scheduling the work before calling complete(). This seems more logical in the first place, as it's the inverse order of what the submitting thread will do. CVE-2024-26585 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-26585.html CVE-2024-26585 https://bugzilla.suse.com/1220187 SUSE Bug 1220187 https://bugzilla.suse.com/1220211 SUSE Bug 1220211 https://bugzilla.suse.com/1224298 SUSE Bug 1224298 https://bugzilla.suse.com/1224878 SUSE Bug 1224878 In the Linux kernel, the following vulnerability has been resolved: net/smc: fix illegal rmb_desc access in SMC-D connection dump A crash was found when dumping SMC-D connections. It can be reproduced by following steps: - run nginx/wrk test: smc_run nginx smc_run wrk -t 16 -c 1000 -d <duration> -H 'Connection: Close' <URL> - continuously dump SMC-D connections in parallel: watch -n 1 'smcss -D' BUG: kernel NULL pointer dereference, address: 0000000000000030 CPU: 2 PID: 7204 Comm: smcss Kdump: loaded Tainted: G E 6.7.0+ #55 RIP: 0010:__smc_diag_dump.constprop.0+0x5e5/0x620 [smc_diag] Call Trace: <TASK> ? __die+0x24/0x70 ? page_fault_oops+0x66/0x150 ? exc_page_fault+0x69/0x140 ? asm_exc_page_fault+0x26/0x30 ? __smc_diag_dump.constprop.0+0x5e5/0x620 [smc_diag] ? __kmalloc_node_track_caller+0x35d/0x430 ? __alloc_skb+0x77/0x170 smc_diag_dump_proto+0xd0/0xf0 [smc_diag] smc_diag_dump+0x26/0x60 [smc_diag] netlink_dump+0x19f/0x320 __netlink_dump_start+0x1dc/0x300 smc_diag_handler_dump+0x6a/0x80 [smc_diag] ? __pfx_smc_diag_dump+0x10/0x10 [smc_diag] sock_diag_rcv_msg+0x121/0x140 ? __pfx_sock_diag_rcv_msg+0x10/0x10 netlink_rcv_skb+0x5a/0x110 sock_diag_rcv+0x28/0x40 netlink_unicast+0x22a/0x330 netlink_sendmsg+0x1f8/0x420 __sock_sendmsg+0xb0/0xc0 ____sys_sendmsg+0x24e/0x300 ? copy_msghdr_from_user+0x62/0x80 ___sys_sendmsg+0x7c/0xd0 ? __do_fault+0x34/0x160 ? do_read_fault+0x5f/0x100 ? do_fault+0xb0/0x110 ? __handle_mm_fault+0x2b0/0x6c0 __sys_sendmsg+0x4d/0x80 do_syscall_64+0x69/0x180 entry_SYSCALL_64_after_hwframe+0x6e/0x76 It is possible that the connection is in process of being established when we dump it. Assumed that the connection has been registered in a link group by smc_conn_create() but the rmb_desc has not yet been initialized by smc_buf_create(), thus causing the illegal access to conn->rmb_desc. So fix it by checking before dump. CVE-2024-26615 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-26615.html CVE-2024-26615 https://bugzilla.suse.com/1220942 SUSE Bug 1220942 In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() syzbot pointed out [1] that NEXTHDR_FRAGMENT handling is broken. Reading frag_off can only be done if we pulled enough bytes to skb->head. Currently we might access garbage. [1] BUG: KMSAN: uninit-value in ip6_tnl_parse_tlv_enc_lim+0x94f/0xbb0 ip6_tnl_parse_tlv_enc_lim+0x94f/0xbb0 ipxip6_tnl_xmit net/ipv6/ip6_tunnel.c:1326 [inline] ip6_tnl_start_xmit+0xab2/0x1a70 net/ipv6/ip6_tunnel.c:1432 __netdev_start_xmit include/linux/netdevice.h:4940 [inline] netdev_start_xmit include/linux/netdevice.h:4954 [inline] xmit_one net/core/dev.c:3548 [inline] dev_hard_start_xmit+0x247/0xa10 net/core/dev.c:3564 __dev_queue_xmit+0x33b8/0x5130 net/core/dev.c:4349 dev_queue_xmit include/linux/netdevice.h:3134 [inline] neigh_connected_output+0x569/0x660 net/core/neighbour.c:1592 neigh_output include/net/neighbour.h:542 [inline] ip6_finish_output2+0x23a9/0x2b30 net/ipv6/ip6_output.c:137 ip6_finish_output+0x855/0x12b0 net/ipv6/ip6_output.c:222 NF_HOOK_COND include/linux/netfilter.h:303 [inline] ip6_output+0x323/0x610 net/ipv6/ip6_output.c:243 dst_output include/net/dst.h:451 [inline] ip6_local_out+0xe9/0x140 net/ipv6/output_core.c:155 ip6_send_skb net/ipv6/ip6_output.c:1952 [inline] ip6_push_pending_frames+0x1f9/0x560 net/ipv6/ip6_output.c:1972 rawv6_push_pending_frames+0xbe8/0xdf0 net/ipv6/raw.c:582 rawv6_sendmsg+0x2b66/0x2e70 net/ipv6/raw.c:920 inet_sendmsg+0x105/0x190 net/ipv4/af_inet.c:847 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2584 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638 __sys_sendmsg net/socket.c:2667 [inline] __do_sys_sendmsg net/socket.c:2676 [inline] __se_sys_sendmsg net/socket.c:2674 [inline] __x64_sys_sendmsg+0x307/0x490 net/socket.c:2674 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x44/0x110 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b Uninit was created at: slab_post_alloc_hook+0x129/0xa70 mm/slab.h:768 slab_alloc_node mm/slub.c:3478 [inline] __kmem_cache_alloc_node+0x5c9/0x970 mm/slub.c:3517 __do_kmalloc_node mm/slab_common.c:1006 [inline] __kmalloc_node_track_caller+0x118/0x3c0 mm/slab_common.c:1027 kmalloc_reserve+0x249/0x4a0 net/core/skbuff.c:582 pskb_expand_head+0x226/0x1a00 net/core/skbuff.c:2098 __pskb_pull_tail+0x13b/0x2310 net/core/skbuff.c:2655 pskb_may_pull_reason include/linux/skbuff.h:2673 [inline] pskb_may_pull include/linux/skbuff.h:2681 [inline] ip6_tnl_parse_tlv_enc_lim+0x901/0xbb0 net/ipv6/ip6_tunnel.c:408 ipxip6_tnl_xmit net/ipv6/ip6_tunnel.c:1326 [inline] ip6_tnl_start_xmit+0xab2/0x1a70 net/ipv6/ip6_tunnel.c:1432 __netdev_start_xmit include/linux/netdevice.h:4940 [inline] netdev_start_xmit include/linux/netdevice.h:4954 [inline] xmit_one net/core/dev.c:3548 [inline] dev_hard_start_xmit+0x247/0xa10 net/core/dev.c:3564 __dev_queue_xmit+0x33b8/0x5130 net/core/dev.c:4349 dev_queue_xmit include/linux/netdevice.h:3134 [inline] neigh_connected_output+0x569/0x660 net/core/neighbour.c:1592 neigh_output include/net/neighbour.h:542 [inline] ip6_finish_output2+0x23a9/0x2b30 net/ipv6/ip6_output.c:137 ip6_finish_output+0x855/0x12b0 net/ipv6/ip6_output.c:222 NF_HOOK_COND include/linux/netfilter.h:303 [inline] ip6_output+0x323/0x610 net/ipv6/ip6_output.c:243 dst_output include/net/dst.h:451 [inline] ip6_local_out+0xe9/0x140 net/ipv6/output_core.c:155 ip6_send_skb net/ipv6/ip6_output.c:1952 [inline] ip6_push_pending_frames+0x1f9/0x560 net/ipv6/ip6_output.c:1972 rawv6_push_pending_frames+0xbe8/0xdf0 net/ipv6/raw.c:582 rawv6_sendmsg+0x2b66/0x2e70 net/ipv6/raw.c:920 inet_sendmsg+0x105/0x190 net/ipv4/af_inet.c:847 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] ____sys_sendmsg+0x9c2/0xd60 net/socket.c:2584 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638 __sys_sendmsg net/socket.c:2667 [inline] __do_sys_sendms ---truncated--- CVE-2024-26633 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-26633.html CVE-2024-26633 https://bugzilla.suse.com/1221647 SUSE Bug 1221647 In the Linux kernel, the following vulnerability has been resolved: llc: Drop support for ETH_P_TR_802_2. syzbot reported an uninit-value bug below. [0] llc supports ETH_P_802_2 (0x0004) and used to support ETH_P_TR_802_2 (0x0011), and syzbot abused the latter to trigger the bug. write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x11}, @val, @mpls={[], @llc={@snap={0xaa, 0x1, ')', "90e5dd"}}}}, 0x16) llc_conn_handler() initialises local variables {saddr,daddr}.mac based on skb in llc_pdu_decode_sa()/llc_pdu_decode_da() and passes them to __llc_lookup(). However, the initialisation is done only when skb->protocol is htons(ETH_P_802_2), otherwise, __llc_lookup_established() and __llc_lookup_listener() will read garbage. The missing initialisation existed prior to commit 211ed865108e ("net: delete all instances of special processing for token ring"). It removed the part to kick out the token ring stuff but forgot to close the door allowing ETH_P_TR_802_2 packets to sneak into llc_rcv(). Let's remove llc_tr_packet_type and complete the deprecation. [0]: BUG: KMSAN: uninit-value in __llc_lookup_established+0xe9d/0xf90 __llc_lookup_established+0xe9d/0xf90 __llc_lookup net/llc/llc_conn.c:611 [inline] llc_conn_handler+0x4bd/0x1360 net/llc/llc_conn.c:791 llc_rcv+0xfbb/0x14a0 net/llc/llc_input.c:206 __netif_receive_skb_one_core net/core/dev.c:5527 [inline] __netif_receive_skb+0x1a6/0x5a0 net/core/dev.c:5641 netif_receive_skb_internal net/core/dev.c:5727 [inline] netif_receive_skb+0x58/0x660 net/core/dev.c:5786 tun_rx_batched+0x3ee/0x980 drivers/net/tun.c:1555 tun_get_user+0x53af/0x66d0 drivers/net/tun.c:2002 tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2048 call_write_iter include/linux/fs.h:2020 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x8ef/0x1490 fs/read_write.c:584 ksys_write+0x20f/0x4c0 fs/read_write.c:637 __do_sys_write fs/read_write.c:649 [inline] __se_sys_write fs/read_write.c:646 [inline] __x64_sys_write+0x93/0xd0 fs/read_write.c:646 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x44/0x110 arch/x86/entry/common.c:82 entry_SYSCALL_64_after_hwframe+0x63/0x6b Local variable daddr created at: llc_conn_handler+0x53/0x1360 net/llc/llc_conn.c:783 llc_rcv+0xfbb/0x14a0 net/llc/llc_input.c:206 CPU: 1 PID: 5004 Comm: syz-executor994 Not tainted 6.6.0-syzkaller-14500-g1c41041124bd #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 CVE-2024-26635 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-26635.html CVE-2024-26635 https://bugzilla.suse.com/1221656 SUSE Bug 1221656 In the Linux kernel, the following vulnerability has been resolved: llc: make llc_ui_sendmsg() more robust against bonding changes syzbot was able to trick llc_ui_sendmsg(), allocating an skb with no headroom, but subsequently trying to push 14 bytes of Ethernet header [1] Like some others, llc_ui_sendmsg() releases the socket lock before calling sock_alloc_send_skb(). Then it acquires it again, but does not redo all the sanity checks that were performed. This fix: - Uses LL_RESERVED_SPACE() to reserve space. - Check all conditions again after socket lock is held again. - Do not account Ethernet header for mtu limitation. [1] skbuff: skb_under_panic: text:ffff800088baa334 len:1514 put:14 head:ffff0000c9c37000 data:ffff0000c9c36ff2 tail:0x5dc end:0x6c0 dev:bond0 kernel BUG at net/core/skbuff.c:193 ! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 0 PID: 6875 Comm: syz-executor.0 Not tainted 6.7.0-rc8-syzkaller-00101-g0802e17d9aca-dirty #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : skb_panic net/core/skbuff.c:189 [inline] pc : skb_under_panic+0x13c/0x140 net/core/skbuff.c:203 lr : skb_panic net/core/skbuff.c:189 [inline] lr : skb_under_panic+0x13c/0x140 net/core/skbuff.c:203 sp : ffff800096f97000 x29: ffff800096f97010 x28: ffff80008cc8d668 x27: dfff800000000000 x26: ffff0000cb970c90 x25: 00000000000005dc x24: ffff0000c9c36ff2 x23: ffff0000c9c37000 x22: 00000000000005ea x21: 00000000000006c0 x20: 000000000000000e x19: ffff800088baa334 x18: 1fffe000368261ce x17: ffff80008e4ed000 x16: ffff80008a8310f8 x15: 0000000000000001 x14: 1ffff00012df2d58 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000000001 x10: 0000000000ff0100 x9 : e28a51f1087e8400 x8 : e28a51f1087e8400 x7 : ffff80008028f8d0 x6 : 0000000000000000 x5 : 0000000000000001 x4 : 0000000000000001 x3 : ffff800082b78714 x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000089 Call trace: skb_panic net/core/skbuff.c:189 [inline] skb_under_panic+0x13c/0x140 net/core/skbuff.c:203 skb_push+0xf0/0x108 net/core/skbuff.c:2451 eth_header+0x44/0x1f8 net/ethernet/eth.c:83 dev_hard_header include/linux/netdevice.h:3188 [inline] llc_mac_hdr_init+0x110/0x17c net/llc/llc_output.c:33 llc_sap_action_send_xid_c+0x170/0x344 net/llc/llc_s_ac.c:85 llc_exec_sap_trans_actions net/llc/llc_sap.c:153 [inline] llc_sap_next_state net/llc/llc_sap.c:182 [inline] llc_sap_state_process+0x1ec/0x774 net/llc/llc_sap.c:209 llc_build_and_send_xid_pkt+0x12c/0x1c0 net/llc/llc_sap.c:270 llc_ui_sendmsg+0x7bc/0xb1c net/llc/af_llc.c:997 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] sock_sendmsg+0x194/0x274 net/socket.c:767 splice_to_socket+0x7cc/0xd58 fs/splice.c:881 do_splice_from fs/splice.c:933 [inline] direct_splice_actor+0xe4/0x1c0 fs/splice.c:1142 splice_direct_to_actor+0x2a0/0x7e4 fs/splice.c:1088 do_splice_direct+0x20c/0x348 fs/splice.c:1194 do_sendfile+0x4bc/0xc70 fs/read_write.c:1254 __do_sys_sendfile64 fs/read_write.c:1322 [inline] __se_sys_sendfile64 fs/read_write.c:1308 [inline] __arm64_sys_sendfile64+0x160/0x3b4 fs/read_write.c:1308 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:51 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:136 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:155 el0_svc+0x54/0x158 arch/arm64/kernel/entry-common.c:678 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:696 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:595 Code: aa1803e6 aa1903e7 a90023f5 94792f6a (d4210000) CVE-2024-26636 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-26636.html CVE-2024-26636 https://bugzilla.suse.com/1221659 SUSE Bug 1221659 In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() syzbot found __ip6_tnl_rcv() could access unitiliazed data [1]. Call pskb_inet_may_pull() to fix this, and initialize ipv6h variable after this call as it can change skb->head. [1] BUG: KMSAN: uninit-value in __INET_ECN_decapsulate include/net/inet_ecn.h:253 [inline] BUG: KMSAN: uninit-value in INET_ECN_decapsulate include/net/inet_ecn.h:275 [inline] BUG: KMSAN: uninit-value in IP6_ECN_decapsulate+0x7df/0x1e50 include/net/inet_ecn.h:321 __INET_ECN_decapsulate include/net/inet_ecn.h:253 [inline] INET_ECN_decapsulate include/net/inet_ecn.h:275 [inline] IP6_ECN_decapsulate+0x7df/0x1e50 include/net/inet_ecn.h:321 ip6ip6_dscp_ecn_decapsulate+0x178/0x1b0 net/ipv6/ip6_tunnel.c:727 __ip6_tnl_rcv+0xd4e/0x1590 net/ipv6/ip6_tunnel.c:845 ip6_tnl_rcv+0xce/0x100 net/ipv6/ip6_tunnel.c:888 gre_rcv+0x143f/0x1870 ip6_protocol_deliver_rcu+0xda6/0x2a60 net/ipv6/ip6_input.c:438 ip6_input_finish net/ipv6/ip6_input.c:483 [inline] NF_HOOK include/linux/netfilter.h:314 [inline] ip6_input+0x15d/0x430 net/ipv6/ip6_input.c:492 ip6_mc_input+0xa7e/0xc80 net/ipv6/ip6_input.c:586 dst_input include/net/dst.h:461 [inline] ip6_rcv_finish+0x5db/0x870 net/ipv6/ip6_input.c:79 NF_HOOK include/linux/netfilter.h:314 [inline] ipv6_rcv+0xda/0x390 net/ipv6/ip6_input.c:310 __netif_receive_skb_one_core net/core/dev.c:5532 [inline] __netif_receive_skb+0x1a6/0x5a0 net/core/dev.c:5646 netif_receive_skb_internal net/core/dev.c:5732 [inline] netif_receive_skb+0x58/0x660 net/core/dev.c:5791 tun_rx_batched+0x3ee/0x980 drivers/net/tun.c:1555 tun_get_user+0x53af/0x66d0 drivers/net/tun.c:2002 tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2048 call_write_iter include/linux/fs.h:2084 [inline] new_sync_write fs/read_write.c:497 [inline] vfs_write+0x786/0x1200 fs/read_write.c:590 ksys_write+0x20f/0x4c0 fs/read_write.c:643 __do_sys_write fs/read_write.c:655 [inline] __se_sys_write fs/read_write.c:652 [inline] __x64_sys_write+0x93/0xd0 fs/read_write.c:652 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x6d/0x140 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b Uninit was created at: slab_post_alloc_hook+0x129/0xa70 mm/slab.h:768 slab_alloc_node mm/slub.c:3478 [inline] kmem_cache_alloc_node+0x5e9/0xb10 mm/slub.c:3523 kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:560 __alloc_skb+0x318/0x740 net/core/skbuff.c:651 alloc_skb include/linux/skbuff.h:1286 [inline] alloc_skb_with_frags+0xc8/0xbd0 net/core/skbuff.c:6334 sock_alloc_send_pskb+0xa80/0xbf0 net/core/sock.c:2787 tun_alloc_skb drivers/net/tun.c:1531 [inline] tun_get_user+0x1e8a/0x66d0 drivers/net/tun.c:1846 tun_chr_write_iter+0x3af/0x5d0 drivers/net/tun.c:2048 call_write_iter include/linux/fs.h:2084 [inline] new_sync_write fs/read_write.c:497 [inline] vfs_write+0x786/0x1200 fs/read_write.c:590 ksys_write+0x20f/0x4c0 fs/read_write.c:643 __do_sys_write fs/read_write.c:655 [inline] __se_sys_write fs/read_write.c:652 [inline] __x64_sys_write+0x93/0xd0 fs/read_write.c:652 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x6d/0x140 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b CPU: 0 PID: 5034 Comm: syz-executor331 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 CVE-2024-26641 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-26641.html CVE-2024-26641 https://bugzilla.suse.com/1221654 SUSE Bug 1221654 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL test for 'timing generator' in 'dcn21_set_pipe()' In "u32 otg_inst = pipe_ctx->stream_res.tg->inst;" pipe_ctx->stream_res.tg could be NULL, it is relying on the caller to ensure the tg is not NULL. CVE-2024-26661 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-26661.html CVE-2024-26661 https://bugzilla.suse.com/1222323 SUSE Bug 1222323 In the Linux kernel, the following vulnerability has been resolved: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() syzbot reported the following general protection fault [1]: general protection fault, probably for non-canonical address 0xdffffc0000000010: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000080-0x0000000000000087] ... RIP: 0010:tipc_udp_is_known_peer+0x9c/0x250 net/tipc/udp_media.c:291 ... Call Trace: <TASK> tipc_udp_nl_bearer_add+0x212/0x2f0 net/tipc/udp_media.c:646 tipc_nl_bearer_add+0x21e/0x360 net/tipc/bearer.c:1089 genl_family_rcv_msg_doit+0x1fc/0x2e0 net/netlink/genetlink.c:972 genl_family_rcv_msg net/netlink/genetlink.c:1052 [inline] genl_rcv_msg+0x561/0x800 net/netlink/genetlink.c:1067 netlink_rcv_skb+0x16b/0x440 net/netlink/af_netlink.c:2544 genl_rcv+0x28/0x40 net/netlink/genetlink.c:1076 netlink_unicast_kernel net/netlink/af_netlink.c:1341 [inline] netlink_unicast+0x53b/0x810 net/netlink/af_netlink.c:1367 netlink_sendmsg+0x8b7/0xd70 net/netlink/af_netlink.c:1909 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0xd5/0x180 net/socket.c:745 ____sys_sendmsg+0x6ac/0x940 net/socket.c:2584 ___sys_sendmsg+0x135/0x1d0 net/socket.c:2638 __sys_sendmsg+0x117/0x1e0 net/socket.c:2667 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x40/0x110 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b The cause of this issue is that when tipc_nl_bearer_add() is called with the TIPC_NLA_BEARER_UDP_OPTS attribute, tipc_udp_nl_bearer_add() is called even if the bearer is not UDP. tipc_udp_is_known_peer() called by tipc_udp_nl_bearer_add() assumes that the media_ptr field of the tipc_bearer has an udp_bearer type object, so the function goes crazy for non-UDP bearers. This patch fixes the issue by checking the bearer type before calling tipc_udp_nl_bearer_add() in tipc_nl_bearer_add(). CVE-2024-26663 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-26663.html CVE-2024-26663 https://bugzilla.suse.com/1222326 SUSE Bug 1222326 In the Linux kernel, the following vulnerability has been resolved: tunnels: fix out of bounds access when building IPv6 PMTU error If the ICMPv6 error is built from a non-linear skb we get the following splat, BUG: KASAN: slab-out-of-bounds in do_csum+0x220/0x240 Read of size 4 at addr ffff88811d402c80 by task netperf/820 CPU: 0 PID: 820 Comm: netperf Not tainted 6.8.0-rc1+ #543 ... kasan_report+0xd8/0x110 do_csum+0x220/0x240 csum_partial+0xc/0x20 skb_tunnel_check_pmtu+0xeb9/0x3280 vxlan_xmit_one+0x14c2/0x4080 vxlan_xmit+0xf61/0x5c00 dev_hard_start_xmit+0xfb/0x510 __dev_queue_xmit+0x7cd/0x32a0 br_dev_queue_push_xmit+0x39d/0x6a0 Use skb_checksum instead of csum_partial who cannot deal with non-linear SKBs. CVE-2024-26665 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-26665.html CVE-2024-26665 https://bugzilla.suse.com/1222328 SUSE Bug 1222328 In the Linux kernel, the following vulnerability has been resolved: tls: fix use-after-free on failed backlog decryption When the decrypt request goes to the backlog and crypto_aead_decrypt returns -EBUSY, tls_do_decryption will wait until all async decryptions have completed. If one of them fails, tls_do_decryption will return -EBADMSG and tls_decrypt_sg jumps to the error path, releasing all the pages. But the pages have been passed to the async callback, and have already been released by tls_decrypt_done. The only true async case is when crypto_aead_decrypt returns -EINPROGRESS. With -EBUSY, we already waited so we can tell tls_sw_recvmsg that the data is available for immediate copy, but we need to notify tls_decrypt_sg (via the new ->async_done flag) that the memory has already been released. CVE-2024-26800 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-26800.html CVE-2024-26800 https://bugzilla.suse.com/1222728 SUSE Bug 1222728 In the Linux kernel, the following vulnerability has been resolved: stmmac: Clear variable when destroying workqueue Currently when suspending driver and stopping workqueue it is checked whether workqueue is not NULL and if so, it is destroyed. Function destroy_workqueue() does drain queue and does clear variable, but it does not set workqueue variable to NULL. This can cause kernel/module panic if code attempts to clear workqueue that was not initialized. This scenario is possible when resuming suspended driver in stmmac_resume(), because there is no handling for failed stmmac_hw_setup(), which can fail and return if DMA engine has failed to initialize, and workqueue is initialized after DMA engine. Should DMA engine fail to initialize, resume will proceed normally, but interface won't work and TX queue will eventually timeout, causing 'Reset adapter' error. This then does destroy workqueue during reset process. And since workqueue is initialized after DMA engine and can be skipped, it will cause kernel/module panic. To secure against this possible crash, set workqueue variable to NULL when destroying workqueue. Log/backtrace from crash goes as follows: [88.031977]------------[ cut here ]------------ [88.031985]NETDEV WATCHDOG: eth0 (sxgmac): transmit queue 1 timed out [88.032017]WARNING: CPU: 0 PID: 0 at net/sched/sch_generic.c:477 dev_watchdog+0x390/0x398 <Skipping backtrace for watchdog timeout> [88.032251]---[ end trace e70de432e4d5c2c0 ]--- [88.032282]sxgmac 16d88000.ethernet eth0: Reset adapter. [88.036359]------------[ cut here ]------------ [88.036519]Call trace: [88.036523] flush_workqueue+0x3e4/0x430 [88.036528] drain_workqueue+0xc4/0x160 [88.036533] destroy_workqueue+0x40/0x270 [88.036537] stmmac_fpe_stop_wq+0x4c/0x70 [88.036541] stmmac_release+0x278/0x280 [88.036546] __dev_close_many+0xcc/0x158 [88.036551] dev_close_many+0xbc/0x190 [88.036555] dev_close.part.0+0x70/0xc0 [88.036560] dev_close+0x24/0x30 [88.036564] stmmac_service_task+0x110/0x140 [88.036569] process_one_work+0x1d8/0x4a0 [88.036573] worker_thread+0x54/0x408 [88.036578] kthread+0x164/0x170 [88.036583] ret_from_fork+0x10/0x20 [88.036588]---[ end trace e70de432e4d5c2c1 ]--- [88.036597]Unable to handle kernel NULL pointer dereference at virtual address 0000000000000004 CVE-2024-26802 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-26802.html CVE-2024-26802 https://bugzilla.suse.com/1222799 SUSE Bug 1222799 In the Linux kernel, the following vulnerability has been resolved: vfio/platform: Create persistent IRQ handlers The vfio-platform SET_IRQS ioctl currently allows loopback triggering of an interrupt before a signaling eventfd has been configured by the user, which thereby allows a NULL pointer dereference. Rather than register the IRQ relative to a valid trigger, register all IRQs in a disabled state in the device open path. This allows mask operations on the IRQ to nest within the overall enable state governed by a valid eventfd signal. This decouples @masked, protected by the @locked spinlock from @trigger, protected via the @igate mutex. In doing so, it's guaranteed that changes to @trigger cannot race the IRQ handlers because the IRQ handler is synchronously disabled before modifying the trigger, and loopback triggering of the IRQ via ioctl is safe due to serialization with trigger changes via igate. For compatibility, request_irq() failures are maintained to be local to the SET_IRQS ioctl rather than a fatal error in the open device path. This allows, for example, a userspace driver with polling mode support to continue to work regardless of moving the request_irq() call site. This necessarily blocks all SET_IRQS access to the failed index. CVE-2024-26813 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-26813.html CVE-2024-26813 https://bugzilla.suse.com/1222809 SUSE Bug 1222809 In the Linux kernel, the following vulnerability has been resolved: vfio/fsl-mc: Block calling interrupt handler without trigger The eventfd_ctx trigger pointer of the vfio_fsl_mc_irq object is initially NULL and may become NULL if the user sets the trigger eventfd to -1. The interrupt handler itself is guaranteed that trigger is always valid between request_irq() and free_irq(), but the loopback testing mechanisms to invoke the handler function need to test the trigger. The triggering and setting ioctl paths both make use of igate and are therefore mutually exclusive. The vfio-fsl-mc driver does not make use of irqfds, nor does it support any sort of masking operations, therefore unlike vfio-pci and vfio-platform, the flow can remain essentially unchanged. CVE-2024-26814 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-26814.html CVE-2024-26814 https://bugzilla.suse.com/1222810 SUSE Bug 1222810 In the Linux kernel, the following vulnerability has been resolved: hsr: Fix uninit-value access in hsr_get_node() KMSAN reported the following uninit-value access issue [1]: ===================================================== BUG: KMSAN: uninit-value in hsr_get_node+0xa2e/0xa40 net/hsr/hsr_framereg.c:246 hsr_get_node+0xa2e/0xa40 net/hsr/hsr_framereg.c:246 fill_frame_info net/hsr/hsr_forward.c:577 [inline] hsr_forward_skb+0xe12/0x30e0 net/hsr/hsr_forward.c:615 hsr_dev_xmit+0x1a1/0x270 net/hsr/hsr_device.c:223 __netdev_start_xmit include/linux/netdevice.h:4940 [inline] netdev_start_xmit include/linux/netdevice.h:4954 [inline] xmit_one net/core/dev.c:3548 [inline] dev_hard_start_xmit+0x247/0xa10 net/core/dev.c:3564 __dev_queue_xmit+0x33b8/0x5130 net/core/dev.c:4349 dev_queue_xmit include/linux/netdevice.h:3134 [inline] packet_xmit+0x9c/0x6b0 net/packet/af_packet.c:276 packet_snd net/packet/af_packet.c:3087 [inline] packet_sendmsg+0x8b1d/0x9f30 net/packet/af_packet.c:3119 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x735/0xa10 net/socket.c:2191 __do_sys_sendto net/socket.c:2203 [inline] __se_sys_sendto net/socket.c:2199 [inline] __x64_sys_sendto+0x125/0x1c0 net/socket.c:2199 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x6d/0x140 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b Uninit was created at: slab_post_alloc_hook+0x129/0xa70 mm/slab.h:768 slab_alloc_node mm/slub.c:3478 [inline] kmem_cache_alloc_node+0x5e9/0xb10 mm/slub.c:3523 kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:560 __alloc_skb+0x318/0x740 net/core/skbuff.c:651 alloc_skb include/linux/skbuff.h:1286 [inline] alloc_skb_with_frags+0xc8/0xbd0 net/core/skbuff.c:6334 sock_alloc_send_pskb+0xa80/0xbf0 net/core/sock.c:2787 packet_alloc_skb net/packet/af_packet.c:2936 [inline] packet_snd net/packet/af_packet.c:3030 [inline] packet_sendmsg+0x70e8/0x9f30 net/packet/af_packet.c:3119 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] __sys_sendto+0x735/0xa10 net/socket.c:2191 __do_sys_sendto net/socket.c:2203 [inline] __se_sys_sendto net/socket.c:2199 [inline] __x64_sys_sendto+0x125/0x1c0 net/socket.c:2199 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x6d/0x140 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b CPU: 1 PID: 5033 Comm: syz-executor334 Not tainted 6.7.0-syzkaller-00562-g9f8413c4a66f #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 ===================================================== If the packet type ID field in the Ethernet header is either ETH_P_PRP or ETH_P_HSR, but it is not followed by an HSR tag, hsr_get_skb_sequence_nr() reads an invalid value as a sequence number. This causes the above issue. This patch fixes the issue by returning NULL if the Ethernet header is not followed by an HSR tag. CVE-2024-26863 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-26863.html CVE-2024-26863 https://bugzilla.suse.com/1223021 SUSE Bug 1223021 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: Fix possible buffer overflow struct hci_dev_info has a fixed size name[8] field so in the event that hdev->name is bigger than that strcpy would attempt to write past its size, so this fixes this problem by switching to use strscpy. CVE-2024-26889 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-26889.html CVE-2024-26889 https://bugzilla.suse.com/1228195 SUSE Bug 1228195 In the Linux kernel, the following vulnerability has been resolved: tracing/trigger: Fix to return error if failed to alloc snapshot Fix register_snapshot_trigger() to return error code if it failed to allocate a snapshot instead of 0 (success). Unless that, it will register snapshot trigger without an error. CVE-2024-26920 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-26920.html CVE-2024-26920 https://bugzilla.suse.com/1228237 SUSE Bug 1228237 In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix unremoved procfs host directory regression Commit fc663711b944 ("scsi: core: Remove the /proc/scsi/${proc_name} directory earlier") fixed a bug related to modules loading/unloading, by adding a call to scsi_proc_hostdir_rm() on scsi_remove_host(). But that led to a potential duplicate call to the hostdir_rm() routine, since it's also called from scsi_host_dev_release(). That triggered a regression report, which was then fixed by commit be03df3d4bfe ("scsi: core: Fix a procfs host directory removal regression"). The fix just dropped the hostdir_rm() call from dev_release(). But it happens that this proc directory is created on scsi_host_alloc(), and that function "pairs" with scsi_host_dev_release(), while scsi_remove_host() pairs with scsi_add_host(). In other words, it seems the reason for removing the proc directory on dev_release() was meant to cover cases in which a SCSI host structure was allocated, but the call to scsi_add_host() didn't happen. And that pattern happens to exist in some error paths, for example. Syzkaller causes that by using USB raw gadget device, error'ing on usb-storage driver, at usb_stor_probe2(). By checking that path, we can see that the BadDevice label leads to a scsi_host_put() after a SCSI host allocation, but there's no call to scsi_add_host() in such path. That leads to messages like this in dmesg (and a leak of the SCSI host proc structure): usb-storage 4-1:87.51: USB Mass Storage device detected proc_dir_entry 'scsi/usb-storage' already registered WARNING: CPU: 1 PID: 3519 at fs/proc/generic.c:377 proc_register+0x347/0x4e0 fs/proc/generic.c:376 The proper fix seems to still call scsi_proc_hostdir_rm() on dev_release(), but guard that with the state check for SHOST_CREATED; there is even a comment in scsi_host_dev_release() detailing that: such conditional is meant for cases where the SCSI host was allocated but there was no calls to {add,remove}_host(), like the usb-storage case. This is what we propose here and with that, the error path of usb-storage does not trigger the warning anymore. CVE-2024-26935 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-26935.html CVE-2024-26935 https://bugzilla.suse.com/1223675 SUSE Bug 1223675 In the Linux kernel, the following vulnerability has been resolved: mac802154: fix llsec key resources release in mac802154_llsec_key_del mac802154_llsec_key_del() can free resources of a key directly without following the RCU rules for waiting before the end of a grace period. This may lead to use-after-free in case llsec_lookup_key() is traversing the list of keys in parallel with a key deletion: refcount_t: addition on 0; use-after-free. WARNING: CPU: 4 PID: 16000 at lib/refcount.c:25 refcount_warn_saturate+0x162/0x2a0 Modules linked in: CPU: 4 PID: 16000 Comm: wpan-ping Not tainted 6.7.0 #19 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 RIP: 0010:refcount_warn_saturate+0x162/0x2a0 Call Trace: <TASK> llsec_lookup_key.isra.0+0x890/0x9e0 mac802154_llsec_encrypt+0x30c/0x9c0 ieee802154_subif_start_xmit+0x24/0x1e0 dev_hard_start_xmit+0x13e/0x690 sch_direct_xmit+0x2ae/0xbc0 __dev_queue_xmit+0x11dd/0x3c20 dgram_sendmsg+0x90b/0xd60 __sys_sendto+0x466/0x4c0 __x64_sys_sendto+0xe0/0x1c0 do_syscall_64+0x45/0xf0 entry_SYSCALL_64_after_hwframe+0x6e/0x76 Also, ieee802154_llsec_key_entry structures are not freed by mac802154_llsec_key_del(): unreferenced object 0xffff8880613b6980 (size 64): comm "iwpan", pid 2176, jiffies 4294761134 (age 60.475s) hex dump (first 32 bytes): 78 0d 8f 18 80 88 ff ff 22 01 00 00 00 00 ad de x......."....... 00 00 00 00 00 00 00 00 03 00 cd ab 00 00 00 00 ................ backtrace: [<ffffffff81dcfa62>] __kmem_cache_alloc_node+0x1e2/0x2d0 [<ffffffff81c43865>] kmalloc_trace+0x25/0xc0 [<ffffffff88968b09>] mac802154_llsec_key_add+0xac9/0xcf0 [<ffffffff8896e41a>] ieee802154_add_llsec_key+0x5a/0x80 [<ffffffff8892adc6>] nl802154_add_llsec_key+0x426/0x5b0 [<ffffffff86ff293e>] genl_family_rcv_msg_doit+0x1fe/0x2f0 [<ffffffff86ff46d1>] genl_rcv_msg+0x531/0x7d0 [<ffffffff86fee7a9>] netlink_rcv_skb+0x169/0x440 [<ffffffff86ff1d88>] genl_rcv+0x28/0x40 [<ffffffff86fec15c>] netlink_unicast+0x53c/0x820 [<ffffffff86fecd8b>] netlink_sendmsg+0x93b/0xe60 [<ffffffff86b91b35>] ____sys_sendmsg+0xac5/0xca0 [<ffffffff86b9c3dd>] ___sys_sendmsg+0x11d/0x1c0 [<ffffffff86b9c65a>] __sys_sendmsg+0xfa/0x1d0 [<ffffffff88eadbf5>] do_syscall_64+0x45/0xf0 [<ffffffff890000ea>] entry_SYSCALL_64_after_hwframe+0x6e/0x76 Handle the proper resource release in the RCU callback function mac802154_llsec_key_del_rcu(). Note that if llsec_lookup_key() finds a key, it gets a refcount via llsec_key_get() and locally copies key id from key_entry (which is a list element). So it's safe to call llsec_key_put() and free the list entry after the RCU grace period elapses. Found by Linux Verification Center (linuxtesting.org). CVE-2024-26961 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-26961.html CVE-2024-26961 https://bugzilla.suse.com/1223652 SUSE Bug 1223652 In the Linux kernel, the following vulnerability has been resolved: KVM: Always flush async #PF workqueue when vCPU is being destroyed Always flush the per-vCPU async #PF workqueue when a vCPU is clearing its completion queue, e.g. when a VM and all its vCPUs is being destroyed. KVM must ensure that none of its workqueue callbacks is running when the last reference to the KVM _module_ is put. Gifting a reference to the associated VM prevents the workqueue callback from dereferencing freed vCPU/VM memory, but does not prevent the KVM module from being unloaded before the callback completes. Drop the misguided VM refcount gifting, as calling kvm_put_kvm() from async_pf_execute() if kvm_put_kvm() flushes the async #PF workqueue will result in deadlock. async_pf_execute() can't return until kvm_put_kvm() finishes, and kvm_put_kvm() can't return until async_pf_execute() finishes: WARNING: CPU: 8 PID: 251 at virt/kvm/kvm_main.c:1435 kvm_put_kvm+0x2d/0x320 [kvm] Modules linked in: vhost_net vhost vhost_iotlb tap kvm_intel kvm irqbypass CPU: 8 PID: 251 Comm: kworker/8:1 Tainted: G W 6.6.0-rc1-e7af8d17224a-x86/gmem-vm #119 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 Workqueue: events async_pf_execute [kvm] RIP: 0010:kvm_put_kvm+0x2d/0x320 [kvm] Call Trace: <TASK> async_pf_execute+0x198/0x260 [kvm] process_one_work+0x145/0x2d0 worker_thread+0x27e/0x3a0 kthread+0xba/0xe0 ret_from_fork+0x2d/0x50 ret_from_fork_asm+0x11/0x20 </TASK> ---[ end trace 0000000000000000 ]--- INFO: task kworker/8:1:251 blocked for more than 120 seconds. Tainted: G W 6.6.0-rc1-e7af8d17224a-x86/gmem-vm #119 "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. task:kworker/8:1 state:D stack:0 pid:251 ppid:2 flags:0x00004000 Workqueue: events async_pf_execute [kvm] Call Trace: <TASK> __schedule+0x33f/0xa40 schedule+0x53/0xc0 schedule_timeout+0x12a/0x140 __wait_for_common+0x8d/0x1d0 __flush_work.isra.0+0x19f/0x2c0 kvm_clear_async_pf_completion_queue+0x129/0x190 [kvm] kvm_arch_destroy_vm+0x78/0x1b0 [kvm] kvm_put_kvm+0x1c1/0x320 [kvm] async_pf_execute+0x198/0x260 [kvm] process_one_work+0x145/0x2d0 worker_thread+0x27e/0x3a0 kthread+0xba/0xe0 ret_from_fork+0x2d/0x50 ret_from_fork_asm+0x11/0x20 </TASK> If kvm_clear_async_pf_completion_queue() actually flushes the workqueue, then there's no need to gift async_pf_execute() a reference because all invocations of async_pf_execute() will be forced to complete before the vCPU and its VM are destroyed/freed. And that in turn fixes the module unloading bug as __fput() won't do module_put() on the last vCPU reference until the vCPU has been freed, e.g. if closing the vCPU file also puts the last reference to the KVM module. Note that kvm_check_async_pf_completion() may also take the work item off the completion queue and so also needs to flush the work queue, as the work will not be seen by kvm_clear_async_pf_completion_queue(). Waiting on the workqueue could theoretically delay a vCPU due to waiting for the work to complete, but that's a very, very small chance, and likely a very small delay. kvm_arch_async_page_present_queued() unconditionally makes a new request, i.e. will effectively delay entering the guest, so the remaining work is really just: trace_kvm_async_pf_completed(addr, cr2_or_gpa); __kvm_vcpu_wake_up(vcpu); mmput(mm); and mmput() can't drop the last reference to the page tables if the vCPU is still alive, i.e. the vCPU won't get stuck tearing down page tables. Add a helper to do the flushing, specifically to deal with "wakeup all" work items, as they aren't actually work items, i.e. are never placed in a workqueue. Trying to flush a bogus workqueue entry rightly makes __flush_work() complain (kudos to whoever added that sanity check). Note, commit 5f6de5cbebee ("KVM: Prevent module exit until al ---truncated--- CVE-2024-26976 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-26976.html CVE-2024-26976 https://bugzilla.suse.com/1223635 SUSE Bug 1223635 In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: incorrect pppoe tuple pppoe traffic reaching ingress path does not match the flowtable entry because the pppoe header is expected to be at the network header offset. This bug causes a mismatch in the flow table lookup, so pppoe packets enter the classical forwarding path. CVE-2024-27015 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-27015.html CVE-2024-27015 https://bugzilla.suse.com/1223806 SUSE Bug 1223806 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() nft_unregister_obj() can concurrent with __nft_obj_type_get(), and there is not any protection when iterate over nf_tables_objects list in __nft_obj_type_get(). Therefore, there is potential data-race of nf_tables_objects list entry. Use list_for_each_entry_rcu() to iterate over nf_tables_objects list in __nft_obj_type_get(), and use rcu_read_lock() in the caller nft_obj_type_get() to protect the entire type query process. CVE-2024-27019 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-27019.html CVE-2024-27019 https://bugzilla.suse.com/1223813 SUSE Bug 1223813 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() nft_unregister_expr() can concurrent with __nft_expr_type_get(), and there is not any protection when iterate over nf_tables_expressions list in __nft_expr_type_get(). Therefore, there is potential data-race of nf_tables_expressions list entry. Use list_for_each_entry_rcu() to iterate over nf_tables_expressions list in __nft_expr_type_get(), and use rcu_read_lock() in the caller nft_expr_type_get() to protect the entire type query process. CVE-2024-27020 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-27020.html CVE-2024-27020 https://bugzilla.suse.com/1223815 SUSE Bug 1223815 In the Linux kernel, the following vulnerability has been resolved: nbd: null check for nla_nest_start nla_nest_start() may fail and return NULL. Insert a check and set errno based on other call sites within the same source code. CVE-2024-27025 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-27025.html CVE-2024-27025 https://bugzilla.suse.com/1223778 SUSE Bug 1223778 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: do not compare internal table flags on updates Restore skipping transaction if table update does not modify flags. CVE-2024-27065 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-27065.html CVE-2024-27065 https://bugzilla.suse.com/1223836 SUSE Bug 1223836 In the Linux kernel, the following vulnerability has been resolved: phonet/pep: fix racy skb_queue_empty() use The receive queues are protected by their respective spin-lock, not the socket lock. This could lead to skb_peek() unexpectedly returning NULL or a pointer to an already dequeued socket buffer. CVE-2024-27402 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-27402.html CVE-2024-27402 https://bugzilla.suse.com/1224414 SUSE Bug 1224414 In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Disable auto-enable of exclusive INTx IRQ Currently for devices requiring masking at the irqchip for INTx, ie. devices without DisINTx support, the IRQ is enabled in request_irq() and subsequently disabled as necessary to align with the masked status flag. This presents a window where the interrupt could fire between these events, resulting in the IRQ incrementing the disable depth twice. This would be unrecoverable for a user since the masked flag prevents nested enables through vfio. Instead, invert the logic using IRQF_NO_AUTOEN such that exclusive INTx is never auto-enabled, then unmask as required. CVE-2024-27437 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-27437.html CVE-2024-27437 https://bugzilla.suse.com/1222625 SUSE Bug 1222625 In the Linux kernel, the following vulnerability has been resolved: dm snapshot: fix lockup in dm_exception_table_exit There was reported lockup when we exit a snapshot with many exceptions. Fix this by adding "cond_resched" to the loop that frees the exceptions. CVE-2024-35805 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-35805.html CVE-2024-35805 https://bugzilla.suse.com/1224743 SUSE Bug 1224743 In the Linux kernel, the following vulnerability has been resolved: soc: fsl: qbman: Use raw spinlock for cgr_lock smp_call_function always runs its callback in hard IRQ context, even on PREEMPT_RT, where spinlocks can sleep. So we need to use a raw spinlock for cgr_lock to ensure we aren't waiting on a sleeping task. Although this bug has existed for a while, it was not apparent until commit ef2a8d5478b9 ("net: dpaa: Adjust queue depth on rate change") which invokes smp_call_function_single via qman_update_cgr_safe every time a link goes up or down. CVE-2024-35819 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-35819.html CVE-2024-35819 https://bugzilla.suse.com/1224683 SUSE Bug 1224683 In the Linux kernel, the following vulnerability has been resolved: net: mvpp2: clear BM pool before initialization Register value persist after booting the kernel using kexec which results in kernel panic. Thus clear the BM pool registers before initialisation to fix the issue. CVE-2024-35837 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-35837.html CVE-2024-35837 https://bugzilla.suse.com/1224500 SUSE Bug 1224500 In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash The rehash delayed work migrates filters from one region to another. This is done by iterating over all chunks (all the filters with the same priority) in the region and in each chunk iterating over all the filters. If the migration fails, the code tries to migrate the filters back to the old region. However, the rollback itself can also fail in which case another migration will be erroneously performed. Besides the fact that this ping pong is not a very good idea, it also creates a problem. Each virtual chunk references two chunks: The currently used one ('vchunk->chunk') and a backup ('vchunk->chunk2'). During migration the first holds the chunk we want to migrate filters to and the second holds the chunk we are migrating filters from. The code currently assumes - but does not verify - that the backup chunk does not exist (NULL) if the currently used chunk does not reference the target region. This assumption breaks when we are trying to rollback a rollback, resulting in the backup chunk being overwritten and leaked [1]. Fix by not rolling back a failed rollback and add a warning to avoid future cases. [1] WARNING: CPU: 5 PID: 1063 at lib/parman.c:291 parman_destroy+0x17/0x20 Modules linked in: CPU: 5 PID: 1063 Comm: kworker/5:11 Tainted: G W 6.9.0-rc2-custom-00784-gc6a05c468a0b #14 Hardware name: Mellanox Technologies Ltd. MSN3700/VMOD0005, BIOS 5.11 01/06/2019 Workqueue: mlxsw_core mlxsw_sp_acl_tcam_vregion_rehash_work RIP: 0010:parman_destroy+0x17/0x20 [...] Call Trace: <TASK> mlxsw_sp_acl_atcam_region_fini+0x19/0x60 mlxsw_sp_acl_tcam_region_destroy+0x49/0xf0 mlxsw_sp_acl_tcam_vregion_rehash_work+0x1f1/0x470 process_one_work+0x151/0x370 worker_thread+0x2cb/0x3e0 kthread+0xd0/0x100 ret_from_fork+0x34/0x50 ret_from_fork_asm+0x1a/0x30 </TASK> CVE-2024-35853 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-35853.html CVE-2024-35853 https://bugzilla.suse.com/1224604 SUSE Bug 1224604 In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash The rehash delayed work migrates filters from one region to another according to the number of available credits. The migrated from region is destroyed at the end of the work if the number of credits is non-negative as the assumption is that this is indicative of migration being complete. This assumption is incorrect as a non-negative number of credits can also be the result of a failed migration. The destruction of a region that still has filters referencing it can result in a use-after-free [1]. Fix by not destroying the region if migration failed. [1] BUG: KASAN: slab-use-after-free in mlxsw_sp_acl_ctcam_region_entry_remove+0x21d/0x230 Read of size 8 at addr ffff8881735319e8 by task kworker/0:31/3858 CPU: 0 PID: 3858 Comm: kworker/0:31 Tainted: G W 6.9.0-rc2-custom-00782-gf2275c2157d8 #5 Hardware name: Mellanox Technologies Ltd. MSN3700/VMOD0005, BIOS 5.11 01/06/2019 Workqueue: mlxsw_core mlxsw_sp_acl_tcam_vregion_rehash_work Call Trace: <TASK> dump_stack_lvl+0xc6/0x120 print_report+0xce/0x670 kasan_report+0xd7/0x110 mlxsw_sp_acl_ctcam_region_entry_remove+0x21d/0x230 mlxsw_sp_acl_ctcam_entry_del+0x2e/0x70 mlxsw_sp_acl_atcam_entry_del+0x81/0x210 mlxsw_sp_acl_tcam_vchunk_migrate_all+0x3cd/0xb50 mlxsw_sp_acl_tcam_vregion_rehash_work+0x157/0x1300 process_one_work+0x8eb/0x19b0 worker_thread+0x6c9/0xf70 kthread+0x2c9/0x3b0 ret_from_fork+0x4d/0x80 ret_from_fork_asm+0x1a/0x30 </TASK> Allocated by task 174: kasan_save_stack+0x33/0x60 kasan_save_track+0x14/0x30 __kasan_kmalloc+0x8f/0xa0 __kmalloc+0x19c/0x360 mlxsw_sp_acl_tcam_region_create+0xdf/0x9c0 mlxsw_sp_acl_tcam_vregion_rehash_work+0x954/0x1300 process_one_work+0x8eb/0x19b0 worker_thread+0x6c9/0xf70 kthread+0x2c9/0x3b0 ret_from_fork+0x4d/0x80 ret_from_fork_asm+0x1a/0x30 Freed by task 7: kasan_save_stack+0x33/0x60 kasan_save_track+0x14/0x30 kasan_save_free_info+0x3b/0x60 poison_slab_object+0x102/0x170 __kasan_slab_free+0x14/0x30 kfree+0xc1/0x290 mlxsw_sp_acl_tcam_region_destroy+0x272/0x310 mlxsw_sp_acl_tcam_vregion_rehash_work+0x731/0x1300 process_one_work+0x8eb/0x19b0 worker_thread+0x6c9/0xf70 kthread+0x2c9/0x3b0 ret_from_fork+0x4d/0x80 ret_from_fork_asm+0x1a/0x30 CVE-2024-35854 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-35854.html CVE-2024-35854 https://bugzilla.suse.com/1224636 SUSE Bug 1224636 In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update The rule activity update delayed work periodically traverses the list of configured rules and queries their activity from the device. As part of this task it accesses the entry pointed by 'ventry->entry', but this entry can be changed concurrently by the rehash delayed work, leading to a use-after-free [1]. Fix by closing the race and perform the activity query under the 'vregion->lock' mutex. [1] BUG: KASAN: slab-use-after-free in mlxsw_sp_acl_tcam_flower_rule_activity_get+0x121/0x140 Read of size 8 at addr ffff8881054ed808 by task kworker/0:18/181 CPU: 0 PID: 181 Comm: kworker/0:18 Not tainted 6.9.0-rc2-custom-00781-gd5ab772d32f7 #2 Hardware name: Mellanox Technologies Ltd. MSN3700/VMOD0005, BIOS 5.11 01/06/2019 Workqueue: mlxsw_core mlxsw_sp_acl_rule_activity_update_work Call Trace: <TASK> dump_stack_lvl+0xc6/0x120 print_report+0xce/0x670 kasan_report+0xd7/0x110 mlxsw_sp_acl_tcam_flower_rule_activity_get+0x121/0x140 mlxsw_sp_acl_rule_activity_update_work+0x219/0x400 process_one_work+0x8eb/0x19b0 worker_thread+0x6c9/0xf70 kthread+0x2c9/0x3b0 ret_from_fork+0x4d/0x80 ret_from_fork_asm+0x1a/0x30 </TASK> Allocated by task 1039: kasan_save_stack+0x33/0x60 kasan_save_track+0x14/0x30 __kasan_kmalloc+0x8f/0xa0 __kmalloc+0x19c/0x360 mlxsw_sp_acl_tcam_entry_create+0x7b/0x1f0 mlxsw_sp_acl_tcam_vchunk_migrate_all+0x30d/0xb50 mlxsw_sp_acl_tcam_vregion_rehash_work+0x157/0x1300 process_one_work+0x8eb/0x19b0 worker_thread+0x6c9/0xf70 kthread+0x2c9/0x3b0 ret_from_fork+0x4d/0x80 ret_from_fork_asm+0x1a/0x30 Freed by task 1039: kasan_save_stack+0x33/0x60 kasan_save_track+0x14/0x30 kasan_save_free_info+0x3b/0x60 poison_slab_object+0x102/0x170 __kasan_slab_free+0x14/0x30 kfree+0xc1/0x290 mlxsw_sp_acl_tcam_vchunk_migrate_all+0x3d7/0xb50 mlxsw_sp_acl_tcam_vregion_rehash_work+0x157/0x1300 process_one_work+0x8eb/0x19b0 worker_thread+0x6c9/0xf70 kthread+0x2c9/0x3b0 ret_from_fork+0x4d/0x80 ret_from_fork_asm+0x1a/0x30 CVE-2024-35855 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-35855.html CVE-2024-35855 https://bugzilla.suse.com/1224694 SUSE Bug 1224694 In the Linux kernel, the following vulnerability has been resolved: idpf: fix kernel panic on unknown packet types In the very rare case where a packet type is unknown to the driver, idpf_rx_process_skb_fields would return early without calling eth_type_trans to set the skb protocol / the network layer handler. This is especially problematic if tcpdump is running when such a packet is received, i.e. it would cause a kernel panic. Instead, call eth_type_trans for every single packet, even when the packet type is unknown. CVE-2024-35889 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-35889.html CVE-2024-35889 https://bugzilla.suse.com/1224517 SUSE Bug 1224517 In the Linux kernel, the following vulnerability has been resolved: gro: fix ownership transfer If packets are GROed with fraglist they might be segmented later on and continue their journey in the stack. In skb_segment_list those skbs can be reused as-is. This is an issue as their destructor was removed in skb_gro_receive_list but not the reference to their socket, and then they can't be orphaned. Fix this by also removing the reference to the socket. For example this could be observed, kernel BUG at include/linux/skbuff.h:3131! (skb_orphan) RIP: 0010:ip6_rcv_core+0x11bc/0x19a0 Call Trace: ipv6_list_rcv+0x250/0x3f0 __netif_receive_skb_list_core+0x49d/0x8f0 netif_receive_skb_list_internal+0x634/0xd40 napi_complete_done+0x1d2/0x7d0 gro_cell_poll+0x118/0x1f0 A similar construction is found in skb_gro_receive, apply the same change there. CVE-2024-35890 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-35890.html CVE-2024-35890 https://bugzilla.suse.com/1224516 SUSE Bug 1224516 In the Linux kernel, the following vulnerability has been resolved: net/sched: act_skbmod: prevent kernel-infoleak syzbot found that tcf_skbmod_dump() was copying four bytes from kernel stack to user space [1]. The issue here is that 'struct tc_skbmod' has a four bytes hole. We need to clear the structure before filling fields. [1] BUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:114 [inline] BUG: KMSAN: kernel-infoleak in copy_to_user_iter lib/iov_iter.c:24 [inline] BUG: KMSAN: kernel-infoleak in iterate_ubuf include/linux/iov_iter.h:29 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance2 include/linux/iov_iter.h:245 [inline] BUG: KMSAN: kernel-infoleak in iterate_and_advance include/linux/iov_iter.h:271 [inline] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0x366/0x2520 lib/iov_iter.c:185 instrument_copy_to_user include/linux/instrumented.h:114 [inline] copy_to_user_iter lib/iov_iter.c:24 [inline] iterate_ubuf include/linux/iov_iter.h:29 [inline] iterate_and_advance2 include/linux/iov_iter.h:245 [inline] iterate_and_advance include/linux/iov_iter.h:271 [inline] _copy_to_iter+0x366/0x2520 lib/iov_iter.c:185 copy_to_iter include/linux/uio.h:196 [inline] simple_copy_to_iter net/core/datagram.c:532 [inline] __skb_datagram_iter+0x185/0x1000 net/core/datagram.c:420 skb_copy_datagram_iter+0x5c/0x200 net/core/datagram.c:546 skb_copy_datagram_msg include/linux/skbuff.h:4050 [inline] netlink_recvmsg+0x432/0x1610 net/netlink/af_netlink.c:1962 sock_recvmsg_nosec net/socket.c:1046 [inline] sock_recvmsg+0x2c4/0x340 net/socket.c:1068 __sys_recvfrom+0x35a/0x5f0 net/socket.c:2242 __do_sys_recvfrom net/socket.c:2260 [inline] __se_sys_recvfrom net/socket.c:2256 [inline] __x64_sys_recvfrom+0x126/0x1d0 net/socket.c:2256 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 Uninit was stored to memory at: pskb_expand_head+0x30f/0x19d0 net/core/skbuff.c:2253 netlink_trim+0x2c2/0x330 net/netlink/af_netlink.c:1317 netlink_unicast+0x9f/0x1260 net/netlink/af_netlink.c:1351 nlmsg_unicast include/net/netlink.h:1144 [inline] nlmsg_notify+0x21d/0x2f0 net/netlink/af_netlink.c:2610 rtnetlink_send+0x73/0x90 net/core/rtnetlink.c:741 rtnetlink_maybe_send include/linux/rtnetlink.h:17 [inline] tcf_add_notify net/sched/act_api.c:2048 [inline] tcf_action_add net/sched/act_api.c:2071 [inline] tc_ctl_action+0x146e/0x19d0 net/sched/act_api.c:2119 rtnetlink_rcv_msg+0x1737/0x1900 net/core/rtnetlink.c:6595 netlink_rcv_skb+0x375/0x650 net/netlink/af_netlink.c:2559 rtnetlink_rcv+0x34/0x40 net/core/rtnetlink.c:6613 netlink_unicast_kernel net/netlink/af_netlink.c:1335 [inline] netlink_unicast+0xf4c/0x1260 net/netlink/af_netlink.c:1361 netlink_sendmsg+0x10df/0x11f0 net/netlink/af_netlink.c:1905 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x30f/0x380 net/socket.c:745 ____sys_sendmsg+0x877/0xb60 net/socket.c:2584 ___sys_sendmsg+0x28d/0x3c0 net/socket.c:2638 __sys_sendmsg net/socket.c:2667 [inline] __do_sys_sendmsg net/socket.c:2676 [inline] __se_sys_sendmsg net/socket.c:2674 [inline] __x64_sys_sendmsg+0x307/0x4a0 net/socket.c:2674 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 Uninit was stored to memory at: __nla_put lib/nlattr.c:1041 [inline] nla_put+0x1c6/0x230 lib/nlattr.c:1099 tcf_skbmod_dump+0x23f/0xc20 net/sched/act_skbmod.c:256 tcf_action_dump_old net/sched/act_api.c:1191 [inline] tcf_action_dump_1+0x85e/0x970 net/sched/act_api.c:1227 tcf_action_dump+0x1fd/0x460 net/sched/act_api.c:1251 tca_get_fill+0x519/0x7a0 net/sched/act_api.c:1628 tcf_add_notify_msg net/sched/act_api.c:2023 [inline] tcf_add_notify net/sched/act_api.c:2042 [inline] tcf_action_add net/sched/act_api.c:2071 [inline] tc_ctl_action+0x1365/0x19d0 net/sched/act_api.c:2119 rtnetlink_rcv_msg+0x1737/0x1900 net/core/rtnetlink.c:6595 netlink_rcv_skb+0x375/0x650 net/netlink/af_netli ---truncated--- CVE-2024-35893 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-35893.html CVE-2024-35893 https://bugzilla.suse.com/1224512 SUSE Bug 1224512 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: flush pending destroy work before exit_net release Similar to 2c9f0293280e ("netfilter: nf_tables: flush pending destroy work before netlink notifier") to address a race between exit_net and the destroy workqueue. The trace below shows an element to be released via destroy workqueue while exit_net path (triggered via module removal) has already released the set that is used in such transaction. [ 1360.547789] BUG: KASAN: slab-use-after-free in nf_tables_trans_destroy_work+0x3f5/0x590 [nf_tables] [ 1360.547861] Read of size 8 at addr ffff888140500cc0 by task kworker/4:1/152465 [ 1360.547870] CPU: 4 PID: 152465 Comm: kworker/4:1 Not tainted 6.8.0+ #359 [ 1360.547882] Workqueue: events nf_tables_trans_destroy_work [nf_tables] [ 1360.547984] Call Trace: [ 1360.547991] <TASK> [ 1360.547998] dump_stack_lvl+0x53/0x70 [ 1360.548014] print_report+0xc4/0x610 [ 1360.548026] ? __virt_addr_valid+0xba/0x160 [ 1360.548040] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1360.548054] ? nf_tables_trans_destroy_work+0x3f5/0x590 [nf_tables] [ 1360.548176] kasan_report+0xae/0xe0 [ 1360.548189] ? nf_tables_trans_destroy_work+0x3f5/0x590 [nf_tables] [ 1360.548312] nf_tables_trans_destroy_work+0x3f5/0x590 [nf_tables] [ 1360.548447] ? __pfx_nf_tables_trans_destroy_work+0x10/0x10 [nf_tables] [ 1360.548577] ? _raw_spin_unlock_irq+0x18/0x30 [ 1360.548591] process_one_work+0x2f1/0x670 [ 1360.548610] worker_thread+0x4d3/0x760 [ 1360.548627] ? __pfx_worker_thread+0x10/0x10 [ 1360.548640] kthread+0x16b/0x1b0 [ 1360.548653] ? __pfx_kthread+0x10/0x10 [ 1360.548665] ret_from_fork+0x2f/0x50 [ 1360.548679] ? __pfx_kthread+0x10/0x10 [ 1360.548690] ret_from_fork_asm+0x1a/0x30 [ 1360.548707] </TASK> [ 1360.548719] Allocated by task 192061: [ 1360.548726] kasan_save_stack+0x20/0x40 [ 1360.548739] kasan_save_track+0x14/0x30 [ 1360.548750] __kasan_kmalloc+0x8f/0xa0 [ 1360.548760] __kmalloc_node+0x1f1/0x450 [ 1360.548771] nf_tables_newset+0x10c7/0x1b50 [nf_tables] [ 1360.548883] nfnetlink_rcv_batch+0xbc4/0xdc0 [nfnetlink] [ 1360.548909] nfnetlink_rcv+0x1a8/0x1e0 [nfnetlink] [ 1360.548927] netlink_unicast+0x367/0x4f0 [ 1360.548935] netlink_sendmsg+0x34b/0x610 [ 1360.548944] ____sys_sendmsg+0x4d4/0x510 [ 1360.548953] ___sys_sendmsg+0xc9/0x120 [ 1360.548961] __sys_sendmsg+0xbe/0x140 [ 1360.548971] do_syscall_64+0x55/0x120 [ 1360.548982] entry_SYSCALL_64_after_hwframe+0x55/0x5d [ 1360.548994] Freed by task 192222: [ 1360.548999] kasan_save_stack+0x20/0x40 [ 1360.549009] kasan_save_track+0x14/0x30 [ 1360.549019] kasan_save_free_info+0x3b/0x60 [ 1360.549028] poison_slab_object+0x100/0x180 [ 1360.549036] __kasan_slab_free+0x14/0x30 [ 1360.549042] kfree+0xb6/0x260 [ 1360.549049] __nft_release_table+0x473/0x6a0 [nf_tables] [ 1360.549131] nf_tables_exit_net+0x170/0x240 [nf_tables] [ 1360.549221] ops_exit_list+0x50/0xa0 [ 1360.549229] free_exit_list+0x101/0x140 [ 1360.549236] unregister_pernet_operations+0x107/0x160 [ 1360.549245] unregister_pernet_subsys+0x1c/0x30 [ 1360.549254] nf_tables_module_exit+0x43/0x80 [nf_tables] [ 1360.549345] __do_sys_delete_module+0x253/0x370 [ 1360.549352] do_syscall_64+0x55/0x120 [ 1360.549360] entry_SYSCALL_64_after_hwframe+0x55/0x5d (gdb) list *__nft_release_table+0x473 0x1e033 is in __nft_release_table (net/netfilter/nf_tables_api.c:11354). 11349 list_for_each_entry_safe(flowtable, nf, &table->flowtables, list) { 11350 list_del(&flowtable->list); 11351 nft_use_dec(&table->use); 11352 nf_tables_flowtable_destroy(flowtable); 11353 } 11354 list_for_each_entry_safe(set, ns, &table->sets, list) { 11355 list_del(&set->list); 11356 nft_use_dec(&table->use); 11357 if (set->flags & (NFT_SET_MAP | NFT_SET_OBJECT)) 11358 nft_map_deactivat ---truncated--- CVE-2024-35899 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-35899.html CVE-2024-35899 https://bugzilla.suse.com/1224499 SUSE Bug 1224499 In the Linux kernel, the following vulnerability has been resolved: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() Many syzbot reports show extreme rtnl pressure, and many of them hint that smc acquires rtnl in netns creation for no good reason [1] This patch returns early from smc_pnet_net_init() if there is no netdevice yet. I am not even sure why smc_pnet_create_pnetids_list() even exists, because smc_pnet_netdev_event() is also calling smc_pnet_add_base_pnetid() when handling NETDEV_UP event. [1] extract of typical syzbot reports 2 locks held by syz-executor.3/12252: #0: ffffffff8f369610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 net/core/net_namespace.c:491 #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_create_pnetids_list net/smc/smc_pnet.c:809 [inline] #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 net/smc/smc_pnet.c:878 2 locks held by syz-executor.4/12253: #0: ffffffff8f369610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 net/core/net_namespace.c:491 #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_create_pnetids_list net/smc/smc_pnet.c:809 [inline] #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 net/smc/smc_pnet.c:878 2 locks held by syz-executor.1/12257: #0: ffffffff8f369610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 net/core/net_namespace.c:491 #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_create_pnetids_list net/smc/smc_pnet.c:809 [inline] #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 net/smc/smc_pnet.c:878 2 locks held by syz-executor.2/12261: #0: ffffffff8f369610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 net/core/net_namespace.c:491 #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_create_pnetids_list net/smc/smc_pnet.c:809 [inline] #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 net/smc/smc_pnet.c:878 2 locks held by syz-executor.0/12265: #0: ffffffff8f369610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 net/core/net_namespace.c:491 #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_create_pnetids_list net/smc/smc_pnet.c:809 [inline] #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 net/smc/smc_pnet.c:878 2 locks held by syz-executor.3/12268: #0: ffffffff8f369610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 net/core/net_namespace.c:491 #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_create_pnetids_list net/smc/smc_pnet.c:809 [inline] #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 net/smc/smc_pnet.c:878 2 locks held by syz-executor.4/12271: #0: ffffffff8f369610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 net/core/net_namespace.c:491 #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_create_pnetids_list net/smc/smc_pnet.c:809 [inline] #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 net/smc/smc_pnet.c:878 2 locks held by syz-executor.1/12274: #0: ffffffff8f369610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 net/core/net_namespace.c:491 #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_create_pnetids_list net/smc/smc_pnet.c:809 [inline] #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 net/smc/smc_pnet.c:878 2 locks held by syz-executor.2/12280: #0: ffffffff8f369610 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c7/0x7b0 net/core/net_namespace.c:491 #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_create_pnetids_list net/smc/smc_pnet.c:809 [inline] #1: ffffffff8f375b88 (rtnl_mutex){+.+.}-{3:3}, at: smc_pnet_net_init+0x10a/0x1e0 net/smc/smc_pnet.c:878 CVE-2024-35934 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-35934.html CVE-2024-35934 https://bugzilla.suse.com/1224641 SUSE Bug 1224641 In the Linux kernel, the following vulnerability has been resolved: btrfs: make sure that WRITTEN is set on all metadata blocks We previously would call btrfs_check_leaf() if we had the check integrity code enabled, which meant that we could only run the extended leaf checks if we had WRITTEN set on the header flags. This leaves a gap in our checking, because we could end up with corruption on disk where WRITTEN isn't set on the leaf, and then the extended leaf checks don't get run which we rely on to validate all of the item pointers to make sure we don't access memory outside of the extent buffer. However, since 732fab95abe2 ("btrfs: check-integrity: remove CONFIG_BTRFS_FS_CHECK_INTEGRITY option") we no longer call btrfs_check_leaf() from btrfs_mark_buffer_dirty(), which means we only ever call it on blocks that are being written out, and thus have WRITTEN set, or that are being read in, which should have WRITTEN set. Add checks to make sure we have WRITTEN set appropriately, and then make sure __btrfs_check_leaf() always does the item checking. This will protect us from file systems that have been corrupted and no longer have WRITTEN set on some of the blocks. This was hit on a crafted image tweaking the WRITTEN bit and reported by KASAN as out-of-bound access in the eb accessors. The example is a dir item at the end of an eb. [2.042] BTRFS warning (device loop1): bad eb member start: ptr 0x3fff start 30572544 member offset 16410 size 2 [2.040] general protection fault, probably for non-canonical address 0xe0009d1000000003: 0000 [#1] PREEMPT SMP KASAN NOPTI [2.537] KASAN: maybe wild-memory-access in range [0x0005088000000018-0x000508800000001f] [2.729] CPU: 0 PID: 2587 Comm: mount Not tainted 6.8.2 #1 [2.729] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 [2.621] RIP: 0010:btrfs_get_16+0x34b/0x6d0 [2.621] RSP: 0018:ffff88810871fab8 EFLAGS: 00000206 [2.621] RAX: 0000a11000000003 RBX: ffff888104ff8720 RCX: ffff88811b2288c0 [2.621] RDX: dffffc0000000000 RSI: ffffffff81dd8aca RDI: ffff88810871f748 [2.621] RBP: 000000000000401a R08: 0000000000000001 R09: ffffed10210e3ee9 [2.621] R10: ffff88810871f74f R11: 205d323430333737 R12: 000000000000001a [2.621] R13: 000508800000001a R14: 1ffff110210e3f5d R15: ffffffff850011e8 [2.621] FS: 00007f56ea275840(0000) GS:ffff88811b200000(0000) knlGS:0000000000000000 [2.621] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [2.621] CR2: 00007febd13b75c0 CR3: 000000010bb50000 CR4: 00000000000006f0 [2.621] Call Trace: [2.621] <TASK> [2.621] ? show_regs+0x74/0x80 [2.621] ? die_addr+0x46/0xc0 [2.621] ? exc_general_protection+0x161/0x2a0 [2.621] ? asm_exc_general_protection+0x26/0x30 [2.621] ? btrfs_get_16+0x33a/0x6d0 [2.621] ? btrfs_get_16+0x34b/0x6d0 [2.621] ? btrfs_get_16+0x33a/0x6d0 [2.621] ? __pfx_btrfs_get_16+0x10/0x10 [2.621] ? __pfx_mutex_unlock+0x10/0x10 [2.621] btrfs_match_dir_item_name+0x101/0x1a0 [2.621] btrfs_lookup_dir_item+0x1f3/0x280 [2.621] ? __pfx_btrfs_lookup_dir_item+0x10/0x10 [2.621] btrfs_get_tree+0xd25/0x1910 [ copy more details from report ] CVE-2024-35949 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-35949.html CVE-2024-35949 https://bugzilla.suse.com/1224700 SUSE Bug 1224700 https://bugzilla.suse.com/1229273 SUSE Bug 1229273 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Register devlink first under devlink lock In case device is having a non fatal FW error during probe, the driver will report the error to user via devlink. This will trigger a WARN_ON, since mlx5 is calling devlink_register() last. In order to avoid the WARN_ON[1], change mlx5 to invoke devl_register() first under devlink lock. [1] WARNING: CPU: 5 PID: 227 at net/devlink/health.c:483 devlink_recover_notify.constprop.0+0xb8/0xc0 CPU: 5 PID: 227 Comm: kworker/u16:3 Not tainted 6.4.0-rc5_for_upstream_min_debug_2023_06_12_12_38 #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014 Workqueue: mlx5_health0000:08:00.0 mlx5_fw_reporter_err_work [mlx5_core] RIP: 0010:devlink_recover_notify.constprop.0+0xb8/0xc0 Call Trace: <TASK> ? __warn+0x79/0x120 ? devlink_recover_notify.constprop.0+0xb8/0xc0 ? report_bug+0x17c/0x190 ? handle_bug+0x3c/0x60 ? exc_invalid_op+0x14/0x70 ? asm_exc_invalid_op+0x16/0x20 ? devlink_recover_notify.constprop.0+0xb8/0xc0 devlink_health_report+0x4a/0x1c0 mlx5_fw_reporter_err_work+0xa4/0xd0 [mlx5_core] process_one_work+0x1bb/0x3c0 ? process_one_work+0x3c0/0x3c0 worker_thread+0x4d/0x3c0 ? process_one_work+0x3c0/0x3c0 kthread+0xc6/0xf0 ? kthread_complete_and_exit+0x20/0x20 ret_from_fork+0x1f/0x30 </TASK> CVE-2024-35961 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-35961.html CVE-2024-35961 https://bugzilla.suse.com/1224585 SUSE Bug 1224585 In the Linux kernel, the following vulnerability has been resolved: raid1: fix use-after-free for original bio in raid1_write_request() r1_bio->bios[] is used to record new bios that will be issued to underlying disks, however, in raid1_write_request(), r1_bio->bios[] will set to the original bio temporarily. Meanwhile, if blocked rdev is set, free_r1bio() will be called causing that all r1_bio->bios[] to be freed: raid1_write_request() r1_bio = alloc_r1bio(mddev, bio); -> r1_bio->bios[] is NULL for (i = 0; i < disks; i++) -> for each rdev in conf // first rdev is normal r1_bio->bios[0] = bio; -> set to original bio // second rdev is blocked if (test_bit(Blocked, &rdev->flags)) break if (blocked_rdev) free_r1bio() put_all_bios() bio_put(r1_bio->bios[0]) -> original bio is freed Test scripts: mdadm -CR /dev/md0 -l1 -n4 /dev/sd[abcd] --assume-clean fio -filename=/dev/md0 -ioengine=libaio -rw=write -bs=4k -numjobs=1 \ -iodepth=128 -name=test -direct=1 echo blocked > /sys/block/md0/md/rd2/state Test result: BUG bio-264 (Not tainted): Object already free ----------------------------------------------------------------------------- Allocated in mempool_alloc_slab+0x24/0x50 age=1 cpu=1 pid=869 kmem_cache_alloc+0x324/0x480 mempool_alloc_slab+0x24/0x50 mempool_alloc+0x6e/0x220 bio_alloc_bioset+0x1af/0x4d0 blkdev_direct_IO+0x164/0x8a0 blkdev_write_iter+0x309/0x440 aio_write+0x139/0x2f0 io_submit_one+0x5ca/0xb70 __do_sys_io_submit+0x86/0x270 __x64_sys_io_submit+0x22/0x30 do_syscall_64+0xb1/0x210 entry_SYSCALL_64_after_hwframe+0x6c/0x74 Freed in mempool_free_slab+0x1f/0x30 age=1 cpu=1 pid=869 kmem_cache_free+0x28c/0x550 mempool_free_slab+0x1f/0x30 mempool_free+0x40/0x100 bio_free+0x59/0x80 bio_put+0xf0/0x220 free_r1bio+0x74/0xb0 raid1_make_request+0xadf/0x1150 md_handle_request+0xc7/0x3b0 md_submit_bio+0x76/0x130 __submit_bio+0xd8/0x1d0 submit_bio_noacct_nocheck+0x1eb/0x5c0 submit_bio_noacct+0x169/0xd40 submit_bio+0xee/0x1d0 blkdev_direct_IO+0x322/0x8a0 blkdev_write_iter+0x309/0x440 aio_write+0x139/0x2f0 Since that bios for underlying disks are not allocated yet, fix this problem by using mempool_free() directly to free the r1_bio. CVE-2024-35979 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-35979.html CVE-2024-35979 https://bugzilla.suse.com/1224572 SUSE Bug 1224572 In the Linux kernel, the following vulnerability has been resolved: ACPI: CPPC: Use access_width over bit_width for system memory accesses To align with ACPI 6.3+, since bit_width can be any 8-bit value, it cannot be depended on to be always on a clean 8b boundary. This was uncovered on the Cobalt 100 platform. SError Interrupt on CPU26, code 0xbe000011 -- SError CPU: 26 PID: 1510 Comm: systemd-udevd Not tainted 5.15.2.1-13 #1 Hardware name: MICROSOFT CORPORATION, BIOS MICROSOFT CORPORATION pstate: 62400009 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) pc : cppc_get_perf_caps+0xec/0x410 lr : cppc_get_perf_caps+0xe8/0x410 sp : ffff8000155ab730 x29: ffff8000155ab730 x28: ffff0080139d0038 x27: ffff0080139d0078 x26: 0000000000000000 x25: ffff0080139d0058 x24: 00000000ffffffff x23: ffff0080139d0298 x22: ffff0080139d0278 x21: 0000000000000000 x20: ffff00802b251910 x19: ffff0080139d0000 x18: ffffffffffffffff x17: 0000000000000000 x16: ffffdc7e111bad04 x15: ffff00802b251008 x14: ffffffffffffffff x13: ffff013f1fd63300 x12: 0000000000000006 x11: ffffdc7e128f4420 x10: 0000000000000000 x9 : ffffdc7e111badec x8 : ffff00802b251980 x7 : 0000000000000000 x6 : ffff0080139d0028 x5 : 0000000000000000 x4 : ffff0080139d0018 x3 : 00000000ffffffff x2 : 0000000000000008 x1 : ffff8000155ab7a0 x0 : 0000000000000000 Kernel panic - not syncing: Asynchronous SError Interrupt CPU: 26 PID: 1510 Comm: systemd-udevd Not tainted 5.15.2.1-13 #1 Hardware name: MICROSOFT CORPORATION, BIOS MICROSOFT CORPORATION Call trace: dump_backtrace+0x0/0x1e0 show_stack+0x24/0x30 dump_stack_lvl+0x8c/0xb8 dump_stack+0x18/0x34 panic+0x16c/0x384 add_taint+0x0/0xc0 arm64_serror_panic+0x7c/0x90 arm64_is_fatal_ras_serror+0x34/0xa4 do_serror+0x50/0x6c el1h_64_error_handler+0x40/0x74 el1h_64_error+0x7c/0x80 cppc_get_perf_caps+0xec/0x410 cppc_cpufreq_cpu_init+0x74/0x400 [cppc_cpufreq] cpufreq_online+0x2dc/0xa30 cpufreq_add_dev+0xc0/0xd4 subsys_interface_register+0x134/0x14c cpufreq_register_driver+0x1b0/0x354 cppc_cpufreq_init+0x1a8/0x1000 [cppc_cpufreq] do_one_initcall+0x50/0x250 do_init_module+0x60/0x27c load_module+0x2300/0x2570 __do_sys_finit_module+0xa8/0x114 __arm64_sys_finit_module+0x2c/0x3c invoke_syscall+0x78/0x100 el0_svc_common.constprop.0+0x180/0x1a0 do_el0_svc+0x84/0xa0 el0_svc+0x2c/0xc0 el0t_64_sync_handler+0xa4/0x12c el0t_64_sync+0x1a4/0x1a8 Instead, use access_width to determine the size and use the offset and width to shift and mask the bits to read/write out. Make sure to add a check for system memory since pcc redefines the access_width to subspace id. If access_width is not set, then fall back to using bit_width. [ rjw: Subject and changelog edits, comment adjustments ] CVE-2024-35995 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-35995.html CVE-2024-35995 https://bugzilla.suse.com/1224557 SUSE Bug 1224557 In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb: fix missing hugetlb_lock for resv uncharge There is a recent report on UFFDIO_COPY over hugetlb: https://lore.kernel.org/all/000000000000ee06de0616177560@google.com/ 350: lockdep_assert_held(&hugetlb_lock); Should be an issue in hugetlb but triggered in an userfault context, where it goes into the unlikely path where two threads modifying the resv map together. Mike has a fix in that path for resv uncharge but it looks like the locking criteria was overlooked: hugetlb_cgroup_uncharge_folio_rsvd() will update the cgroup pointer, so it requires to be called with the lock held. CVE-2024-36000 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36000.html CVE-2024-36000 https://bugzilla.suse.com/1224548 SUSE Bug 1224548 In the Linux kernel, the following vulnerability has been resolved: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue Issue reported by customer during SRIOV testing, call trace: When both i40e and the i40iw driver are loaded, a warning in check_flush_dependency is being triggered. This seems to be because of the i40e driver workqueue is allocated with the WQ_MEM_RECLAIM flag, and the i40iw one is not. Similar error was encountered on ice too and it was fixed by removing the flag. Do the same for i40e too. [Feb 9 09:08] ------------[ cut here ]------------ [ +0.000004] workqueue: WQ_MEM_RECLAIM i40e:i40e_service_task [i40e] is flushing !WQ_MEM_RECLAIM infiniband:0x0 [ +0.000060] WARNING: CPU: 0 PID: 937 at kernel/workqueue.c:2966 check_flush_dependency+0x10b/0x120 [ +0.000007] Modules linked in: snd_seq_dummy snd_hrtimer snd_seq snd_timer snd_seq_device snd soundcore nls_utf8 cifs cifs_arc4 nls_ucs2_utils rdma_cm iw_cm ib_cm cifs_md4 dns_resolver netfs qrtr rfkill sunrpc vfat fat intel_rapl_msr intel_rapl_common irdma intel_uncore_frequency intel_uncore_frequency_common ice ipmi_ssif isst_if_common skx_edac nfit libnvdimm x86_pkg_temp_thermal intel_powerclamp gnss coretemp ib_uverbs rapl intel_cstate ib_core iTCO_wdt iTCO_vendor_support acpi_ipmi mei_me ipmi_si intel_uncore ioatdma i2c_i801 joydev pcspkr mei ipmi_devintf lpc_ich intel_pch_thermal i2c_smbus ipmi_msghandler acpi_power_meter acpi_pad xfs libcrc32c ast sd_mod drm_shmem_helper t10_pi drm_kms_helper sg ixgbe drm i40e ahci crct10dif_pclmul libahci crc32_pclmul igb crc32c_intel libata ghash_clmulni_intel i2c_algo_bit mdio dca wmi dm_mirror dm_region_hash dm_log dm_mod fuse [ +0.000050] CPU: 0 PID: 937 Comm: kworker/0:3 Kdump: loaded Not tainted 6.8.0-rc2-Feb-net_dev-Qiueue-00279-gbd43c5687e05 #1 [ +0.000003] Hardware name: Intel Corporation S2600BPB/S2600BPB, BIOS SE5C620.86B.02.01.0013.121520200651 12/15/2020 [ +0.000001] Workqueue: i40e i40e_service_task [i40e] [ +0.000024] RIP: 0010:check_flush_dependency+0x10b/0x120 [ +0.000003] Code: ff 49 8b 54 24 18 48 8d 8b b0 00 00 00 49 89 e8 48 81 c6 b0 00 00 00 48 c7 c7 b0 97 fa 9f c6 05 8a cc 1f 02 01 e8 35 b3 fd ff <0f> 0b e9 10 ff ff ff 80 3d 78 cc 1f 02 00 75 94 e9 46 ff ff ff 90 [ +0.000002] RSP: 0018:ffffbd294976bcf8 EFLAGS: 00010282 [ +0.000002] RAX: 0000000000000000 RBX: ffff94d4c483c000 RCX: 0000000000000027 [ +0.000001] RDX: ffff94d47f620bc8 RSI: 0000000000000001 RDI: ffff94d47f620bc0 [ +0.000001] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000ffff7fff [ +0.000001] R10: ffffbd294976bb98 R11: ffffffffa0be65e8 R12: ffff94c5451ea180 [ +0.000001] R13: ffff94c5ab5e8000 R14: ffff94c5c20b6e05 R15: ffff94c5f1330ab0 [ +0.000001] FS: 0000000000000000(0000) GS:ffff94d47f600000(0000) knlGS:0000000000000000 [ +0.000002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ +0.000001] CR2: 00007f9e6f1fca70 CR3: 0000000038e20004 CR4: 00000000007706f0 [ +0.000000] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ +0.000001] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ +0.000001] PKRU: 55555554 [ +0.000001] Call Trace: [ +0.000001] <TASK> [ +0.000002] ? __warn+0x80/0x130 [ +0.000003] ? check_flush_dependency+0x10b/0x120 [ +0.000002] ? report_bug+0x195/0x1a0 [ +0.000005] ? handle_bug+0x3c/0x70 [ +0.000003] ? exc_invalid_op+0x14/0x70 [ +0.000002] ? asm_exc_invalid_op+0x16/0x20 [ +0.000006] ? check_flush_dependency+0x10b/0x120 [ +0.000002] ? check_flush_dependency+0x10b/0x120 [ +0.000002] __flush_workqueue+0x126/0x3f0 [ +0.000015] ib_cache_cleanup_one+0x1c/0xe0 [ib_core] [ +0.000056] __ib_unregister_device+0x6a/0xb0 [ib_core] [ +0.000023] ib_unregister_device_and_put+0x34/0x50 [ib_core] [ +0.000020] i40iw_close+0x4b/0x90 [irdma] [ +0.000022] i40e_notify_client_of_netdev_close+0x54/0xc0 [i40e] [ +0.000035] i40e_service_task+0x126/0x190 [i40e] [ +0.000024] process_one_work+0x174/0x340 [ +0.000003] worker_th ---truncated--- CVE-2024-36004 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36004.html CVE-2024-36004 https://bugzilla.suse.com/1224545 SUSE Bug 1224545 In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix loop termination condition in gss_free_in_token_pages() The in_token->pages[] array is not NULL terminated. This results in the following KASAN splat: KASAN: maybe wild-memory-access in range [0x04a2013400000008-0x04a201340000000f] CVE-2024-36288 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36288.html CVE-2024-36288 https://bugzilla.suse.com/1226834 SUSE Bug 1226834 In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure snd_nxt is properly initialized on connect Christoph reported a splat hinting at a corrupted snd_una: WARNING: CPU: 1 PID: 38 at net/mptcp/protocol.c:1005 __mptcp_clean_una+0x4b3/0x620 net/mptcp/protocol.c:1005 Modules linked in: CPU: 1 PID: 38 Comm: kworker/1:1 Not tainted 6.9.0-rc1-gbbeac67456c9 #59 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.11.0-2.el7 04/01/2014 Workqueue: events mptcp_worker RIP: 0010:__mptcp_clean_una+0x4b3/0x620 net/mptcp/protocol.c:1005 Code: be 06 01 00 00 bf 06 01 00 00 e8 a8 12 e7 fe e9 00 fe ff ff e8 8e 1a e7 fe 0f b7 ab 3e 02 00 00 e9 d3 fd ff ff e8 7d 1a e7 fe <0f> 0b 4c 8b bb e0 05 00 00 e9 74 fc ff ff e8 6a 1a e7 fe 0f 0b e9 RSP: 0018:ffffc9000013fd48 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff8881029bd280 RCX: ffffffff82382fe4 RDX: ffff8881003cbd00 RSI: ffffffff823833c3 RDI: 0000000000000001 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: fefefefefefefeff R12: ffff888138ba8000 R13: 0000000000000106 R14: ffff8881029bd908 R15: ffff888126560000 FS: 0000000000000000(0000) GS:ffff88813bd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f604a5dae38 CR3: 0000000101dac002 CR4: 0000000000170ef0 Call Trace: <TASK> __mptcp_clean_una_wakeup net/mptcp/protocol.c:1055 [inline] mptcp_clean_una_wakeup net/mptcp/protocol.c:1062 [inline] __mptcp_retrans+0x7f/0x7e0 net/mptcp/protocol.c:2615 mptcp_worker+0x434/0x740 net/mptcp/protocol.c:2767 process_one_work+0x1e0/0x560 kernel/workqueue.c:3254 process_scheduled_works kernel/workqueue.c:3335 [inline] worker_thread+0x3c7/0x640 kernel/workqueue.c:3416 kthread+0x121/0x170 kernel/kthread.c:388 ret_from_fork+0x44/0x50 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:243 </TASK> When fallback to TCP happens early on a client socket, snd_nxt is not yet initialized and any incoming ack will copy such value into snd_una. If the mptcp worker (dumbly) tries mptcp-level re-injection after such ack, that would unconditionally trigger a send buffer cleanup using 'bad' snd_una values. We could easily disable re-injection for fallback sockets, but such dumb behavior already helped catching a few subtle issues and a very low to zero impact in practice. Instead address the issue always initializing snd_nxt (and write_seq, for consistency) at connect time. CVE-2024-36889 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36889.html CVE-2024-36889 https://bugzilla.suse.com/1225746 SUSE Bug 1225746 In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent NULL dereference in ip6_output() According to syzbot, there is a chance that ip6_dst_idev() returns NULL in ip6_output(). Most places in IPv6 stack deal with a NULL idev just fine, but not here. syzbot reported: general protection fault, probably for non-canonical address 0xdffffc00000000bc: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x00000000000005e0-0x00000000000005e7] CPU: 0 PID: 9775 Comm: syz-executor.4 Not tainted 6.9.0-rc5-syzkaller-00157-g6a30653b604a #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 RIP: 0010:ip6_output+0x231/0x3f0 net/ipv6/ip6_output.c:237 Code: 3c 1e 00 49 89 df 74 08 4c 89 ef e8 19 58 db f7 48 8b 44 24 20 49 89 45 00 49 89 c5 48 8d 9d e0 05 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 4c 8b 74 24 28 0f 85 61 01 00 00 8b 1b 31 ff RSP: 0018:ffffc9000927f0d8 EFLAGS: 00010202 RAX: 00000000000000bc RBX: 00000000000005e0 RCX: 0000000000040000 RDX: ffffc900131f9000 RSI: 0000000000004f47 RDI: 0000000000004f48 RBP: 0000000000000000 R08: ffffffff8a1f0b9a R09: 1ffffffff1f51fad R10: dffffc0000000000 R11: fffffbfff1f51fae R12: ffff8880293ec8c0 R13: ffff88805d7fc000 R14: 1ffff1100527d91a R15: dffffc0000000000 FS: 00007f135c6856c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000020000080 CR3: 0000000064096000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> NF_HOOK include/linux/netfilter.h:314 [inline] ip6_xmit+0xefe/0x17f0 net/ipv6/ip6_output.c:358 sctp_v6_xmit+0x9f2/0x13f0 net/sctp/ipv6.c:248 sctp_packet_transmit+0x26ad/0x2ca0 net/sctp/output.c:653 sctp_packet_singleton+0x22c/0x320 net/sctp/outqueue.c:783 sctp_outq_flush_ctrl net/sctp/outqueue.c:914 [inline] sctp_outq_flush+0x6d5/0x3e20 net/sctp/outqueue.c:1212 sctp_side_effects net/sctp/sm_sideeffect.c:1198 [inline] sctp_do_sm+0x59cc/0x60c0 net/sctp/sm_sideeffect.c:1169 sctp_primitive_ASSOCIATE+0x95/0xc0 net/sctp/primitive.c:73 __sctp_connect+0x9cd/0xe30 net/sctp/socket.c:1234 sctp_connect net/sctp/socket.c:4819 [inline] sctp_inet_connect+0x149/0x1f0 net/sctp/socket.c:4834 __sys_connect_file net/socket.c:2048 [inline] __sys_connect+0x2df/0x310 net/socket.c:2065 __do_sys_connect net/socket.c:2075 [inline] __se_sys_connect net/socket.c:2072 [inline] __x64_sys_connect+0x7a/0x90 net/socket.c:2072 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f CVE-2024-36901 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36901.html CVE-2024-36901 https://bugzilla.suse.com/1225711 SUSE Bug 1225711 In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() syzbot is able to trigger the following crash [1], caused by unsafe ip6_dst_idev() use. Indeed ip6_dst_idev() can return NULL, and must always be checked. [1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 0 PID: 31648 Comm: syz-executor.0 Not tainted 6.9.0-rc4-next-20240417-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 RIP: 0010:__fib6_rule_action net/ipv6/fib6_rules.c:237 [inline] RIP: 0010:fib6_rule_action+0x241/0x7b0 net/ipv6/fib6_rules.c:267 Code: 02 00 00 49 8d 9f d8 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 f9 32 bf f7 48 8b 1b 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 e0 32 bf f7 4c 8b 03 48 89 ef 4c RSP: 0018:ffffc9000fc1f2f0 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1a772f98c8186700 RDX: 0000000000000003 RSI: ffffffff8bcac4e0 RDI: ffffffff8c1f9760 RBP: ffff8880673fb980 R08: ffffffff8fac15ef R09: 1ffffffff1f582bd R10: dffffc0000000000 R11: fffffbfff1f582be R12: dffffc0000000000 R13: 0000000000000080 R14: ffff888076509000 R15: ffff88807a029a00 FS: 00007f55e82ca6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b31d23000 CR3: 0000000022b66000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> fib_rules_lookup+0x62c/0xdb0 net/core/fib_rules.c:317 fib6_rule_lookup+0x1fd/0x790 net/ipv6/fib6_rules.c:108 ip6_route_output_flags_noref net/ipv6/route.c:2637 [inline] ip6_route_output_flags+0x38e/0x610 net/ipv6/route.c:2649 ip6_route_output include/net/ip6_route.h:93 [inline] ip6_dst_lookup_tail+0x189/0x11a0 net/ipv6/ip6_output.c:1120 ip6_dst_lookup_flow+0xb9/0x180 net/ipv6/ip6_output.c:1250 sctp_v6_get_dst+0x792/0x1e20 net/sctp/ipv6.c:326 sctp_transport_route+0x12c/0x2e0 net/sctp/transport.c:455 sctp_assoc_add_peer+0x614/0x15c0 net/sctp/associola.c:662 sctp_connect_new_asoc+0x31d/0x6c0 net/sctp/socket.c:1099 __sctp_connect+0x66d/0xe30 net/sctp/socket.c:1197 sctp_connect net/sctp/socket.c:4819 [inline] sctp_inet_connect+0x149/0x1f0 net/sctp/socket.c:4834 __sys_connect_file net/socket.c:2048 [inline] __sys_connect+0x2df/0x310 net/socket.c:2065 __do_sys_connect net/socket.c:2075 [inline] __se_sys_connect net/socket.c:2072 [inline] __x64_sys_connect+0x7a/0x90 net/socket.c:2072 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f CVE-2024-36902 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36902.html CVE-2024-36902 https://bugzilla.suse.com/1225719 SUSE Bug 1225719 In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted In CoCo VMs it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues. The VMBus ring buffer code could free decrypted/shared pages if set_memory_decrypted() fails. Check the decrypted field in the struct vmbus_gpadl for the ring buffers to decide whether to free the memory. CVE-2024-36909 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36909.html CVE-2024-36909 https://bugzilla.suse.com/1225744 SUSE Bug 1225744 In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Don't free decrypted memory In CoCo VMs it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues. The VMBus device UIO driver could free decrypted/shared pages if set_memory_decrypted() fails. Check the decrypted field in the gpadl to decide whether to free the memory. CVE-2024-36910 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36910.html CVE-2024-36910 https://bugzilla.suse.com/1225717 SUSE Bug 1225717 In the Linux kernel, the following vulnerability has been resolved: hv_netvsc: Don't free decrypted memory In CoCo VMs it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues. The netvsc driver could free decrypted/shared pages if set_memory_decrypted() fails. Check the decrypted field in the gpadl to decide whether to free the memory. CVE-2024-36911 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36911.html CVE-2024-36911 https://bugzilla.suse.com/1225745 SUSE Bug 1225745 In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl In CoCo VMs it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues. In order to make sure callers of vmbus_establish_gpadl() and vmbus_teardown_gpadl() don't return decrypted/shared pages to allocators, add a field in struct vmbus_gpadl to keep track of the decryption status of the buffers. This will allow the callers to know if they should free or leak the pages. CVE-2024-36912 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36912.html CVE-2024-36912 https://bugzilla.suse.com/1225752 SUSE Bug 1225752 In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails In CoCo VMs it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues. VMBus code could free decrypted pages if set_memory_encrypted()/decrypted() fails. Leak the pages if this happens. CVE-2024-36913 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36913.html CVE-2024-36913 https://bugzilla.suse.com/1225753 SUSE Bug 1225753 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip on writeback when it's not applicable [WHY] dynamic memory safety error detector (KASAN) catches and generates error messages "BUG: KASAN: slab-out-of-bounds" as writeback connector does not support certain features which are not initialized. [HOW] Skip them when connector type is DRM_MODE_CONNECTOR_WRITEBACK. CVE-2024-36914 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36914.html CVE-2024-36914 https://bugzilla.suse.com/1225757 SUSE Bug 1225757 In the Linux kernel, the following vulnerability has been resolved: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload The session resources are used by FW and driver when session is offloaded, once session is uploaded these resources are not used. The lock is not required as these fields won't be used any longer. The offload and upload calls are sequential, hence lock is not required. This will suppress following BUG_ON(): [ 449.843143] ------------[ cut here ]------------ [ 449.848302] kernel BUG at mm/vmalloc.c:2727! [ 449.853072] invalid opcode: 0000 [#1] PREEMPT SMP PTI [ 449.858712] CPU: 5 PID: 1996 Comm: kworker/u24:2 Not tainted 5.14.0-118.el9.x86_64 #1 Rebooting. [ 449.867454] Hardware name: Dell Inc. PowerEdge R730/0WCJNT, BIOS 2.3.4 11/08/2016 [ 449.876966] Workqueue: fc_rport_eq fc_rport_work [libfc] [ 449.882910] RIP: 0010:vunmap+0x2e/0x30 [ 449.887098] Code: 00 65 8b 05 14 a2 f0 4a a9 00 ff ff 00 75 1b 55 48 89 fd e8 34 36 79 00 48 85 ed 74 0b 48 89 ef 31 f6 5d e9 14 fc ff ff 5d c3 <0f> 0b 0f 1f 44 00 00 41 57 41 56 49 89 ce 41 55 49 89 fd 41 54 41 [ 449.908054] RSP: 0018:ffffb83d878b3d68 EFLAGS: 00010206 [ 449.913887] RAX: 0000000080000201 RBX: ffff8f4355133550 RCX: 000000000d400005 [ 449.921843] RDX: 0000000000000001 RSI: 0000000000001000 RDI: ffffb83da53f5000 [ 449.929808] RBP: ffff8f4ac6675800 R08: ffffb83d878b3d30 R09: 00000000000efbdf [ 449.937774] R10: 0000000000000003 R11: ffff8f434573e000 R12: 0000000000001000 [ 449.945736] R13: 0000000000001000 R14: ffffb83da53f5000 R15: ffff8f43d4ea3ae0 [ 449.953701] FS: 0000000000000000(0000) GS:ffff8f529fc80000(0000) knlGS:0000000000000000 [ 449.962732] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 449.969138] CR2: 00007f8cf993e150 CR3: 0000000efbe10003 CR4: 00000000003706e0 [ 449.977102] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 449.985065] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 449.993028] Call Trace: [ 449.995756] __iommu_dma_free+0x96/0x100 [ 450.000139] bnx2fc_free_session_resc+0x67/0x240 [bnx2fc] [ 450.006171] bnx2fc_upload_session+0xce/0x100 [bnx2fc] [ 450.011910] bnx2fc_rport_event_handler+0x9f/0x240 [bnx2fc] [ 450.018136] fc_rport_work+0x103/0x5b0 [libfc] [ 450.023103] process_one_work+0x1e8/0x3c0 [ 450.027581] worker_thread+0x50/0x3b0 [ 450.031669] ? rescuer_thread+0x370/0x370 [ 450.036143] kthread+0x149/0x170 [ 450.039744] ? set_kthread_struct+0x40/0x40 [ 450.044411] ret_from_fork+0x22/0x30 [ 450.048404] Modules linked in: vfat msdos fat xfs nfs_layout_nfsv41_files rpcsec_gss_krb5 auth_rpcgss nfsv4 dns_resolver dm_service_time qedf qed crc8 bnx2fc libfcoe libfc scsi_transport_fc intel_rapl_msr intel_rapl_common x86_pkg_temp_thermal intel_powerclamp dcdbas rapl intel_cstate intel_uncore mei_me pcspkr mei ipmi_ssif lpc_ich ipmi_si fuse zram ext4 mbcache jbd2 loop nfsv3 nfs_acl nfs lockd grace fscache netfs irdma ice sd_mod t10_pi sg ib_uverbs ib_core 8021q garp mrp stp llc mgag200 i2c_algo_bit drm_kms_helper syscopyarea sysfillrect sysimgblt mxm_wmi fb_sys_fops cec crct10dif_pclmul ahci crc32_pclmul bnx2x drm ghash_clmulni_intel libahci rfkill i40e libata megaraid_sas mdio wmi sunrpc lrw dm_crypt dm_round_robin dm_multipath dm_snapshot dm_bufio dm_mirror dm_region_hash dm_log dm_zero dm_mod linear raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx raid6_pq libcrc32c crc32c_intel raid1 raid0 iscsi_ibft squashfs be2iscsi bnx2i cnic uio cxgb4i cxgb4 tls [ 450.048497] libcxgbi libcxgb qla4xxx iscsi_boot_sysfs iscsi_tcp libiscsi_tcp libiscsi scsi_transport_iscsi edd ipmi_devintf ipmi_msghandler [ 450.159753] ---[ end trace 712de2c57c64abc8 ]--- CVE-2024-36919 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36919.html CVE-2024-36919 https://bugzilla.suse.com/1225767 SUSE Bug 1225767 In the Linux kernel, the following vulnerability has been resolved: fs/9p: fix uninitialized values during inode evict If an iget fails due to not being able to retrieve information from the server then the inode structure is only partially initialized. When the inode gets evicted, references to uninitialized structures (like fscache cookies) were being made. This patch checks for a bad_inode before doing anything other than clearing the inode from the cache. Since the inode is bad, it shouldn't have any state associated with it that needs to be written back (and there really isn't a way to complete those anyways). CVE-2024-36923 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36923.html CVE-2024-36923 https://bugzilla.suse.com/1225815 SUSE Bug 1225815 In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Release hbalock before calling lpfc_worker_wake_up() lpfc_worker_wake_up() calls the lpfc_work_done() routine, which takes the hbalock. Thus, lpfc_worker_wake_up() should not be called while holding the hbalock to avoid potential deadlock. CVE-2024-36924 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36924.html CVE-2024-36924 https://bugzilla.suse.com/1225820 SUSE Bug 1225820 In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries/iommu: LPAR panics during boot up with a frozen PE At the time of LPAR boot up, partition firmware provides Open Firmware property ibm,dma-window for the PE. This property is provided on the PCI bus the PE is attached to. There are execptions where the partition firmware might not provide this property for the PE at the time of LPAR boot up. One of the scenario is where the firmware has frozen the PE due to some error condition. This PE is frozen for 24 hours or unless the whole system is reinitialized. Within this time frame, if the LPAR is booted, the frozen PE will be presented to the LPAR but ibm,dma-window property could be missing. Today, under these circumstances, the LPAR oopses with NULL pointer dereference, when configuring the PCI bus the PE is attached to. BUG: Kernel NULL pointer dereference on read at 0x000000c8 Faulting instruction address: 0xc0000000001024c0 Oops: Kernel access of bad area, sig: 7 [#1] LE PAGE_SIZE=64K MMU=Radix SMP NR_CPUS=2048 NUMA pSeries Modules linked in: Supported: Yes CPU: 0 PID: 1 Comm: swapper/0 Not tainted 6.4.0-150600.9-default #1 Hardware name: IBM,9043-MRX POWER10 (raw) 0x800200 0xf000006 of:IBM,FW1060.00 (NM1060_023) hv:phyp pSeries NIP: c0000000001024c0 LR: c0000000001024b0 CTR: c000000000102450 REGS: c0000000037db5c0 TRAP: 0300 Not tainted (6.4.0-150600.9-default) MSR: 8000000002009033 <SF,VEC,EE,ME,IR,DR,RI,LE> CR: 28000822 XER: 00000000 CFAR: c00000000010254c DAR: 00000000000000c8 DSISR: 00080000 IRQMASK: 0 ... NIP [c0000000001024c0] pci_dma_bus_setup_pSeriesLP+0x70/0x2a0 LR [c0000000001024b0] pci_dma_bus_setup_pSeriesLP+0x60/0x2a0 Call Trace: pci_dma_bus_setup_pSeriesLP+0x60/0x2a0 (unreliable) pcibios_setup_bus_self+0x1c0/0x370 __of_scan_bus+0x2f8/0x330 pcibios_scan_phb+0x280/0x3d0 pcibios_init+0x88/0x12c do_one_initcall+0x60/0x320 kernel_init_freeable+0x344/0x3e4 kernel_init+0x34/0x1d0 ret_from_kernel_user_thread+0x14/0x1c CVE-2024-36926 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36926.html CVE-2024-36926 https://bugzilla.suse.com/1225829 SUSE Bug 1225829 In the Linux kernel, the following vulnerability has been resolved: nfs: Handle error of rpc_proc_register() in nfs_net_init(). syzkaller reported a warning [0] triggered while destroying immature netns. rpc_proc_register() was called in init_nfs_fs(), but its error has been ignored since at least the initial commit 1da177e4c3f4 ("Linux-2.6.12-rc2"). Recently, commit d47151b79e32 ("nfs: expose /proc/net/sunrpc/nfs in net namespaces") converted the procfs to per-netns and made the problem more visible. Even when rpc_proc_register() fails, nfs_net_init() could succeed, and thus nfs_net_exit() will be called while destroying the netns. Then, remove_proc_entry() will be called for non-existing proc directory and trigger the warning below. Let's handle the error of rpc_proc_register() properly in nfs_net_init(). [0]: name 'nfs' WARNING: CPU: 1 PID: 1710 at fs/proc/generic.c:711 remove_proc_entry+0x1bb/0x2d0 fs/proc/generic.c:711 Modules linked in: CPU: 1 PID: 1710 Comm: syz-executor.2 Not tainted 6.8.0-12822-gcd51db110a7e #12 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014 RIP: 0010:remove_proc_entry+0x1bb/0x2d0 fs/proc/generic.c:711 Code: 41 5d 41 5e c3 e8 85 09 b5 ff 48 c7 c7 88 58 64 86 e8 09 0e 71 02 e8 74 09 b5 ff 4c 89 e6 48 c7 c7 de 1b 80 84 e8 c5 ad 97 ff <0f> 0b eb b1 e8 5c 09 b5 ff 48 c7 c7 88 58 64 86 e8 e0 0d 71 02 eb RSP: 0018:ffffc9000c6d7ce0 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff8880422b8b00 RCX: ffffffff8110503c RDX: ffff888030652f00 RSI: ffffffff81105045 RDI: 0000000000000001 RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000001 R11: ffffffff81bb62cb R12: ffffffff84807ffc R13: ffff88804ad6fcc0 R14: ffffffff84807ffc R15: ffffffff85741ff8 FS: 00007f30cfba8640(0000) GS:ffff88807dd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ff51afe8000 CR3: 000000005a60a005 CR4: 0000000000770ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> rpc_proc_unregister+0x64/0x70 net/sunrpc/stats.c:310 nfs_net_exit+0x1c/0x30 fs/nfs/inode.c:2438 ops_exit_list+0x62/0xb0 net/core/net_namespace.c:170 setup_net+0x46c/0x660 net/core/net_namespace.c:372 copy_net_ns+0x244/0x590 net/core/net_namespace.c:505 create_new_namespaces+0x2ed/0x770 kernel/nsproxy.c:110 unshare_nsproxy_namespaces+0xae/0x160 kernel/nsproxy.c:228 ksys_unshare+0x342/0x760 kernel/fork.c:3322 __do_sys_unshare kernel/fork.c:3393 [inline] __se_sys_unshare kernel/fork.c:3391 [inline] __x64_sys_unshare+0x1f/0x30 kernel/fork.c:3391 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x4f/0x110 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x46/0x4e RIP: 0033:0x7f30d0febe5d Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 73 9f 1b 00 f7 d8 64 89 01 48 RSP: 002b:00007f30cfba7cc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 RAX: ffffffffffffffda RBX: 00000000004bbf80 RCX: 00007f30d0febe5d RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c020600 RBP: 00000000004bbf80 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 R13: 000000000000000b R14: 00007f30d104c530 R15: 0000000000000000 </TASK> CVE-2024-36939 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36939.html CVE-2024-36939 https://bugzilla.suse.com/1225838 SUSE Bug 1225838 In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: don't free NULL coalescing rule If the parsing fails, we can dereference a NULL pointer here. CVE-2024-36941 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36941.html CVE-2024-36941 https://bugzilla.suse.com/1225835 SUSE Bug 1225835 ** REJECT ** This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2024-36942 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36942.html CVE-2024-36942 https://bugzilla.suse.com/1225843 SUSE Bug 1225843 In the Linux kernel, the following vulnerability has been resolved: Reapply "drm/qxl: simplify qxl_fence_wait" This reverts commit 07ed11afb68d94eadd4ffc082b97c2331307c5ea. Stephen Rostedt reports: "I went to run my tests on my VMs and the tests hung on boot up. Unfortunately, the most I ever got out was: [ 93.607888] Testing event system initcall: OK [ 93.667730] Running tests on all trace events: [ 93.669757] Testing all events: OK [ 95.631064] ------------[ cut here ]------------ Timed out after 60 seconds" and further debugging points to a possible circular locking dependency between the console_owner locking and the worker pool locking. Reverting the commit allows Steve's VM to boot to completion again. [ This may obviously result in the "[TTM] Buffer eviction failed" messages again, which was the reason for that original revert. But at this point this seems preferable to a non-booting system... ] CVE-2024-36944 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36944.html CVE-2024-36944 https://bugzilla.suse.com/1225847 SUSE Bug 1225847 In the Linux kernel, the following vulnerability has been resolved: phonet: fix rtm_phonet_notify() skb allocation fill_route() stores three components in the skb: - struct rtmsg - RTA_DST (u8) - RTA_OIF (u32) Therefore, rtm_phonet_notify() should use NLMSG_ALIGN(sizeof(struct rtmsg)) + nla_total_size(1) + nla_total_size(4) CVE-2024-36946 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36946.html CVE-2024-36946 https://bugzilla.suse.com/1225851 SUSE Bug 1225851 In the Linux kernel, the following vulnerability has been resolved: qibfs: fix dentry leak simple_recursive_removal() drops the pinning references to all positives in subtree. For the cases when its argument has been kept alive by the pinning alone that's exactly the right thing to do, but here the argument comes from dcache lookup, that needs to be balanced by explicit dput(). Fucked-up-by: Al Viro <viro@zeniv.linux.org.uk> CVE-2024-36947 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36947.html CVE-2024-36947 https://bugzilla.suse.com/1225856 SUSE Bug 1225856 In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: mask bus reset interrupts between ISR and bottom half In the FireWire OHCI interrupt handler, if a bus reset interrupt has occurred, mask bus reset interrupts until bus_reset_work has serviced and cleared the interrupt. Normally, we always leave bus reset interrupts masked. We infer the bus reset from the self-ID interrupt that happens shortly thereafter. A scenario where we unmask bus reset interrupts was introduced in 2008 in a007bb857e0b26f5d8b73c2ff90782d9c0972620: If OHCI_PARAM_DEBUG_BUSRESETS (8) is set in the debug parameter bitmask, we will unmask bus reset interrupts so we can log them. irq_handler logs the bus reset interrupt. However, we can't clear the bus reset event flag in irq_handler, because we won't service the event until later. irq_handler exits with the event flag still set. If the corresponding interrupt is still unmasked, the first bus reset will usually freeze the system due to irq_handler being called again each time it exits. This freeze can be reproduced by loading firewire_ohci with "modprobe firewire_ohci debug=-1" (to enable all debugging output). Apparently there are also some cases where bus_reset_work will get called soon enough to clear the event, and operation will continue normally. This freeze was first reported a few months after a007bb85 was committed, but until now it was never fixed. The debug level could safely be set to -1 through sysfs after the module was loaded, but this would be ineffectual in logging bus reset interrupts since they were only unmasked during initialization. irq_handler will now leave the event flag set but mask bus reset interrupts, so irq_handler won't be called again and there will be no freeze. If OHCI_PARAM_DEBUG_BUSRESETS is enabled, bus_reset_work will unmask the interrupt after servicing the event, so future interrupts will be caught as desired. As a side effect to this change, OHCI_PARAM_DEBUG_BUSRESETS can now be enabled through sysfs in addition to during initial module loading. However, when enabled through sysfs, logging of bus reset interrupts will be effective only starting with the second bus reset, after bus_reset_work has executed. CVE-2024-36950 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36950.html CVE-2024-36950 https://bugzilla.suse.com/1225895 SUSE Bug 1225895 In the Linux kernel, the following vulnerability has been resolved: scsi: lpfc: Move NPIV's transport unregistration to after resource clean up There are cases after NPIV deletion where the fabric switch still believes the NPIV is logged into the fabric. This occurs when a vport is unregistered before the Remove All DA_ID CT and LOGO ELS are sent to the fabric. Currently fc_remove_host(), which calls dev_loss_tmo for all D_IDs including the fabric D_ID, removes the last ndlp reference and frees the ndlp rport object. This sometimes causes the race condition where the final DA_ID and LOGO are skipped from being sent to the fabric switch. Fix by moving the fc_remove_host() and scsi_remove_host() calls after DA_ID and LOGO are sent. CVE-2024-36952 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36952.html CVE-2024-36952 https://bugzilla.suse.com/1225898 SUSE Bug 1225898 In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: intel-sdw-acpi: fix usage of device_get_named_child_node() The documentation for device_get_named_child_node() mentions this important point: " The caller is responsible for calling fwnode_handle_put() on the returned fwnode pointer. " Add fwnode_handle_put() to avoid a leaked reference. CVE-2024-36955 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36955.html CVE-2024-36955 https://bugzilla.suse.com/1225810 SUSE Bug 1225810 In the Linux kernel, the following vulnerability has been resolved: pinctrl: devicetree: fix refcount leak in pinctrl_dt_to_map() If we fail to allocate propname buffer, we need to drop the reference count we just took. Because the pinctrl_dt_free_maps() includes the droping operation, here we call it directly. CVE-2024-36959 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36959.html CVE-2024-36959 https://bugzilla.suse.com/1225839 SUSE Bug 1225839 In the Linux kernel, the following vulnerability has been resolved: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP If one TCA_TAPRIO_ATTR_PRIOMAP attribute has been provided, taprio_parse_mqprio_opt() must validate it, or userspace can inject arbitrary data to the kernel, the second time taprio_change() is called. First call (with valid attributes) sets dev->num_tc to a non zero value. Second call (with arbitrary mqprio attributes) returns early from taprio_parse_mqprio_opt() and bad things can happen. CVE-2024-36974 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-36974.html CVE-2024-36974 https://bugzilla.suse.com/1226519 SUSE Bug 1226519 https://bugzilla.suse.com/1227371 SUSE Bug 1227371 In the Linux kernel, the following vulnerability has been resolved: drm: bridge: cdns-mhdp8546: Fix possible null pointer dereference In cdns_mhdp_atomic_enable(), the return value of drm_mode_duplicate() is assigned to mhdp_state->current_mode, and there is a dereference of it in drm_mode_set_name(), which will lead to a NULL pointer dereference on failure of drm_mode_duplicate(). Fix this bug add a check of mhdp_state->current_mode. CVE-2024-38548 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-38548.html CVE-2024-38548 https://bugzilla.suse.com/1228202 SUSE Bug 1228202 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Discard command completions in internal error Fix use after free when FW completion arrives while device is in internal error state. Avoid calling completion handler in this case, since the device will flush the command interface and trigger all completions manually. Kernel log: ------------[ cut here ]------------ refcount_t: underflow; use-after-free. ... RIP: 0010:refcount_warn_saturate+0xd8/0xe0 ... Call Trace: <IRQ> ? __warn+0x79/0x120 ? refcount_warn_saturate+0xd8/0xe0 ? report_bug+0x17c/0x190 ? handle_bug+0x3c/0x60 ? exc_invalid_op+0x14/0x70 ? asm_exc_invalid_op+0x16/0x20 ? refcount_warn_saturate+0xd8/0xe0 cmd_ent_put+0x13b/0x160 [mlx5_core] mlx5_cmd_comp_handler+0x5f9/0x670 [mlx5_core] cmd_comp_notifier+0x1f/0x30 [mlx5_core] notifier_call_chain+0x35/0xb0 atomic_notifier_call_chain+0x16/0x20 mlx5_eq_async_int+0xf6/0x290 [mlx5_core] notifier_call_chain+0x35/0xb0 atomic_notifier_call_chain+0x16/0x20 irq_int_handler+0x19/0x30 [mlx5_core] __handle_irq_event_percpu+0x4b/0x160 handle_irq_event+0x2e/0x80 handle_edge_irq+0x98/0x230 __common_interrupt+0x3b/0xa0 common_interrupt+0x7b/0xa0 </IRQ> <TASK> asm_common_interrupt+0x22/0x40 CVE-2024-38555 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-38555.html CVE-2024-38555 https://bugzilla.suse.com/1226607 SUSE Bug 1226607 In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix overwriting ct original tuple for ICMPv6 OVS_PACKET_CMD_EXECUTE has 3 main attributes: - OVS_PACKET_ATTR_KEY - Packet metadata in a netlink format. - OVS_PACKET_ATTR_PACKET - Binary packet content. - OVS_PACKET_ATTR_ACTIONS - Actions to execute on the packet. OVS_PACKET_ATTR_KEY is parsed first to populate sw_flow_key structure with the metadata like conntrack state, input port, recirculation id, etc. Then the packet itself gets parsed to populate the rest of the keys from the packet headers. Whenever the packet parsing code starts parsing the ICMPv6 header, it first zeroes out fields in the key corresponding to Neighbor Discovery information even if it is not an ND packet. It is an 'ipv6.nd' field. However, the 'ipv6' is a union that shares the space between 'nd' and 'ct_orig' that holds the original tuple conntrack metadata parsed from the OVS_PACKET_ATTR_KEY. ND packets should not normally have conntrack state, so it's fine to share the space, but normal ICMPv6 Echo packets or maybe other types of ICMPv6 can have the state attached and it should not be overwritten. The issue results in all but the last 4 bytes of the destination address being wiped from the original conntrack tuple leading to incorrect packet matching and potentially executing wrong actions in case this packet recirculates within the datapath or goes back to userspace. ND fields should not be accessed in non-ND packets, so not clearing them should be fine. Executing memset() only for actual ND packets to avoid the issue. Initializing the whole thing before parsing is needed because ND packet may not contain all the options. The issue only affects the OVS_PACKET_CMD_EXECUTE path and doesn't affect packets entering OVS datapath from network interfaces, because in this case CT metadata is populated from skb after the packet is already parsed. CVE-2024-38558 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-38558.html CVE-2024-38558 https://bugzilla.suse.com/1226783 SUSE Bug 1226783 In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Ensure the copied buf is NUL terminated Currently, we allocate a count-sized kernel buffer and copy count from userspace to that buffer. Later, we use kstrtouint on this buffer but we don't ensure that the string is terminated inside the buffer, this can lead to OOB read when using kstrtouint. Fix this issue by using memdup_user_nul instead of memdup_user. CVE-2024-38559 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-38559.html CVE-2024-38559 https://bugzilla.suse.com/1226785 SUSE Bug 1226785 https://bugzilla.suse.com/1227495 SUSE Bug 1227495 In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix potential glock use-after-free on unmount When a DLM lockspace is released and there ares still locks in that lockspace, DLM will unlock those locks automatically. Commit fb6791d100d1b started exploiting this behavior to speed up filesystem unmount: gfs2 would simply free glocks it didn't want to unlock and then release the lockspace. This didn't take the bast callbacks for asynchronous lock contention notifications into account, which remain active until until a lock is unlocked or its lockspace is released. To prevent those callbacks from accessing deallocated objects, put the glocks that should not be unlocked on the sd_dead_glocks list, release the lockspace, and only then free those glocks. As an additional measure, ignore unexpected ast and bast callbacks if the receiving glock is dead. CVE-2024-38570 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-38570.html CVE-2024-38570 https://bugzilla.suse.com/1226775 SUSE Bug 1226775 In the Linux kernel, the following vulnerability has been resolved: r8169: Fix possible ring buffer corruption on fragmented Tx packets. An issue was found on the RTL8125b when transmitting small fragmented packets, whereby invalid entries were inserted into the transmit ring buffer, subsequently leading to calls to dma_unmap_single() with a null address. This was caused by rtl8169_start_xmit() not noticing changes to nr_frags which may occur when small packets are padded (to work around hardware quirks) in rtl8169_tso_csum_v2(). To fix this, postpone inspecting nr_frags until after any padding has been applied. CVE-2024-38586 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-38586.html CVE-2024-38586 https://bugzilla.suse.com/1226750 SUSE Bug 1226750 In the Linux kernel, the following vulnerability has been resolved: ftrace: Fix possible use-after-free issue in ftrace_location() KASAN reports a bug: BUG: KASAN: use-after-free in ftrace_location+0x90/0x120 Read of size 8 at addr ffff888141d40010 by task insmod/424 CPU: 8 PID: 424 Comm: insmod Tainted: G W 6.9.0-rc2+ [...] Call Trace: <TASK> dump_stack_lvl+0x68/0xa0 print_report+0xcf/0x610 kasan_report+0xb5/0xe0 ftrace_location+0x90/0x120 register_kprobe+0x14b/0xa40 kprobe_init+0x2d/0xff0 [kprobe_example] do_one_initcall+0x8f/0x2d0 do_init_module+0x13a/0x3c0 load_module+0x3082/0x33d0 init_module_from_file+0xd2/0x130 __x64_sys_finit_module+0x306/0x440 do_syscall_64+0x68/0x140 entry_SYSCALL_64_after_hwframe+0x71/0x79 The root cause is that, in lookup_rec(), ftrace record of some address is being searched in ftrace pages of some module, but those ftrace pages at the same time is being freed in ftrace_release_mod() as the corresponding module is being deleted: CPU1 | CPU2 register_kprobes() { | delete_module() { check_kprobe_address_safe() { | arch_check_ftrace_location() { | ftrace_location() { | lookup_rec() // USE! | ftrace_release_mod() // Free! To fix this issue: 1. Hold rcu lock as accessing ftrace pages in ftrace_location_range(); 2. Use ftrace_location_range() instead of lookup_rec() in ftrace_location(); 3. Call synchronize_rcu() before freeing any ftrace pages both in ftrace_process_locs()/ftrace_release_mod()/ftrace_free_mem(). CVE-2024-38588 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-38588.html CVE-2024-38588 https://bugzilla.suse.com/1226837 SUSE Bug 1226837 In the Linux kernel, the following vulnerability has been resolved: md: fix resync softlockup when bitmap size is less than array size Is is reported that for dm-raid10, lvextend + lvchange --syncaction will trigger following softlockup: kernel:watchdog: BUG: soft lockup - CPU#3 stuck for 26s! [mdX_resync:6976] CPU: 7 PID: 3588 Comm: mdX_resync Kdump: loaded Not tainted 6.9.0-rc4-next-20240419 #1 RIP: 0010:_raw_spin_unlock_irq+0x13/0x30 Call Trace: <TASK> md_bitmap_start_sync+0x6b/0xf0 raid10_sync_request+0x25c/0x1b40 [raid10] md_do_sync+0x64b/0x1020 md_thread+0xa7/0x170 kthread+0xcf/0x100 ret_from_fork+0x30/0x50 ret_from_fork_asm+0x1a/0x30 And the detailed process is as follows: md_do_sync j = mddev->resync_min while (j < max_sectors) sectors = raid10_sync_request(mddev, j, &skipped) if (!md_bitmap_start_sync(..., &sync_blocks)) // md_bitmap_start_sync set sync_blocks to 0 return sync_blocks + sectors_skippe; // sectors = 0; j += sectors; // j never change Root cause is that commit 301867b1c168 ("md/raid10: check slab-out-of-bounds in md_bitmap_get_counter") return early from md_bitmap_get_counter(), without setting returned blocks. Fix this problem by always set returned blocks from md_bitmap_get_counter"(), as it used to be. Noted that this patch just fix the softlockup problem in kernel, the case that bitmap size doesn't match array size still need to be fixed. CVE-2024-38598 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-38598.html CVE-2024-38598 https://bugzilla.suse.com/1226757 SUSE Bug 1226757 In the Linux kernel, the following vulnerability has been resolved: usb: gadget: u_audio: Fix race condition use of controls after free during gadget unbind. Hang on to the control IDs instead of pointers since those are correctly handled with locks. CVE-2024-38628 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-38628.html CVE-2024-38628 https://bugzilla.suse.com/1226911 SUSE Bug 1226911 In the Linux kernel, the following vulnerability has been resolved: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() Syzbot reports a warning as follows: ============================================ WARNING: CPU: 0 PID: 5075 at fs/mbcache.c:419 mb_cache_destroy+0x224/0x290 Modules linked in: CPU: 0 PID: 5075 Comm: syz-executor199 Not tainted 6.9.0-rc6-gb947cc5bf6d7 RIP: 0010:mb_cache_destroy+0x224/0x290 fs/mbcache.c:419 Call Trace: <TASK> ext4_put_super+0x6d4/0xcd0 fs/ext4/super.c:1375 generic_shutdown_super+0x136/0x2d0 fs/super.c:641 kill_block_super+0x44/0x90 fs/super.c:1675 ext4_kill_sb+0x68/0xa0 fs/ext4/super.c:7327 [...] ============================================ This is because when finding an entry in ext4_xattr_block_cache_find(), if ext4_sb_bread() returns -ENOMEM, the ce's e_refcnt, which has already grown in the __entry_find(), won't be put away, and eventually trigger the above issue in mb_cache_destroy() due to reference count leakage. So call mb_cache_entry_put() on the -ENOMEM error branch as a quick fix. CVE-2024-39276 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-39276.html CVE-2024-39276 https://bugzilla.suse.com/1226993 SUSE Bug 1226993 In the Linux kernel, the following vulnerability has been resolved: io_uring: check for non-NULL file pointer in io_file_can_poll() In earlier kernels, it was possible to trigger a NULL pointer dereference off the forced async preparation path, if no file had been assigned. The trace leading to that looks as follows: BUG: kernel NULL pointer dereference, address: 00000000000000b0 PGD 0 P4D 0 Oops: 0000 [#1] PREEMPT SMP CPU: 67 PID: 1633 Comm: buf-ring-invali Not tainted 6.8.0-rc3+ #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS unknown 2/2/2022 RIP: 0010:io_buffer_select+0xc3/0x210 Code: 00 00 48 39 d1 0f 82 ae 00 00 00 48 81 4b 48 00 00 01 00 48 89 73 70 0f b7 50 0c 66 89 53 42 85 ed 0f 85 d2 00 00 00 48 8b 13 <48> 8b 92 b0 00 00 00 48 83 7a 40 00 0f 84 21 01 00 00 4c 8b 20 5b RSP: 0018:ffffb7bec38c7d88 EFLAGS: 00010246 RAX: ffff97af2be61000 RBX: ffff97af234f1700 RCX: 0000000000000040 RDX: 0000000000000000 RSI: ffff97aecfb04820 RDI: ffff97af234f1700 RBP: 0000000000000000 R08: 0000000000200030 R09: 0000000000000020 R10: ffffb7bec38c7dc8 R11: 000000000000c000 R12: ffffb7bec38c7db8 R13: ffff97aecfb05800 R14: ffff97aecfb05800 R15: ffff97af2be5e000 FS: 00007f852f74b740(0000) GS:ffff97b1eeec0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000000000b0 CR3: 000000016deab005 CR4: 0000000000370ef0 Call Trace: <TASK> ? __die+0x1f/0x60 ? page_fault_oops+0x14d/0x420 ? do_user_addr_fault+0x61/0x6a0 ? exc_page_fault+0x6c/0x150 ? asm_exc_page_fault+0x22/0x30 ? io_buffer_select+0xc3/0x210 __io_import_iovec+0xb5/0x120 io_readv_prep_async+0x36/0x70 io_queue_sqe_fallback+0x20/0x260 io_submit_sqes+0x314/0x630 __do_sys_io_uring_enter+0x339/0xbc0 ? __do_sys_io_uring_register+0x11b/0xc50 ? vm_mmap_pgoff+0xce/0x160 do_syscall_64+0x5f/0x180 entry_SYSCALL_64_after_hwframe+0x46/0x4e RIP: 0033:0x55e0a110a67e Code: ba cc 00 00 00 45 31 c0 44 0f b6 92 d0 00 00 00 31 d2 41 b9 08 00 00 00 41 83 e2 01 41 c1 e2 04 41 09 c2 b8 aa 01 00 00 0f 05 <c3> 90 89 30 eb a9 0f 1f 40 00 48 8b 42 20 8b 00 a8 06 75 af 85 f6 because the request is marked forced ASYNC and has a bad file fd, and hence takes the forced async prep path. Current kernels with the request async prep cleaned up can no longer hit this issue, but for ease of backporting, let's add this safety check in here too as it really doesn't hurt. For both cases, this will inevitably end with a CQE posted with -EBADF. CVE-2024-39371 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-39371.html CVE-2024-39371 https://bugzilla.suse.com/1226990 SUSE Bug 1226990 In the Linux kernel, the following vulnerability has been resolved: 9p: add missing locking around taking dentry fid list Fix a use-after-free on dentry's d_fsdata fid list when a thread looks up a fid through dentry while another thread unlinks it: UAF thread: refcount_t: addition on 0; use-after-free. p9_fid_get linux/./include/net/9p/client.h:262 v9fs_fid_find+0x236/0x280 linux/fs/9p/fid.c:129 v9fs_fid_lookup_with_uid linux/fs/9p/fid.c:181 v9fs_fid_lookup+0xbf/0xc20 linux/fs/9p/fid.c:314 v9fs_vfs_getattr_dotl+0xf9/0x360 linux/fs/9p/vfs_inode_dotl.c:400 vfs_statx+0xdd/0x4d0 linux/fs/stat.c:248 Freed by: p9_fid_destroy (inlined) p9_client_clunk+0xb0/0xe0 linux/net/9p/client.c:1456 p9_fid_put linux/./include/net/9p/client.h:278 v9fs_dentry_release+0xb5/0x140 linux/fs/9p/vfs_dentry.c:55 v9fs_remove+0x38f/0x620 linux/fs/9p/vfs_inode.c:518 vfs_unlink+0x29a/0x810 linux/fs/namei.c:4335 The problem is that d_fsdata was not accessed under d_lock, because d_release() normally is only called once the dentry is otherwise no longer accessible but since we also call it explicitly in v9fs_remove that lock is required: move the hlist out of the dentry under lock then unref its fids once they are no longer accessible. CVE-2024-39463 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-39463.html CVE-2024-39463 https://bugzilla.suse.com/1227090 SUSE Bug 1227090 https://bugzilla.suse.com/1227091 SUSE Bug 1227091 In the Linux kernel, the following vulnerability has been resolved: xfs: fix log recovery buffer allocation for the legacy h_size fixup Commit a70f9fe52daa ("xfs: detect and handle invalid iclog size set by mkfs") added a fixup for incorrect h_size values used for the initial umount record in old xfsprogs versions. Later commit 0c771b99d6c9 ("xfs: clean up calculation of LR header blocks") cleaned up the log reover buffer calculation, but stoped using the fixed up h_size value to size the log recovery buffer, which can lead to an out of bounds access when the incorrect h_size does not come from the old mkfs tool, but a fuzzer. Fix this by open coding xlog_logrec_hblks and taking the fixed h_size into account for this calculation. CVE-2024-39472 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-39472.html CVE-2024-39472 https://bugzilla.suse.com/1227432 SUSE Bug 1227432 In the Linux kernel, the following vulnerability has been resolved: fbdev: savage: Handle err return when savagefb_check_var failed The commit 04e5eac8f3ab("fbdev: savage: Error out if pixclock equals zero") checks the value of pixclock to avoid divide-by-zero error. However the function savagefb_probe doesn't handle the error return of savagefb_check_var. When pixclock is 0, it will cause divide-by-zero error. CVE-2024-39475 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-39475.html CVE-2024-39475 https://bugzilla.suse.com/1227435 SUSE Bug 1227435 In the Linux kernel, the following vulnerability has been resolved: bcache: fix variable length array abuse in btree_iter btree_iter is used in two ways: either allocated on the stack with a fixed size MAX_BSETS, or from a mempool with a dynamic size based on the specific cache set. Previously, the struct had a fixed-length array of size MAX_BSETS which was indexed out-of-bounds for the dynamically-sized iterators, which causes UBSAN to complain. This patch uses the same approach as in bcachefs's sort_iter and splits the iterator into a btree_iter with a flexible array member and a btree_iter_stack which embeds a btree_iter as well as a fixed-length data array. CVE-2024-39482 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-39482.html CVE-2024-39482 https://bugzilla.suse.com/1227447 SUSE Bug 1227447 In the Linux kernel, the following vulnerability has been resolved: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() In function bond_option_arp_ip_targets_set(), if newval->string is an empty string, newval->string+1 will point to the byte after the string, causing an out-of-bound read. BUG: KASAN: slab-out-of-bounds in strlen+0x7d/0xa0 lib/string.c:418 Read of size 1 at addr ffff8881119c4781 by task syz-executor665/8107 CPU: 1 PID: 8107 Comm: syz-executor665 Not tainted 6.7.0-rc7 #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd9/0x150 lib/dump_stack.c:106 print_address_description mm/kasan/report.c:364 [inline] print_report+0xc1/0x5e0 mm/kasan/report.c:475 kasan_report+0xbe/0xf0 mm/kasan/report.c:588 strlen+0x7d/0xa0 lib/string.c:418 __fortify_strlen include/linux/fortify-string.h:210 [inline] in4_pton+0xa3/0x3f0 net/core/utils.c:130 bond_option_arp_ip_targets_set+0xc2/0x910 drivers/net/bonding/bond_options.c:1201 __bond_opt_set+0x2a4/0x1030 drivers/net/bonding/bond_options.c:767 __bond_opt_set_notify+0x48/0x150 drivers/net/bonding/bond_options.c:792 bond_opt_tryset_rtnl+0xda/0x160 drivers/net/bonding/bond_options.c:817 bonding_sysfs_store_option+0xa1/0x120 drivers/net/bonding/bond_sysfs.c:156 dev_attr_store+0x54/0x80 drivers/base/core.c:2366 sysfs_kf_write+0x114/0x170 fs/sysfs/file.c:136 kernfs_fop_write_iter+0x337/0x500 fs/kernfs/file.c:334 call_write_iter include/linux/fs.h:2020 [inline] new_sync_write fs/read_write.c:491 [inline] vfs_write+0x96a/0xd80 fs/read_write.c:584 ksys_write+0x122/0x250 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x40/0x110 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x63/0x6b ---[ end trace ]--- Fix it by adding a check of string length before using it. CVE-2024-39487 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-39487.html CVE-2024-39487 https://bugzilla.suse.com/1227573 SUSE Bug 1227573 In the Linux kernel, the following vulnerability has been resolved: arm64: asm-bug: Add .align 2 to the end of __BUG_ENTRY When CONFIG_DEBUG_BUGVERBOSE=n, we fail to add necessary padding bytes to bug_table entries, and as a result the last entry in a bug table will be ignored, potentially leading to an unexpected panic(). All prior entries in the table will be handled correctly. The arm64 ABI requires that struct fields of up to 8 bytes are naturally-aligned, with padding added within a struct such that struct are suitably aligned within arrays. When CONFIG_DEBUG_BUGVERPOSE=y, the layout of a bug_entry is: struct bug_entry { signed int bug_addr_disp; // 4 bytes signed int file_disp; // 4 bytes unsigned short line; // 2 bytes unsigned short flags; // 2 bytes } ... with 12 bytes total, requiring 4-byte alignment. When CONFIG_DEBUG_BUGVERBOSE=n, the layout of a bug_entry is: struct bug_entry { signed int bug_addr_disp; // 4 bytes unsigned short flags; // 2 bytes < implicit padding > // 2 bytes } ... with 8 bytes total, with 6 bytes of data and 2 bytes of trailing padding, requiring 4-byte alginment. When we create a bug_entry in assembly, we align the start of the entry to 4 bytes, which implicitly handles padding for any prior entries. However, we do not align the end of the entry, and so when CONFIG_DEBUG_BUGVERBOSE=n, the final entry lacks the trailing padding bytes. For the main kernel image this is not a problem as find_bug() doesn't depend on the trailing padding bytes when searching for entries: for (bug = __start___bug_table; bug < __stop___bug_table; ++bug) if (bugaddr == bug_addr(bug)) return bug; However for modules, module_bug_finalize() depends on the trailing bytes when calculating the number of entries: mod->num_bugs = sechdrs[i].sh_size / sizeof(struct bug_entry); ... and as the last bug_entry lacks the necessary padding bytes, this entry will not be counted, e.g. in the case of a single entry: sechdrs[i].sh_size == 6 sizeof(struct bug_entry) == 8; sechdrs[i].sh_size / sizeof(struct bug_entry) == 0; Consequently module_find_bug() will miss the last bug_entry when it does: for (i = 0; i < mod->num_bugs; ++i, ++bug) if (bugaddr == bug_addr(bug)) goto out; ... which can lead to a kenrel panic due to an unhandled bug. This can be demonstrated with the following module: static int __init buginit(void) { WARN(1, "hello\n"); return 0; } static void __exit bugexit(void) { } module_init(buginit); module_exit(bugexit); MODULE_LICENSE("GPL"); ... which will trigger a kernel panic when loaded: ------------[ cut here ]------------ hello Unexpected kernel BRK exception at EL1 Internal error: BRK handler: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: hello(O+) CPU: 0 PID: 50 Comm: insmod Tainted: G O 6.9.1 #8 Hardware name: linux,dummy-virt (DT) pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : buginit+0x18/0x1000 [hello] lr : buginit+0x18/0x1000 [hello] sp : ffff800080533ae0 x29: ffff800080533ae0 x28: 0000000000000000 x27: 0000000000000000 x26: ffffaba8c4e70510 x25: ffff800080533c30 x24: ffffaba8c4a28a58 x23: 0000000000000000 x22: 0000000000000000 x21: ffff3947c0eab3c0 x20: ffffaba8c4e3f000 x19: ffffaba846464000 x18: 0000000000000006 x17: 0000000000000000 x16: ffffaba8c2492834 x15: 0720072007200720 x14: 0720072007200720 x13: ffffaba8c49b27c8 x12: 0000000000000312 x11: 0000000000000106 x10: ffffaba8c4a0a7c8 x9 : ffffaba8c49b27c8 x8 : 00000000ffffefff x7 : ffffaba8c4a0a7c8 x6 : 80000000fffff000 x5 : 0000000000000107 x4 : 0000000000000000 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff3947c0eab3c0 Call trace: buginit+0x18/0x1000 [hello] do_one_initcall+0x80/0x1c8 do_init_module+0x60/0x218 load_module+0x1ba4/0x1d70 __do_sys_init_module+0x198/0x1d0 __arm64_sys_init_module+0x1c/0x28 invoke_syscall+0x48/0x114 el0_svc ---truncated--- CVE-2024-39488 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-39488.html CVE-2024-39488 https://bugzilla.suse.com/1227618 SUSE Bug 1227618 In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix missing sk_buff release in seg6_input_core The seg6_input() function is responsible for adding the SRH into a packet, delegating the operation to the seg6_input_core(). This function uses the skb_cow_head() to ensure that there is sufficient headroom in the sk_buff for accommodating the link-layer header. In the event that the skb_cow_header() function fails, the seg6_input_core() catches the error but it does not release the sk_buff, which will result in a memory leak. This issue was introduced in commit af3b5158b89d ("ipv6: sr: fix BUG due to headroom too small after SRH push") and persists even after commit 7a3f5b0de364 ("netfilter: add netfilter hooks to SRv6 data plane"), where the entire seg6_input() code was refactored to deal with netfilter hooks. The proposed patch addresses the identified memory leak by requiring the seg6_input_core() function to release the sk_buff in the event that skb_cow_head() fails. CVE-2024-39490 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-39490.html CVE-2024-39490 https://bugzilla.suse.com/1227626 SUSE Bug 1227626 In the Linux kernel, the following vulnerability has been resolved: crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak Using completion_done to determine whether the caller has gone away only works after a complete call. Furthermore it's still possible that the caller has not yet called wait_for_completion, resulting in another potential UAF. Fix this by making the caller use cancel_work_sync and then freeing the memory safely. CVE-2024-39493 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-39493.html CVE-2024-39493 https://bugzilla.suse.com/1227620 SUSE Bug 1227620 In the Linux kernel, the following vulnerability has been resolved: ima: Fix use-after-free on a dentry's dname.name ->d_name.name can change on rename and the earlier value can be freed; there are conditions sufficient to stabilize it (->d_lock on dentry, ->d_lock on its parent, ->i_rwsem exclusive on the parent's inode, rename_lock), but none of those are met at any of the sites. Take a stable snapshot of the name instead. CVE-2024-39494 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-39494.html CVE-2024-39494 https://bugzilla.suse.com/1227716 SUSE Bug 1227716 https://bugzilla.suse.com/1227901 SUSE Bug 1227901 In the Linux kernel, the following vulnerability has been resolved: drm/shmem-helper: Fix BUG_ON() on mmap(PROT_WRITE, MAP_PRIVATE) Lack of check for copy-on-write (COW) mapping in drm_gem_shmem_mmap allows users to call mmap with PROT_WRITE and MAP_PRIVATE flag causing a kernel panic due to BUG_ON in vmf_insert_pfn_prot: BUG_ON((vma->vm_flags & VM_PFNMAP) && is_cow_mapping(vma->vm_flags)); Return -EINVAL early if COW mapping is detected. This bug affects all drm drivers using default shmem helpers. It can be reproduced by this simple example: void *ptr = mmap(0, size, PROT_WRITE, MAP_PRIVATE, fd, mmap_offset); ptr[0] = 0; CVE-2024-39497 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-39497.html CVE-2024-39497 https://bugzilla.suse.com/1227722 SUSE Bug 1227722 In the Linux kernel, the following vulnerability has been resolved: vmci: prevent speculation leaks by sanitizing event in event_deliver() Coverity spotted that event_msg is controlled by user-space, event_msg->event_data.event is passed to event_deliver() and used as an index without sanitization. This change ensures that the event index is sanitized to mitigate any possibility of speculative information leaks. This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc. Only compile tested, no access to HW. CVE-2024-39499 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-39499.html CVE-2024-39499 https://bugzilla.suse.com/1227725 SUSE Bug 1227725 In the Linux kernel, the following vulnerability has been resolved: sock_map: avoid race between sock_map_close and sk_psock_put sk_psock_get will return NULL if the refcount of psock has gone to 0, which will happen when the last call of sk_psock_put is done. However, sk_psock_drop may not have finished yet, so the close callback will still point to sock_map_close despite psock being NULL. This can be reproduced with a thread deleting an element from the sock map, while the second one creates a socket, adds it to the map and closes it. That will trigger the WARN_ON_ONCE: ------------[ cut here ]------------ WARNING: CPU: 1 PID: 7220 at net/core/sock_map.c:1701 sock_map_close+0x2a2/0x2d0 net/core/sock_map.c:1701 Modules linked in: CPU: 1 PID: 7220 Comm: syz-executor380 Not tainted 6.9.0-syzkaller-07726-g3c999d1ae3c7 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 RIP: 0010:sock_map_close+0x2a2/0x2d0 net/core/sock_map.c:1701 Code: df e8 92 29 88 f8 48 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 79 29 88 f8 4c 8b 23 eb 89 e8 4f 15 23 f8 90 <0f> 0b 90 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 13 26 3d 02 RSP: 0018:ffffc9000441fda8 EFLAGS: 00010293 RAX: ffffffff89731ae1 RBX: ffffffff94b87540 RCX: ffff888029470000 RDX: 0000000000000000 RSI: ffffffff8bcab5c0 RDI: ffffffff8c1faba0 RBP: 0000000000000000 R08: ffffffff92f9b61f R09: 1ffffffff25f36c3 R10: dffffc0000000000 R11: fffffbfff25f36c4 R12: ffffffff89731840 R13: ffff88804b587000 R14: ffff88804b587000 R15: ffffffff89731870 FS: 000055555e080380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 00000000207d4000 CR4: 0000000000350ef0 Call Trace: <TASK> unix_release+0x87/0xc0 net/unix/af_unix.c:1048 __sock_release net/socket.c:659 [inline] sock_close+0xbe/0x240 net/socket.c:1421 __fput+0x42b/0x8a0 fs/file_table.c:422 __do_sys_close fs/open.c:1556 [inline] __se_sys_close fs/open.c:1541 [inline] __x64_sys_close+0x7f/0x110 fs/open.c:1541 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fb37d618070 Code: 00 00 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d4 e8 10 2c 00 00 80 3d 31 f0 07 00 00 74 17 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c RSP: 002b:00007ffcd4a525d8 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fb37d618070 RDX: 0000000000000010 RSI: 00000000200001c0 RDI: 0000000000000004 RBP: 0000000000000000 R08: 0000000100000000 R09: 0000000100000000 R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 </TASK> Use sk_psock, which will only check that the pointer is not been set to NULL yet, which should only happen after the callbacks are restored. If, then, a reference can still be gotten, we may call sk_psock_stop and cancel psock->work. As suggested by Paolo Abeni, reorder the condition so the control flow is less convoluted. After that change, the reproducer does not trigger the WARN_ON_ONCE anymore. CVE-2024-39500 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-39500.html CVE-2024-39500 https://bugzilla.suse.com/1227724 SUSE Bug 1227724 In the Linux kernel, the following vulnerability has been resolved: drivers: core: synchronize really_probe() and dev_uevent() Synchronize the dev->driver usage in really_probe() and dev_uevent(). These can run in different threads, what can result in the following race condition for dev->driver uninitialization: Thread #1: ========== really_probe() { ... probe_failed: ... device_unbind_cleanup(dev) { ... dev->driver = NULL; // <= Failed probe sets dev->driver to NULL ... } ... } Thread #2: ========== dev_uevent() { ... if (dev->driver) // If dev->driver is NULLed from really_probe() from here on, // after above check, the system crashes add_uevent_var(env, "DRIVER=%s", dev->driver->name); ... } really_probe() holds the lock, already. So nothing needs to be done there. dev_uevent() is called with lock held, often, too. But not always. What implies that we can't add any locking in dev_uevent() itself. So fix this race by adding the lock to the non-protected path. This is the path where above race is observed: dev_uevent+0x235/0x380 uevent_show+0x10c/0x1f0 <= Add lock here dev_attr_show+0x3a/0xa0 sysfs_kf_seq_show+0x17c/0x250 kernfs_seq_show+0x7c/0x90 seq_read_iter+0x2d7/0x940 kernfs_fop_read_iter+0xc6/0x310 vfs_read+0x5bc/0x6b0 ksys_read+0xeb/0x1b0 __x64_sys_read+0x42/0x50 x64_sys_call+0x27ad/0x2d30 do_syscall_64+0xcd/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f Similar cases are reported by syzkaller in https://syzkaller.appspot.com/bug?extid=ffa8143439596313a85a But these are regarding the *initialization* of dev->driver dev->driver = drv; As this switches dev->driver to non-NULL these reports can be considered to be false-positives (which should be "fixed" by this commit, as well, though). The same issue was reported and tried to be fixed back in 2015 in https://lore.kernel.org/lkml/1421259054-2574-1-git-send-email-a.sangwan@samsung.com/ already. CVE-2024-39501 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-39501.html CVE-2024-39501 https://bugzilla.suse.com/1227754 SUSE Bug 1227754 In the Linux kernel, the following vulnerability has been resolved: ionic: fix use after netif_napi_del() When queues are started, netif_napi_add() and napi_enable() are called. If there are 4 queues and only 3 queues are used for the current configuration, only 3 queues' napi should be registered and enabled. The ionic_qcq_enable() checks whether the .poll pointer is not NULL for enabling only the using queue' napi. Unused queues' napi will not be registered by netif_napi_add(), so the .poll pointer indicates NULL. But it couldn't distinguish whether the napi was unregistered or not because netif_napi_del() doesn't reset the .poll pointer to NULL. So, ionic_qcq_enable() calls napi_enable() for the queue, which was unregistered by netif_napi_del(). Reproducer: ethtool -L <interface name> rx 1 tx 1 combined 0 ethtool -L <interface name> rx 0 tx 0 combined 1 ethtool -L <interface name> rx 0 tx 0 combined 4 Splat looks like: kernel BUG at net/core/dev.c:6666! Oops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 3 PID: 1057 Comm: kworker/3:3 Not tainted 6.10.0-rc2+ #16 Workqueue: events ionic_lif_deferred_work [ionic] RIP: 0010:napi_enable+0x3b/0x40 Code: 48 89 c2 48 83 e2 f6 80 b9 61 09 00 00 00 74 0d 48 83 bf 60 01 00 00 00 74 03 80 ce 01 f0 4f RSP: 0018:ffffb6ed83227d48 EFLAGS: 00010246 RAX: 0000000000000000 RBX: ffff97560cda0828 RCX: 0000000000000029 RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff97560cda0a28 RBP: ffffb6ed83227d50 R08: 0000000000000400 R09: 0000000000000001 R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 R13: ffff97560ce3c1a0 R14: 0000000000000000 R15: ffff975613ba0a20 FS: 0000000000000000(0000) GS:ffff975d5f780000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f8f734ee200 CR3: 0000000103e50000 CR4: 00000000007506f0 PKRU: 55555554 Call Trace: <TASK> ? die+0x33/0x90 ? do_trap+0xd9/0x100 ? napi_enable+0x3b/0x40 ? do_error_trap+0x83/0xb0 ? napi_enable+0x3b/0x40 ? napi_enable+0x3b/0x40 ? exc_invalid_op+0x4e/0x70 ? napi_enable+0x3b/0x40 ? asm_exc_invalid_op+0x16/0x20 ? napi_enable+0x3b/0x40 ionic_qcq_enable+0xb7/0x180 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8] ionic_start_queues+0xc4/0x290 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8] ionic_link_status_check+0x11c/0x170 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8] ionic_lif_deferred_work+0x129/0x280 [ionic 59bdfc8a035436e1c4224ff7d10789e3f14643f8] process_one_work+0x145/0x360 worker_thread+0x2bb/0x3d0 ? __pfx_worker_thread+0x10/0x10 kthread+0xcc/0x100 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x2d/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 CVE-2024-39502 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-39502.html CVE-2024-39502 https://bugzilla.suse.com/1227755 SUSE Bug 1227755 In the Linux kernel, the following vulnerability has been resolved: drm/komeda: check for error-valued pointer komeda_pipeline_get_state() may return an error-valued pointer, thus check the pointer for negative or null value before dereferencing. CVE-2024-39505 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-39505.html CVE-2024-39505 https://bugzilla.suse.com/1227728 SUSE Bug 1227728 In the Linux kernel, the following vulnerability has been resolved: liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet In lio_vf_rep_copy_packet() pg_info->page is compared to a NULL value, but then it is unconditionally passed to skb_add_rx_frag() which looks strange and could lead to null pointer dereference. lio_vf_rep_copy_packet() call trace looks like: octeon_droq_process_packets octeon_droq_fast_process_packets octeon_droq_dispatch_pkt octeon_create_recv_info ...search in the dispatch_list... ->disp_fn(rdisp->rinfo, ...) lio_vf_rep_pkt_recv(struct octeon_recv_info *recv_info, ...) In this path there is no code which sets pg_info->page to NULL. So this check looks unneeded and doesn't solve potential problem. But I guess the author had reason to add a check and I have no such card and can't do real test. In addition, the code in the function liquidio_push_packet() in liquidio/lio_core.c does exactly the same. Based on this, I consider the most acceptable compromise solution to adjust this issue by moving skb_add_rx_frag() into conditional scope. Found by Linux Verification Center (linuxtesting.org) with SVACE. CVE-2024-39506 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-39506.html CVE-2024-39506 https://bugzilla.suse.com/1227729 SUSE Bug 1227729 In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix kernel crash problem in concurrent scenario When link status change, the nic driver need to notify the roce driver to handle this event, but at this time, the roce driver may uninit, then cause kernel crash. To fix the problem, when link status change, need to check whether the roce registered, and when uninit, need to wait link update finish. CVE-2024-39507 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-39507.html CVE-2024-39507 https://bugzilla.suse.com/1227730 SUSE Bug 1227730 In the Linux kernel, the following vulnerability has been resolved: io_uring/io-wq: Use set_bit() and test_bit() at worker->flags Utilize set_bit() and test_bit() on worker->flags within io_uring/io-wq to address potential data races. The structure io_worker->flags may be accessed through various data paths, leading to concurrency issues. When KCSAN is enabled, it reveals data races occurring in io_worker_handle_work and io_wq_activate_free_worker functions. BUG: KCSAN: data-race in io_worker_handle_work / io_wq_activate_free_worker write to 0xffff8885c4246404 of 4 bytes by task 49071 on cpu 28: io_worker_handle_work (io_uring/io-wq.c:434 io_uring/io-wq.c:569) io_wq_worker (io_uring/io-wq.c:?) <snip> read to 0xffff8885c4246404 of 4 bytes by task 49024 on cpu 5: io_wq_activate_free_worker (io_uring/io-wq.c:? io_uring/io-wq.c:285) io_wq_enqueue (io_uring/io-wq.c:947) io_queue_iowq (io_uring/io_uring.c:524) io_req_task_submit (io_uring/io_uring.c:1511) io_handle_tw_list (io_uring/io_uring.c:1198) <snip> Line numbers against commit 18daea77cca6 ("Merge tag 'for-linus' of git://git.kernel.org/pub/scm/virt/kvm/kvm"). These races involve writes and reads to the same memory location by different tasks running on different CPUs. To mitigate this, refactor the code to use atomic operations such as set_bit(), test_bit(), and clear_bit() instead of basic "and" and "or" operations. This ensures thread-safe manipulation of worker flags. Also, move `create_index` to avoid holes in the structure. CVE-2024-39508 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-39508.html CVE-2024-39508 https://bugzilla.suse.com/1227732 SUSE Bug 1227732 In the Linux kernel, the following vulnerability has been resolved: HID: core: remove unnecessary WARN_ON() in implement() Syzkaller hit a warning [1] in a call to implement() when trying to write a value into a field of smaller size in an output report. Since implement() already has a warn message printed out with the help of hid_warn() and value in question gets trimmed with: ... value &= m; ... WARN_ON may be considered superfluous. Remove it to suppress future syzkaller triggers. [1] WARNING: CPU: 0 PID: 5084 at drivers/hid/hid-core.c:1451 implement drivers/hid/hid-core.c:1451 [inline] WARNING: CPU: 0 PID: 5084 at drivers/hid/hid-core.c:1451 hid_output_report+0x548/0x760 drivers/hid/hid-core.c:1863 Modules linked in: CPU: 0 PID: 5084 Comm: syz-executor424 Not tainted 6.9.0-rc7-syzkaller-00183-gcf87f46fd34d #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 RIP: 0010:implement drivers/hid/hid-core.c:1451 [inline] RIP: 0010:hid_output_report+0x548/0x760 drivers/hid/hid-core.c:1863 ... Call Trace: <TASK> __usbhid_submit_report drivers/hid/usbhid/hid-core.c:591 [inline] usbhid_submit_report+0x43d/0x9e0 drivers/hid/usbhid/hid-core.c:636 hiddev_ioctl+0x138b/0x1f00 drivers/hid/usbhid/hiddev.c:726 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:904 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:890 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf5/0x240 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f ... CVE-2024-39509 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-39509.html CVE-2024-39509 https://bugzilla.suse.com/1227733 SUSE Bug 1227733 In the Linux kernel, the following vulnerability has been resolved: cachefiles: remove requests from xarray during flushing requests Even with CACHEFILES_DEAD set, we can still read the requests, so in the following concurrency the request may be used after it has been freed: mount | daemon_thread1 | daemon_thread2 ------------------------------------------------------------ cachefiles_ondemand_init_object cachefiles_ondemand_send_req REQ_A = kzalloc(sizeof(*req) + data_len) wait_for_completion(&REQ_A->done) cachefiles_daemon_read cachefiles_ondemand_daemon_read // close dev fd cachefiles_flush_reqs complete(&REQ_A->done) kfree(REQ_A) xa_lock(&cache->reqs); cachefiles_ondemand_select_req req->msg.opcode != CACHEFILES_OP_READ // req use-after-free !!! xa_unlock(&cache->reqs); xa_destroy(&cache->reqs) Hence remove requests from cache->reqs when flushing them to avoid accessing freed requests. CVE-2024-40900 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40900.html CVE-2024-40900 https://bugzilla.suse.com/1227760 SUSE Bug 1227760 In the Linux kernel, the following vulnerability has been resolved: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory There is a potential out-of-bounds access when using test_bit() on a single word. The test_bit() and set_bit() functions operate on long values, and when testing or setting a single word, they can exceed the word boundary. KASAN detects this issue and produces a dump: BUG: KASAN: slab-out-of-bounds in _scsih_add_device.constprop.0 (./arch/x86/include/asm/bitops.h:60 ./include/asm-generic/bitops/instrumented-atomic.h:29 drivers/scsi/mpt3sas/mpt3sas_scsih.c:7331) mpt3sas Write of size 8 at addr ffff8881d26e3c60 by task kworker/u1536:2/2965 For full log, please look at [1]. Make the allocation at least the size of sizeof(unsigned long) so that set_bit() and test_bit() have sufficient room for read/write operations without overwriting unallocated memory. [1] Link: https://lore.kernel.org/all/ZkNcALr3W3KGYYJG@gmail.com/ CVE-2024-40901 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40901.html CVE-2024-40901 https://bugzilla.suse.com/1227762 SUSE Bug 1227762 In the Linux kernel, the following vulnerability has been resolved: jfs: xattr: fix buffer overflow for invalid xattr When an xattr size is not what is expected, it is printed out to the kernel log in hex format as a form of debugging. But when that xattr size is bigger than the expected size, printing it out can cause an access off the end of the buffer. Fix this all up by properly restricting the size of the debug hex dump in the kernel log. CVE-2024-40902 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40902.html CVE-2024-40902 https://bugzilla.suse.com/1227764 SUSE Bug 1227764 In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps There could be a potential use-after-free case in tcpm_register_source_caps(). This could happen when: * new (say invalid) source caps are advertised * the existing source caps are unregistered * tcpm_register_source_caps() returns with an error as usb_power_delivery_register_capabilities() fails This causes port->partner_source_caps to hold on to the now freed source caps. Reset port->partner_source_caps value to NULL after unregistering existing source caps. CVE-2024-40903 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40903.html CVE-2024-40903 https://bugzilla.suse.com/1227766 SUSE Bug 1227766 In the Linux kernel, the following vulnerability has been resolved: USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages The syzbot fuzzer found that the interrupt-URB completion callback in the cdc-wdm driver was taking too long, and the driver's immediate resubmission of interrupt URBs with -EPROTO status combined with the dummy-hcd emulation to cause a CPU lockup: cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes watchdog: BUG: soft lockup - CPU#0 stuck for 26s! [syz-executor782:6625] CPU#0 Utilization every 4s during lockup: #1: 98% system, 0% softirq, 3% hardirq, 0% idle #2: 98% system, 0% softirq, 3% hardirq, 0% idle #3: 98% system, 0% softirq, 3% hardirq, 0% idle #4: 98% system, 0% softirq, 3% hardirq, 0% idle #5: 98% system, 1% softirq, 3% hardirq, 0% idle Modules linked in: irq event stamp: 73096 hardirqs last enabled at (73095): [<ffff80008037bc00>] console_emit_next_record kernel/printk/printk.c:2935 [inline] hardirqs last enabled at (73095): [<ffff80008037bc00>] console_flush_all+0x650/0xb74 kernel/printk/printk.c:2994 hardirqs last disabled at (73096): [<ffff80008af10b00>] __el1_irq arch/arm64/kernel/entry-common.c:533 [inline] hardirqs last disabled at (73096): [<ffff80008af10b00>] el1_interrupt+0x24/0x68 arch/arm64/kernel/entry-common.c:551 softirqs last enabled at (73048): [<ffff8000801ea530>] softirq_handle_end kernel/softirq.c:400 [inline] softirqs last enabled at (73048): [<ffff8000801ea530>] handle_softirqs+0xa60/0xc34 kernel/softirq.c:582 softirqs last disabled at (73043): [<ffff800080020de8>] __do_softirq+0x14/0x20 kernel/softirq.c:588 CPU: 0 PID: 6625 Comm: syz-executor782 Tainted: G W 6.10.0-rc2-syzkaller-g8867bbd4a056 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 Testing showed that the problem did not occur if the two error messages -- the first two lines above -- were removed; apparently adding material to the kernel log takes a surprisingly large amount of time. In any case, the best approach for preventing these lockups and to avoid spamming the log with thousands of error messages per second is to ratelimit the two dev_err() calls. Therefore we replace them with dev_err_ratelimited(). CVE-2024-40904 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40904.html CVE-2024-40904 https://bugzilla.suse.com/1227772 SUSE Bug 1227772 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Always stop health timer during driver removal Currently, if teardown_hca fails to execute during driver removal, mlx5 does not stop the health timer. Afterwards, mlx5 continue with driver teardown. This may lead to a UAF bug, which results in page fault Oops[1], since the health timer invokes after resources were freed. Hence, stop the health monitor even if teardown_hca fails. [1] mlx5_core 0000:18:00.0: E-Switch: Unload vfs: mode(LEGACY), nvfs(0), necvfs(0), active vports(0) mlx5_core 0000:18:00.0: E-Switch: Disable: mode(LEGACY), nvfs(0), necvfs(0), active vports(0) mlx5_core 0000:18:00.0: E-Switch: Disable: mode(LEGACY), nvfs(0), necvfs(0), active vports(0) mlx5_core 0000:18:00.0: E-Switch: cleanup mlx5_core 0000:18:00.0: wait_func:1155:(pid 1967079): TEARDOWN_HCA(0x103) timeout. Will cause a leak of a command resource mlx5_core 0000:18:00.0: mlx5_function_close:1288:(pid 1967079): tear_down_hca failed, skip cleanup BUG: unable to handle page fault for address: ffffa26487064230 PGD 100c00067 P4D 100c00067 PUD 100e5a067 PMD 105ed7067 PTE 0 Oops: 0000 [#1] PREEMPT SMP PTI CPU: 0 PID: 0 Comm: swapper/0 Tainted: G OE ------- --- 6.7.0-68.fc38.x86_64 #1 Hardware name: Intel Corporation S2600WFT/S2600WFT, BIOS SE5C620.86B.02.01.0013.121520200651 12/15/2020 RIP: 0010:ioread32be+0x34/0x60 RSP: 0018:ffffa26480003e58 EFLAGS: 00010292 RAX: ffffa26487064200 RBX: ffff9042d08161a0 RCX: ffff904c108222c0 RDX: 000000010bbf1b80 RSI: ffffffffc055ddb0 RDI: ffffa26487064230 RBP: ffff9042d08161a0 R08: 0000000000000022 R09: ffff904c108222e8 R10: 0000000000000004 R11: 0000000000000441 R12: ffffffffc055ddb0 R13: ffffa26487064200 R14: ffffa26480003f00 R15: ffff904c108222c0 FS: 0000000000000000(0000) GS:ffff904c10800000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: ffffa26487064230 CR3: 00000002c4420006 CR4: 00000000007706f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <IRQ> ? __die+0x23/0x70 ? page_fault_oops+0x171/0x4e0 ? exc_page_fault+0x175/0x180 ? asm_exc_page_fault+0x26/0x30 ? __pfx_poll_health+0x10/0x10 [mlx5_core] ? __pfx_poll_health+0x10/0x10 [mlx5_core] ? ioread32be+0x34/0x60 mlx5_health_check_fatal_sensors+0x20/0x100 [mlx5_core] ? __pfx_poll_health+0x10/0x10 [mlx5_core] poll_health+0x42/0x230 [mlx5_core] ? __next_timer_interrupt+0xbc/0x110 ? __pfx_poll_health+0x10/0x10 [mlx5_core] call_timer_fn+0x21/0x130 ? __pfx_poll_health+0x10/0x10 [mlx5_core] __run_timers+0x222/0x2c0 run_timer_softirq+0x1d/0x40 __do_softirq+0xc9/0x2c8 __irq_exit_rcu+0xa6/0xc0 sysvec_apic_timer_interrupt+0x72/0x90 </IRQ> <TASK> asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:cpuidle_enter_state+0xcc/0x440 ? cpuidle_enter_state+0xbd/0x440 cpuidle_enter+0x2d/0x40 do_idle+0x20d/0x270 cpu_startup_entry+0x2a/0x30 rest_init+0xd0/0xd0 arch_call_rest_init+0xe/0x30 start_kernel+0x709/0xa90 x86_64_start_reservations+0x18/0x30 x86_64_start_kernel+0x96/0xa0 secondary_startup_64_no_verify+0x18f/0x19b ---[ end trace 0000000000000000 ]--- CVE-2024-40906 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40906.html CVE-2024-40906 https://bugzilla.suse.com/1227763 SUSE Bug 1227763 In the Linux kernel, the following vulnerability has been resolved: bpf: Set run context for rawtp test_run callback syzbot reported crash when rawtp program executed through the test_run interface calls bpf_get_attach_cookie helper or any other helper that touches task->bpf_ctx pointer. Setting the run context (task->bpf_ctx pointer) for test_run callback. CVE-2024-40908 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40908.html CVE-2024-40908 https://bugzilla.suse.com/1227783 SUSE Bug 1227783 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a potential use-after-free in bpf_link_free() After commit 1a80dbcb2dba, bpf_link can be freed by link->ops->dealloc_deferred, but the code still tests and uses link->ops->dealloc afterward, which leads to a use-after-free as reported by syzbot. Actually, one of them should be sufficient, so just call one of them instead of both. Also add a WARN_ON() in case of any problematic implementation. CVE-2024-40909 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40909.html CVE-2024-40909 https://bugzilla.suse.com/1227798 SUSE Bug 1227798 https://bugzilla.suse.com/1228349 SUSE Bug 1228349 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Lock wiphy in cfg80211_get_station Wiphy should be locked before calling rdev_get_station() (see lockdep assert in ieee80211_get_station()). This fixes the following kernel NULL dereference: Unable to handle kernel NULL pointer dereference at virtual address 0000000000000050 Mem abort info: ESR = 0x0000000096000006 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x06: level 2 translation fault Data abort info: ISV = 0, ISS = 0x00000006 CM = 0, WnR = 0 user pgtable: 4k pages, 48-bit VAs, pgdp=0000000003001000 [0000000000000050] pgd=0800000002dca003, p4d=0800000002dca003, pud=08000000028e9003, pmd=0000000000000000 Internal error: Oops: 0000000096000006 [#1] SMP Modules linked in: netconsole dwc3_meson_g12a dwc3_of_simple dwc3 ip_gre gre ath10k_pci ath10k_core ath9k ath9k_common ath9k_hw ath CPU: 0 PID: 1091 Comm: kworker/u8:0 Not tainted 6.4.0-02144-g565f9a3a7911-dirty #705 Hardware name: RPT (r1) (DT) Workqueue: bat_events batadv_v_elp_throughput_metric_update pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : ath10k_sta_statistics+0x10/0x2dc [ath10k_core] lr : sta_set_sinfo+0xcc/0xbd4 sp : ffff000007b43ad0 x29: ffff000007b43ad0 x28: ffff0000071fa900 x27: ffff00000294ca98 x26: ffff000006830880 x25: ffff000006830880 x24: ffff00000294c000 x23: 0000000000000001 x22: ffff000007b43c90 x21: ffff800008898acc x20: ffff00000294c6e8 x19: ffff000007b43c90 x18: 0000000000000000 x17: 445946354d552d78 x16: 62661f7200000000 x15: 57464f445946354d x14: 0000000000000000 x13: 00000000000000e3 x12: d5f0acbcebea978e x11: 00000000000000e3 x10: 000000010048fe41 x9 : 0000000000000000 x8 : ffff000007b43d90 x7 : 000000007a1e2125 x6 : 0000000000000000 x5 : ffff0000024e0900 x4 : ffff800000a0250c x3 : ffff000007b43c90 x2 : ffff00000294ca98 x1 : ffff000006831920 x0 : 0000000000000000 Call trace: ath10k_sta_statistics+0x10/0x2dc [ath10k_core] sta_set_sinfo+0xcc/0xbd4 ieee80211_get_station+0x2c/0x44 cfg80211_get_station+0x80/0x154 batadv_v_elp_get_throughput+0x138/0x1fc batadv_v_elp_throughput_metric_update+0x1c/0xa4 process_one_work+0x1ec/0x414 worker_thread+0x70/0x46c kthread+0xdc/0xe0 ret_from_fork+0x10/0x20 Code: a9bb7bfd 910003fd a90153f3 f9411c40 (f9402814) This happens because STA has time to disconnect and reconnect before batadv_v_elp_throughput_metric_update() delayed work gets scheduled. In this situation, ath10k_sta_state() can be in the middle of resetting arsta data when the work queue get chance to be scheduled and ends up accessing it. Locking wiphy prevents that. CVE-2024-40911 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40911.html CVE-2024-40911 https://bugzilla.suse.com/1227792 SUSE Bug 1227792 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup() The ieee80211_sta_ps_deliver_wakeup() function takes sta->ps_lock to synchronizes with ieee80211_tx_h_unicast_ps_buf() which is called from softirq context. However using only spin_lock() to get sta->ps_lock in ieee80211_sta_ps_deliver_wakeup() does not prevent softirq to execute on this same CPU, to run ieee80211_tx_h_unicast_ps_buf() and try to take this same lock ending in deadlock. Below is an example of rcu stall that arises in such situation. rcu: INFO: rcu_sched self-detected stall on CPU rcu: 2-....: (42413413 ticks this GP) idle=b154/1/0x4000000000000000 softirq=1763/1765 fqs=21206996 rcu: (t=42586894 jiffies g=2057 q=362405 ncpus=4) CPU: 2 PID: 719 Comm: wpa_supplicant Tainted: G W 6.4.0-02158-g1b062f552873 #742 Hardware name: RPT (r1) (DT) pstate: 00000005 (nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : queued_spin_lock_slowpath+0x58/0x2d0 lr : invoke_tx_handlers_early+0x5b4/0x5c0 sp : ffff00001ef64660 x29: ffff00001ef64660 x28: ffff000009bc1070 x27: ffff000009bc0ad8 x26: ffff000009bc0900 x25: ffff00001ef647a8 x24: 0000000000000000 x23: ffff000009bc0900 x22: ffff000009bc0900 x21: ffff00000ac0e000 x20: ffff00000a279e00 x19: ffff00001ef646e8 x18: 0000000000000000 x17: ffff800016468000 x16: ffff00001ef608c0 x15: 0010533c93f64f80 x14: 0010395c9faa3946 x13: 0000000000000000 x12: 00000000fa83b2da x11: 000000012edeceea x10: ffff0000010fbe00 x9 : 0000000000895440 x8 : 000000000010533c x7 : ffff00000ad8b740 x6 : ffff00000c350880 x5 : 0000000000000007 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000000 x1 : 0000000000000001 x0 : ffff00000ac0e0e8 Call trace: queued_spin_lock_slowpath+0x58/0x2d0 ieee80211_tx+0x80/0x12c ieee80211_tx_pending+0x110/0x278 tasklet_action_common.constprop.0+0x10c/0x144 tasklet_action+0x20/0x28 _stext+0x11c/0x284 ____do_softirq+0xc/0x14 call_on_irq_stack+0x24/0x34 do_softirq_own_stack+0x18/0x20 do_softirq+0x74/0x7c __local_bh_enable_ip+0xa0/0xa4 _ieee80211_wake_txqs+0x3b0/0x4b8 __ieee80211_wake_queue+0x12c/0x168 ieee80211_add_pending_skbs+0xec/0x138 ieee80211_sta_ps_deliver_wakeup+0x2a4/0x480 ieee80211_mps_sta_status_update.part.0+0xd8/0x11c ieee80211_mps_sta_status_update+0x18/0x24 sta_apply_parameters+0x3bc/0x4c0 ieee80211_change_station+0x1b8/0x2dc nl80211_set_station+0x444/0x49c genl_family_rcv_msg_doit.isra.0+0xa4/0xfc genl_rcv_msg+0x1b0/0x244 netlink_rcv_skb+0x38/0x10c genl_rcv+0x34/0x48 netlink_unicast+0x254/0x2bc netlink_sendmsg+0x190/0x3b4 ____sys_sendmsg+0x1e8/0x218 ___sys_sendmsg+0x68/0x8c __sys_sendmsg+0x44/0x84 __arm64_sys_sendmsg+0x20/0x28 do_el0_svc+0x6c/0xe8 el0_svc+0x14/0x48 el0t_64_sync_handler+0xb0/0xb4 el0t_64_sync+0x14c/0x150 Using spin_lock_bh()/spin_unlock_bh() instead prevents softirq to raise on the same CPU that is holding the lock. CVE-2024-40912 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40912.html CVE-2024-40912 https://bugzilla.suse.com/1227790 SUSE Bug 1227790 In the Linux kernel, the following vulnerability has been resolved: drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found When reading EDID fails and driver reports no modes available, the DRM core adds an artificial 1024x786 mode to the connector. Unfortunately some variants of the Exynos HDMI (like the one in Exynos4 SoCs) are not able to drive such mode, so report a safe 640x480 mode instead of nothing in case of the EDID reading failure. This fixes the following issue observed on Trats2 board since commit 13d5b040363c ("drm/exynos: do not return negative values from .get_modes()"): [drm] Exynos DRM: using 11c00000.fimd device for DMA mapping operations exynos-drm exynos-drm: bound 11c00000.fimd (ops fimd_component_ops) exynos-drm exynos-drm: bound 12c10000.mixer (ops mixer_component_ops) exynos-dsi 11c80000.dsi: [drm:samsung_dsim_host_attach] Attached s6e8aa0 device (lanes:4 bpp:24 mode-flags:0x10b) exynos-drm exynos-drm: bound 11c80000.dsi (ops exynos_dsi_component_ops) exynos-drm exynos-drm: bound 12d00000.hdmi (ops hdmi_component_ops) [drm] Initialized exynos 1.1.0 20180330 for exynos-drm on minor 1 exynos-hdmi 12d00000.hdmi: [drm:hdmiphy_enable.part.0] *ERROR* PLL could not reach steady state panel-samsung-s6e8aa0 11c80000.dsi.0: ID: 0xa2, 0x20, 0x8c exynos-mixer 12c10000.mixer: timeout waiting for VSYNC ------------[ cut here ]------------ WARNING: CPU: 1 PID: 11 at drivers/gpu/drm/drm_atomic_helper.c:1682 drm_atomic_helper_wait_for_vblanks.part.0+0x2b0/0x2b8 [CRTC:70:crtc-1] vblank wait timed out Modules linked in: CPU: 1 PID: 11 Comm: kworker/u16:0 Not tainted 6.9.0-rc5-next-20240424 #14913 Hardware name: Samsung Exynos (Flattened Device Tree) Workqueue: events_unbound deferred_probe_work_func Call trace: unwind_backtrace from show_stack+0x10/0x14 show_stack from dump_stack_lvl+0x68/0x88 dump_stack_lvl from __warn+0x7c/0x1c4 __warn from warn_slowpath_fmt+0x11c/0x1a8 warn_slowpath_fmt from drm_atomic_helper_wait_for_vblanks.part.0+0x2b0/0x2b8 drm_atomic_helper_wait_for_vblanks.part.0 from drm_atomic_helper_commit_tail_rpm+0x7c/0x8c drm_atomic_helper_commit_tail_rpm from commit_tail+0x9c/0x184 commit_tail from drm_atomic_helper_commit+0x168/0x190 drm_atomic_helper_commit from drm_atomic_commit+0xb4/0xe0 drm_atomic_commit from drm_client_modeset_commit_atomic+0x23c/0x27c drm_client_modeset_commit_atomic from drm_client_modeset_commit_locked+0x60/0x1cc drm_client_modeset_commit_locked from drm_client_modeset_commit+0x24/0x40 drm_client_modeset_commit from __drm_fb_helper_restore_fbdev_mode_unlocked+0x9c/0xc4 __drm_fb_helper_restore_fbdev_mode_unlocked from drm_fb_helper_set_par+0x2c/0x3c drm_fb_helper_set_par from fbcon_init+0x3d8/0x550 fbcon_init from visual_init+0xc0/0x108 visual_init from do_bind_con_driver+0x1b8/0x3a4 do_bind_con_driver from do_take_over_console+0x140/0x1ec do_take_over_console from do_fbcon_takeover+0x70/0xd0 do_fbcon_takeover from fbcon_fb_registered+0x19c/0x1ac fbcon_fb_registered from register_framebuffer+0x190/0x21c register_framebuffer from __drm_fb_helper_initial_config_and_unlock+0x350/0x574 __drm_fb_helper_initial_config_and_unlock from exynos_drm_fbdev_client_hotplug+0x6c/0xb0 exynos_drm_fbdev_client_hotplug from drm_client_register+0x58/0x94 drm_client_register from exynos_drm_bind+0x160/0x190 exynos_drm_bind from try_to_bring_up_aggregate_device+0x200/0x2d8 try_to_bring_up_aggregate_device from __component_add+0xb0/0x170 __component_add from mixer_probe+0x74/0xcc mixer_probe from platform_probe+0x5c/0xb8 platform_probe from really_probe+0xe0/0x3d8 really_probe from __driver_probe_device+0x9c/0x1e4 __driver_probe_device from driver_probe_device+0x30/0xc0 driver_probe_device from __device_attach_driver+0xa8/0x120 __device_attach_driver from bus_for_each_drv+0x80/0xcc bus_for_each_drv from __device_attach+0xac/0x1fc __device_attach from bus_probe_device+0x8c/0x90 bus_probe_device from deferred_probe_work_func+0 ---truncated--- CVE-2024-40916 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40916.html CVE-2024-40916 https://bugzilla.suse.com/1227846 SUSE Bug 1227846 In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send() In case of token is released due to token->state == BNXT_HWRM_DEFERRED, released token (set to NULL) is used in log messages. This issue is expected to be prevented by HWRM_ERR_CODE_PF_UNAVAILABLE error code. But this error code is returned by recent firmware. So some firmware may not return it. This may lead to NULL pointer dereference. Adjust this issue by adding token pointer check. Found by Linux Verification Center (linuxtesting.org) with SVACE. CVE-2024-40919 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40919.html CVE-2024-40919 https://bugzilla.suse.com/1227779 SUSE Bug 1227779 In the Linux kernel, the following vulnerability has been resolved: vmxnet3: disable rx data ring on dma allocation failure When vmxnet3_rq_create() fails to allocate memory for rq->data_ring.base, the subsequent call to vmxnet3_rq_destroy_all_rxdataring does not reset rq->data_ring.desc_size for the data ring that failed, which presumably causes the hypervisor to reference it on packet reception. To fix this bug, rq->data_ring.desc_size needs to be set to 0 to tell the hypervisor to disable this feature. [ 95.436876] kernel BUG at net/core/skbuff.c:207! [ 95.439074] invalid opcode: 0000 [#1] PREEMPT SMP NOPTI [ 95.440411] CPU: 7 PID: 0 Comm: swapper/7 Not tainted 6.9.3-dirty #1 [ 95.441558] Hardware name: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 12/12/2018 [ 95.443481] RIP: 0010:skb_panic+0x4d/0x4f [ 95.444404] Code: 4f 70 50 8b 87 c0 00 00 00 50 8b 87 bc 00 00 00 50 ff b7 d0 00 00 00 4c 8b 8f c8 00 00 00 48 c7 c7 68 e8 be 9f e8 63 58 f9 ff <0f> 0b 48 8b 14 24 48 c7 c1 d0 73 65 9f e8 a1 ff ff ff 48 8b 14 24 [ 95.447684] RSP: 0018:ffffa13340274dd0 EFLAGS: 00010246 [ 95.448762] RAX: 0000000000000089 RBX: ffff8fbbc72b02d0 RCX: 000000000000083f [ 95.450148] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 95.451520] RBP: 000000000000002d R08: 0000000000000000 R09: ffffa13340274c60 [ 95.452886] R10: ffffffffa04ed468 R11: 0000000000000002 R12: 0000000000000000 [ 95.454293] R13: ffff8fbbdab3c2d0 R14: ffff8fbbdbd829e0 R15: ffff8fbbdbd809e0 [ 95.455682] FS: 0000000000000000(0000) GS:ffff8fbeefd80000(0000) knlGS:0000000000000000 [ 95.457178] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.458340] CR2: 00007fd0d1f650c8 CR3: 0000000115f28000 CR4: 00000000000406f0 [ 95.459791] Call Trace: [ 95.460515] <IRQ> [ 95.461180] ? __die_body.cold+0x19/0x27 [ 95.462150] ? die+0x2e/0x50 [ 95.462976] ? do_trap+0xca/0x110 [ 95.463973] ? do_error_trap+0x6a/0x90 [ 95.464966] ? skb_panic+0x4d/0x4f [ 95.465901] ? exc_invalid_op+0x50/0x70 [ 95.466849] ? skb_panic+0x4d/0x4f [ 95.467718] ? asm_exc_invalid_op+0x1a/0x20 [ 95.468758] ? skb_panic+0x4d/0x4f [ 95.469655] skb_put.cold+0x10/0x10 [ 95.470573] vmxnet3_rq_rx_complete+0x862/0x11e0 [vmxnet3] [ 95.471853] vmxnet3_poll_rx_only+0x36/0xb0 [vmxnet3] [ 95.473185] __napi_poll+0x2b/0x160 [ 95.474145] net_rx_action+0x2c6/0x3b0 [ 95.475115] handle_softirqs+0xe7/0x2a0 [ 95.476122] __irq_exit_rcu+0x97/0xb0 [ 95.477109] common_interrupt+0x85/0xa0 [ 95.478102] </IRQ> [ 95.478846] <TASK> [ 95.479603] asm_common_interrupt+0x26/0x40 [ 95.480657] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 95.481801] Code: 22 d7 e9 54 87 01 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 93 ba 3b 00 fb f4 <e9> 2c 87 01 00 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 [ 95.485563] RSP: 0018:ffffa133400ffe58 EFLAGS: 00000246 [ 95.486882] RAX: 0000000000004000 RBX: ffff8fbbc1d14064 RCX: 0000000000000000 [ 95.488477] RDX: ffff8fbeefd80000 RSI: ffff8fbbc1d14000 RDI: 0000000000000001 [ 95.490067] RBP: ffff8fbbc1d14064 R08: ffffffffa0652260 R09: 00000000000010d3 [ 95.491683] R10: 0000000000000018 R11: ffff8fbeefdb4764 R12: ffffffffa0652260 [ 95.493389] R13: ffffffffa06522e0 R14: 0000000000000001 R15: 0000000000000000 [ 95.495035] acpi_safe_halt+0x14/0x20 [ 95.496127] acpi_idle_do_entry+0x2f/0x50 [ 95.497221] acpi_idle_enter+0x7f/0xd0 [ 95.498272] cpuidle_enter_state+0x81/0x420 [ 95.499375] cpuidle_enter+0x2d/0x40 [ 95.500400] do_idle+0x1e5/0x240 [ 95.501385] cpu_startup_entry+0x29/0x30 [ 95.502422] start_secondary+0x11c/0x140 [ 95.503454] common_startup_64+0x13e/0x141 [ 95.504466] </TASK> [ 95.505197] Modules linked in: nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ip ---truncated--- CVE-2024-40923 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40923.html CVE-2024-40923 https://bugzilla.suse.com/1227786 SUSE Bug 1227786 In the Linux kernel, the following vulnerability has been resolved: drm/i915/dpt: Make DPT object unshrinkable In some scenarios, the DPT object gets shrunk but the actual framebuffer did not and thus its still there on the DPT's vm->bound_list. Then it tries to rewrite the PTEs via a stale CPU mapping. This causes panic. [vsyrjala: Add TODO comment] (cherry picked from commit 51064d471c53dcc8eddd2333c3f1c1d9131ba36c) CVE-2024-40924 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40924.html CVE-2024-40924 https://bugzilla.suse.com/1227787 SUSE Bug 1227787 In the Linux kernel, the following vulnerability has been resolved: xhci: Handle TD clearing for multiple streams case When multiple streams are in use, multiple TDs might be in flight when an endpoint is stopped. We need to issue a Set TR Dequeue Pointer for each, to ensure everything is reset properly and the caches cleared. Change the logic so that any N>1 TDs found active for different streams are deferred until after the first one is processed, calling xhci_invalidate_cancelled_tds() again from xhci_handle_cmd_set_deq() to queue another command until we are done with all of them. Also change the error/"should never happen" paths to ensure we at least clear any affected TDs, even if we can't issue a command to clear the hardware cache, and complain loudly with an xhci_warn() if this ever happens. This problem case dates back to commit e9df17eb1408 ("USB: xhci: Correct assumptions about number of rings per endpoint.") early on in the XHCI driver's life, when stream support was first added. It was then identified but not fixed nor made into a warning in commit 674f8438c121 ("xhci: split handling halted endpoints into two steps"), which added a FIXME comment for the problem case (without materially changing the behavior as far as I can tell, though the new logic made the problem more obvious). Then later, in commit 94f339147fc3 ("xhci: Fix failure to give back some cached cancelled URBs."), it was acknowledged again. [Mathias: commit 94f339147fc3 ("xhci: Fix failure to give back some cached cancelled URBs.") was a targeted regression fix to the previously mentioned patch. Users reported issues with usb stuck after unmounting/disconnecting UAS devices. This rolled back the TD clearing of multiple streams to its original state.] Apparently the commit author was aware of the problem (yet still chose to submit it): It was still mentioned as a FIXME, an xhci_dbg() was added to log the problem condition, and the remaining issue was mentioned in the commit description. The choice of making the log type xhci_dbg() for what is, at this point, a completely unhandled and known broken condition is puzzling and unfortunate, as it guarantees that no actual users would see the log in production, thereby making it nigh undebuggable (indeed, even if you turn on DEBUG, the message doesn't really hint at there being a problem at all). It took me *months* of random xHC crashes to finally find a reliable repro and be able to do a deep dive debug session, which could all have been avoided had this unhandled, broken condition been actually reported with a warning, as it should have been as a bug intentionally left in unfixed (never mind that it shouldn't have been left in at all). > Another fix to solve clearing the caches of all stream rings with > cancelled TDs is needed, but not as urgent. 3 years after that statement and 14 years after the original bug was introduced, I think it's finally time to fix it. And maybe next time let's not leave bugs unfixed (that are actually worse than the original bug), and let's actually get people to review kernel commits please. Fixes xHC crashes and IOMMU faults with UAS devices when handling errors/faults. Easiest repro is to use `hdparm` to mark an early sector (e.g. 1024) on a disk as bad, then `cat /dev/sdX > /dev/null` in a loop. At least in the case of JMicron controllers, the read errors end up having to cancel two TDs (for two queued requests to different streams) and the one that didn't get cleared properly ends up faulting the xHC entirely when it tries to access DMA pages that have since been unmapped, referred to by the stale TDs. This normally happens quickly (after two or three loops). After this fix, I left the `cat` in a loop running overnight and experienced no xHC failures, with all read errors recovered properly. Repro'd and tested on an Apple M1 Mac Mini (dwc3 host). On systems without an IOMMU, this bug would instead silently corrupt freed memory, making this a ---truncated--- CVE-2024-40927 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40927.html CVE-2024-40927 https://bugzilla.suse.com/1227816 SUSE Bug 1227816 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: check n_ssids before accessing the ssids In some versions of cfg80211, the ssids poinet might be a valid one even though n_ssids is 0. Accessing the pointer in this case will cuase an out-of-bound access. Fix this by checking n_ssids first. CVE-2024-40929 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40929.html CVE-2024-40929 https://bugzilla.suse.com/1227774 SUSE Bug 1227774 In the Linux kernel, the following vulnerability has been resolved: mptcp: ensure snd_una is properly initialized on connect This is strictly related to commit fb7a0d334894 ("mptcp: ensure snd_nxt is properly initialized on connect"). It turns out that syzkaller can trigger the retransmit after fallback and before processing any other incoming packet - so that snd_una is still left uninitialized. Address the issue explicitly initializing snd_una together with snd_nxt and write_seq. CVE-2024-40931 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40931.html CVE-2024-40931 https://bugzilla.suse.com/1227780 SUSE Bug 1227780 In the Linux kernel, the following vulnerability has been resolved: drm/exynos/vidi: fix memory leak in .get_modes() The duplicated EDID is never freed. Fix it. CVE-2024-40932 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40932.html CVE-2024-40932 https://bugzilla.suse.com/1227828 SUSE Bug 1227828 In the Linux kernel, the following vulnerability has been resolved: HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode() Fix a memory leak on logi_dj_recv_send_report() error path. CVE-2024-40934 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40934.html CVE-2024-40934 https://bugzilla.suse.com/1227796 SUSE Bug 1227796 In the Linux kernel, the following vulnerability has been resolved: cachefiles: flush all requests after setting CACHEFILES_DEAD In ondemand mode, when the daemon is processing an open request, if the kernel flags the cache as CACHEFILES_DEAD, the cachefiles_daemon_write() will always return -EIO, so the daemon can't pass the copen to the kernel. Then the kernel process that is waiting for the copen triggers a hung_task. Since the DEAD state is irreversible, it can only be exited by closing /dev/cachefiles. Therefore, after calling cachefiles_io_error() to mark the cache as CACHEFILES_DEAD, if in ondemand mode, flush all requests to avoid the above hungtask. We may still be able to read some of the cached data before closing the fd of /dev/cachefiles. Note that this relies on the patch that adds reference counting to the req, otherwise it may UAF. CVE-2024-40935 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40935.html CVE-2024-40935 https://bugzilla.suse.com/1227797 SUSE Bug 1227797 In the Linux kernel, the following vulnerability has been resolved: gve: Clear napi->skb before dev_kfree_skb_any() gve_rx_free_skb incorrectly leaves napi->skb referencing an skb after it is freed with dev_kfree_skb_any(). This can result in a subsequent call to napi_get_frags returning a dangling pointer. Fix this by clearing napi->skb before the skb is freed. CVE-2024-40937 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40937.html CVE-2024-40937 https://bugzilla.suse.com/1227836 SUSE Bug 1227836 https://bugzilla.suse.com/1227903 SUSE Bug 1227903 In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail In case of flow rule creation fail in mlx5_lag_create_port_sel_table(), instead of previously created rules, the tainted pointer is deleted deveral times. Fix this bug by using correct flow rules pointers. Found by Linux Verification Center (linuxtesting.org) with SVACE. CVE-2024-40940 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40940.html CVE-2024-40940 https://bugzilla.suse.com/1227800 SUSE Bug 1227800 In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't read past the mfuart notifcation In case the firmware sends a notification that claims it has more data than it has, we will read past that was allocated for the notification. Remove the print of the buffer, we won't see it by default. If needed, we can see the content with tracing. This was reported by KFENCE. CVE-2024-40941 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40941.html CVE-2024-40941 https://bugzilla.suse.com/1227771 SUSE Bug 1227771 In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects The hwmp code use objects of type mesh_preq_queue, added to a list in ieee80211_if_mesh, to keep track of mpath we need to resolve. If the mpath gets deleted, ex mesh interface is removed, the entries in that list will never get cleaned. Fix this by flushing all corresponding items of the preq_queue in mesh_path_flush_pending(). This should take care of KASAN reports like this: unreferenced object 0xffff00000668d800 (size 128): comm "kworker/u8:4", pid 67, jiffies 4295419552 (age 1836.444s) hex dump (first 32 bytes): 00 1f 05 09 00 00 ff ff 00 d5 68 06 00 00 ff ff ..........h..... 8e 97 ea eb 3e b8 01 00 00 00 00 00 00 00 00 00 ....>........... backtrace: [<000000007302a0b6>] __kmem_cache_alloc_node+0x1e0/0x35c [<00000000049bd418>] kmalloc_trace+0x34/0x80 [<0000000000d792bb>] mesh_queue_preq+0x44/0x2a8 [<00000000c99c3696>] mesh_nexthop_resolve+0x198/0x19c [<00000000926bf598>] ieee80211_xmit+0x1d0/0x1f4 [<00000000fc8c2284>] __ieee80211_subif_start_xmit+0x30c/0x764 [<000000005926ee38>] ieee80211_subif_start_xmit+0x9c/0x7a4 [<000000004c86e916>] dev_hard_start_xmit+0x174/0x440 [<0000000023495647>] __dev_queue_xmit+0xe24/0x111c [<00000000cfe9ca78>] batadv_send_skb_packet+0x180/0x1e4 [<000000007bacc5d5>] batadv_v_elp_periodic_work+0x2f4/0x508 [<00000000adc3cd94>] process_one_work+0x4b8/0xa1c [<00000000b36425d1>] worker_thread+0x9c/0x634 [<0000000005852dd5>] kthread+0x1bc/0x1c4 [<000000005fccd770>] ret_from_fork+0x10/0x20 unreferenced object 0xffff000009051f00 (size 128): comm "kworker/u8:4", pid 67, jiffies 4295419553 (age 1836.440s) hex dump (first 32 bytes): 90 d6 92 0d 00 00 ff ff 00 d8 68 06 00 00 ff ff ..........h..... 36 27 92 e4 02 e0 01 00 00 58 79 06 00 00 ff ff 6'.......Xy..... backtrace: [<000000007302a0b6>] __kmem_cache_alloc_node+0x1e0/0x35c [<00000000049bd418>] kmalloc_trace+0x34/0x80 [<0000000000d792bb>] mesh_queue_preq+0x44/0x2a8 [<00000000c99c3696>] mesh_nexthop_resolve+0x198/0x19c [<00000000926bf598>] ieee80211_xmit+0x1d0/0x1f4 [<00000000fc8c2284>] __ieee80211_subif_start_xmit+0x30c/0x764 [<000000005926ee38>] ieee80211_subif_start_xmit+0x9c/0x7a4 [<000000004c86e916>] dev_hard_start_xmit+0x174/0x440 [<0000000023495647>] __dev_queue_xmit+0xe24/0x111c [<00000000cfe9ca78>] batadv_send_skb_packet+0x180/0x1e4 [<000000007bacc5d5>] batadv_v_elp_periodic_work+0x2f4/0x508 [<00000000adc3cd94>] process_one_work+0x4b8/0xa1c [<00000000b36425d1>] worker_thread+0x9c/0x634 [<0000000005852dd5>] kthread+0x1bc/0x1c4 [<000000005fccd770>] ret_from_fork+0x10/0x20 CVE-2024-40942 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40942.html CVE-2024-40942 https://bugzilla.suse.com/1227770 SUSE Bug 1227770 In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix races between hole punching and AIO+DIO After commit "ocfs2: return real error code in ocfs2_dio_wr_get_block", fstests/generic/300 become from always failed to sometimes failed: ======================================================================== [ 473.293420 ] run fstests generic/300 [ 475.296983 ] JBD2: Ignoring recovery information on journal [ 475.302473 ] ocfs2: Mounting device (253,1) on (node local, slot 0) with ordered data mode. [ 494.290998 ] OCFS2: ERROR (device dm-1): ocfs2_change_extent_flag: Owner 5668 has an extent at cpos 78723 which can no longer be found [ 494.291609 ] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 494.292018 ] OCFS2: File system is now read-only. [ 494.292224 ] (kworker/19:11,2628,19):ocfs2_mark_extent_written:5272 ERROR: status = -30 [ 494.292602 ] (kworker/19:11,2628,19):ocfs2_dio_end_io_write:2374 ERROR: status = -3 fio: io_u error on file /mnt/scratch/racer: Read-only file system: write offset=460849152, buflen=131072 ========================================================================= In __blockdev_direct_IO, ocfs2_dio_wr_get_block is called to add unwritten extents to a list. extents are also inserted into extent tree in ocfs2_write_begin_nolock. Then another thread call fallocate to puch a hole at one of the unwritten extent. The extent at cpos was removed by ocfs2_remove_extent(). At end io worker thread, ocfs2_search_extent_list found there is no such extent at the cpos. T1 T2 T3 inode lock ... insert extents ... inode unlock ocfs2_fallocate __ocfs2_change_file_space inode lock lock ip_alloc_sem ocfs2_remove_inode_range inode ocfs2_remove_btree_range ocfs2_remove_extent ^---remove the extent at cpos 78723 ... unlock ip_alloc_sem inode unlock ocfs2_dio_end_io ocfs2_dio_end_io_write lock ip_alloc_sem ocfs2_mark_extent_written ocfs2_change_extent_flag ocfs2_search_extent_list ^---failed to find extent ... unlock ip_alloc_sem In most filesystems, fallocate is not compatible with racing with AIO+DIO, so fix it by adding to wait for all dio before fallocate/punch_hole like ext4. CVE-2024-40943 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40943.html CVE-2024-40943 https://bugzilla.suse.com/1227849 SUSE Bug 1227849 In the Linux kernel, the following vulnerability has been resolved: iommu: Return right value in iommu_sva_bind_device() iommu_sva_bind_device() should return either a sva bond handle or an ERR_PTR value in error cases. Existing drivers (idxd and uacce) only check the return value with IS_ERR(). This could potentially lead to a kernel NULL pointer dereference issue if the function returns NULL instead of an error pointer. In reality, this doesn't cause any problems because iommu_sva_bind_device() only returns NULL when the kernel is not configured with CONFIG_IOMMU_SVA. In this case, iommu_dev_enable_feature(dev, IOMMU_DEV_FEAT_SVA) will return an error, and the device drivers won't call iommu_sva_bind_device() at all. CVE-2024-40945 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40945.html CVE-2024-40945 https://bugzilla.suse.com/1227802 SUSE Bug 1227802 In the Linux kernel, the following vulnerability has been resolved: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() Use {READ,WRITE}_ONCE() to access kvm->last_boosted_vcpu to ensure the loads and stores are atomic. In the extremely unlikely scenario the compiler tears the stores, it's theoretically possible for KVM to attempt to get a vCPU using an out-of-bounds index, e.g. if the write is split into multiple 8-bit stores, and is paired with a 32-bit load on a VM with 257 vCPUs: CPU0 CPU1 last_boosted_vcpu = 0xff; (last_boosted_vcpu = 0x100) last_boosted_vcpu[15:8] = 0x01; i = (last_boosted_vcpu = 0x1ff) last_boosted_vcpu[7:0] = 0x00; vcpu = kvm->vcpu_array[0x1ff]; As detected by KCSAN: BUG: KCSAN: data-race in kvm_vcpu_on_spin [kvm] / kvm_vcpu_on_spin [kvm] write to 0xffffc90025a92344 of 4 bytes by task 4340 on cpu 16: kvm_vcpu_on_spin (arch/x86/kvm/../../../virt/kvm/kvm_main.c:4112) kvm handle_pause (arch/x86/kvm/vmx/vmx.c:5929) kvm_intel vmx_handle_exit (arch/x86/kvm/vmx/vmx.c:? arch/x86/kvm/vmx/vmx.c:6606) kvm_intel vcpu_run (arch/x86/kvm/x86.c:11107 arch/x86/kvm/x86.c:11211) kvm kvm_arch_vcpu_ioctl_run (arch/x86/kvm/x86.c:?) kvm kvm_vcpu_ioctl (arch/x86/kvm/../../../virt/kvm/kvm_main.c:?) kvm __se_sys_ioctl (fs/ioctl.c:52 fs/ioctl.c:904 fs/ioctl.c:890) __x64_sys_ioctl (fs/ioctl.c:890) x64_sys_call (arch/x86/entry/syscall_64.c:33) do_syscall_64 (arch/x86/entry/common.c:?) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) read to 0xffffc90025a92344 of 4 bytes by task 4342 on cpu 4: kvm_vcpu_on_spin (arch/x86/kvm/../../../virt/kvm/kvm_main.c:4069) kvm handle_pause (arch/x86/kvm/vmx/vmx.c:5929) kvm_intel vmx_handle_exit (arch/x86/kvm/vmx/vmx.c:? arch/x86/kvm/vmx/vmx.c:6606) kvm_intel vcpu_run (arch/x86/kvm/x86.c:11107 arch/x86/kvm/x86.c:11211) kvm kvm_arch_vcpu_ioctl_run (arch/x86/kvm/x86.c:?) kvm kvm_vcpu_ioctl (arch/x86/kvm/../../../virt/kvm/kvm_main.c:?) kvm __se_sys_ioctl (fs/ioctl.c:52 fs/ioctl.c:904 fs/ioctl.c:890) __x64_sys_ioctl (fs/ioctl.c:890) x64_sys_call (arch/x86/entry/syscall_64.c:33) do_syscall_64 (arch/x86/entry/common.c:?) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) value changed: 0x00000012 -> 0x00000000 CVE-2024-40953 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40953.html CVE-2024-40953 https://bugzilla.suse.com/1227806 SUSE Bug 1227806 In the Linux kernel, the following vulnerability has been resolved: net: do not leave a dangling sk pointer, when socket creation fails It is possible to trigger a use-after-free by: * attaching an fentry probe to __sock_release() and the probe calling the bpf_get_socket_cookie() helper * running traceroute -I 1.1.1.1 on a freshly booted VM A KASAN enabled kernel will log something like below (decoded and stripped): ================================================================== BUG: KASAN: slab-use-after-free in __sock_gen_cookie (./arch/x86/include/asm/atomic64_64.h:15 ./include/linux/atomic/atomic-arch-fallback.h:2583 ./include/linux/atomic/atomic-instrumented.h:1611 net/core/sock_diag.c:29) Read of size 8 at addr ffff888007110dd8 by task traceroute/299 CPU: 2 PID: 299 Comm: traceroute Tainted: G E 6.10.0-rc2+ #2 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 Call Trace: <TASK> dump_stack_lvl (lib/dump_stack.c:117 (discriminator 1)) print_report (mm/kasan/report.c:378 mm/kasan/report.c:488) ? __sock_gen_cookie (./arch/x86/include/asm/atomic64_64.h:15 ./include/linux/atomic/atomic-arch-fallback.h:2583 ./include/linux/atomic/atomic-instrumented.h:1611 net/core/sock_diag.c:29) kasan_report (mm/kasan/report.c:603) ? __sock_gen_cookie (./arch/x86/include/asm/atomic64_64.h:15 ./include/linux/atomic/atomic-arch-fallback.h:2583 ./include/linux/atomic/atomic-instrumented.h:1611 net/core/sock_diag.c:29) kasan_check_range (mm/kasan/generic.c:183 mm/kasan/generic.c:189) __sock_gen_cookie (./arch/x86/include/asm/atomic64_64.h:15 ./include/linux/atomic/atomic-arch-fallback.h:2583 ./include/linux/atomic/atomic-instrumented.h:1611 net/core/sock_diag.c:29) bpf_get_socket_ptr_cookie (./arch/x86/include/asm/preempt.h:94 ./include/linux/sock_diag.h:42 net/core/filter.c:5094 net/core/filter.c:5092) bpf_prog_875642cf11f1d139___sock_release+0x6e/0x8e bpf_trampoline_6442506592+0x47/0xaf __sock_release (net/socket.c:652) __sock_create (net/socket.c:1601) ... Allocated by task 299 on cpu 2 at 78.328492s: kasan_save_stack (mm/kasan/common.c:48) kasan_save_track (mm/kasan/common.c:68) __kasan_slab_alloc (mm/kasan/common.c:312 mm/kasan/common.c:338) kmem_cache_alloc_noprof (mm/slub.c:3941 mm/slub.c:4000 mm/slub.c:4007) sk_prot_alloc (net/core/sock.c:2075) sk_alloc (net/core/sock.c:2134) inet_create (net/ipv4/af_inet.c:327 net/ipv4/af_inet.c:252) __sock_create (net/socket.c:1572) __sys_socket (net/socket.c:1660 net/socket.c:1644 net/socket.c:1706) __x64_sys_socket (net/socket.c:1718) do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) Freed by task 299 on cpu 2 at 78.328502s: kasan_save_stack (mm/kasan/common.c:48) kasan_save_track (mm/kasan/common.c:68) kasan_save_free_info (mm/kasan/generic.c:582) poison_slab_object (mm/kasan/common.c:242) __kasan_slab_free (mm/kasan/common.c:256) kmem_cache_free (mm/slub.c:4437 mm/slub.c:4511) __sk_destruct (net/core/sock.c:2117 net/core/sock.c:2208) inet_create (net/ipv4/af_inet.c:397 net/ipv4/af_inet.c:252) __sock_create (net/socket.c:1572) __sys_socket (net/socket.c:1660 net/socket.c:1644 net/socket.c:1706) __x64_sys_socket (net/socket.c:1718) do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) Fix this by clearing the struct socket reference in sk_common_release() to cover all protocol families create functions, which may already attached the reference to the sk object with sock_init_data(). CVE-2024-40954 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40954.html CVE-2024-40954 https://bugzilla.suse.com/1227808 SUSE Bug 1227808 https://bugzilla.suse.com/1228786 SUSE Bug 1228786 In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list Use list_for_each_entry_safe() to allow iterating through the list and deleting the entry in the iteration process. The descriptor is freed via idxd_desc_complete() and there's a slight chance may cause issue for the list iterator when the descriptor is reused by another thread without it being deleted from the list. CVE-2024-40956 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40956.html CVE-2024-40956 https://bugzilla.suse.com/1227810 SUSE Bug 1227810 https://bugzilla.suse.com/1228585 SUSE Bug 1228585 In the Linux kernel, the following vulnerability has been resolved: netns: Make get_net_ns() handle zero refcount net Syzkaller hit a warning: refcount_t: addition on 0; use-after-free. WARNING: CPU: 3 PID: 7890 at lib/refcount.c:25 refcount_warn_saturate+0xdf/0x1d0 Modules linked in: CPU: 3 PID: 7890 Comm: tun Not tainted 6.10.0-rc3-00100-gcaa4f9578aba-dirty #310 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 RIP: 0010:refcount_warn_saturate+0xdf/0x1d0 Code: 41 49 04 31 ff 89 de e8 9f 1e cd fe 84 db 75 9c e8 76 26 cd fe c6 05 b6 41 49 04 01 90 48 c7 c7 b8 8e 25 86 e8 d2 05 b5 fe 90 <0f> 0b 90 90 e9 79 ff ff ff e8 53 26 cd fe 0f b6 1 RSP: 0018:ffff8881067b7da0 EFLAGS: 00010286 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff811c72ac RDX: ffff8881026a2140 RSI: ffffffff811c72b5 RDI: 0000000000000001 RBP: ffff8881067b7db0 R08: 0000000000000000 R09: 205b5d3730353139 R10: 0000000000000000 R11: 205d303938375420 R12: ffff8881086500c4 R13: ffff8881086500c4 R14: ffff8881086500b0 R15: ffff888108650040 FS: 00007f5b2961a4c0(0000) GS:ffff88823bd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000055d7ed36fd18 CR3: 00000001482f6000 CR4: 00000000000006f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> ? show_regs+0xa3/0xc0 ? __warn+0xa5/0x1c0 ? refcount_warn_saturate+0xdf/0x1d0 ? report_bug+0x1fc/0x2d0 ? refcount_warn_saturate+0xdf/0x1d0 ? handle_bug+0xa1/0x110 ? exc_invalid_op+0x3c/0xb0 ? asm_exc_invalid_op+0x1f/0x30 ? __warn_printk+0xcc/0x140 ? __warn_printk+0xd5/0x140 ? refcount_warn_saturate+0xdf/0x1d0 get_net_ns+0xa4/0xc0 ? __pfx_get_net_ns+0x10/0x10 open_related_ns+0x5a/0x130 __tun_chr_ioctl+0x1616/0x2370 ? __sanitizer_cov_trace_switch+0x58/0xa0 ? __sanitizer_cov_trace_const_cmp2+0x1c/0x30 ? __pfx_tun_chr_ioctl+0x10/0x10 tun_chr_ioctl+0x2f/0x40 __x64_sys_ioctl+0x11b/0x160 x64_sys_call+0x1211/0x20d0 do_syscall_64+0x9e/0x1d0 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f5b28f165d7 Code: b3 66 90 48 8b 05 b1 48 2d 00 64 c7 00 26 00 00 00 48 c7 c0 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 81 48 2d 00 8 RSP: 002b:00007ffc2b59c5e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5b28f165d7 RDX: 0000000000000000 RSI: 00000000000054e3 RDI: 0000000000000003 RBP: 00007ffc2b59c650 R08: 00007f5b291ed8c0 R09: 00007f5b2961a4c0 R10: 0000000029690010 R11: 0000000000000246 R12: 0000000000400730 R13: 00007ffc2b59cf40 R14: 0000000000000000 R15: 0000000000000000 </TASK> Kernel panic - not syncing: kernel: panic_on_warn set ... This is trigger as below: ns0 ns1 tun_set_iff() //dev is tun0 tun->dev = dev //ip link set tun0 netns ns1 put_net() //ref is 0 __tun_chr_ioctl() //TUNGETDEVNETNS net = dev_net(tun->dev); open_related_ns(&net->ns, get_net_ns); //ns1 get_net_ns() get_net() //addition on 0 Use maybe_get_net() in get_net_ns in case net's ref is zero to fix this CVE-2024-40958 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40958.html CVE-2024-40958 https://bugzilla.suse.com/1227812 SUSE Bug 1227812 In the Linux kernel, the following vulnerability has been resolved: xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr() ip6_dst_idev() can return NULL, xfrm6_get_saddr() must act accordingly. syzbot reported: Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 1 PID: 12 Comm: kworker/u8:1 Not tainted 6.10.0-rc2-syzkaller-00383-gb8481381d4e2 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker RIP: 0010:xfrm6_get_saddr+0x93/0x130 net/ipv6/xfrm6_policy.c:64 Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 97 00 00 00 4c 8b ab d8 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 86 00 00 00 4d 8b 6d 00 e8 ca 13 47 01 48 b8 00 RSP: 0018:ffffc90000117378 EFLAGS: 00010246 RAX: dffffc0000000000 RBX: ffff88807b079dc0 RCX: ffffffff89a0d6d7 RDX: 0000000000000000 RSI: ffffffff89a0d6e9 RDI: ffff88807b079e98 RBP: ffff88807ad73248 R08: 0000000000000007 R09: fffffffffffff000 R10: ffff88807b079dc0 R11: 0000000000000007 R12: ffffc90000117480 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4586d00440 CR3: 0000000079042000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> xfrm_get_saddr net/xfrm/xfrm_policy.c:2452 [inline] xfrm_tmpl_resolve_one net/xfrm/xfrm_policy.c:2481 [inline] xfrm_tmpl_resolve+0xa26/0xf10 net/xfrm/xfrm_policy.c:2541 xfrm_resolve_and_create_bundle+0x140/0x2570 net/xfrm/xfrm_policy.c:2835 xfrm_bundle_lookup net/xfrm/xfrm_policy.c:3070 [inline] xfrm_lookup_with_ifid+0x4d1/0x1e60 net/xfrm/xfrm_policy.c:3201 xfrm_lookup net/xfrm/xfrm_policy.c:3298 [inline] xfrm_lookup_route+0x3b/0x200 net/xfrm/xfrm_policy.c:3309 ip6_dst_lookup_flow+0x15c/0x1d0 net/ipv6/ip6_output.c:1256 send6+0x611/0xd20 drivers/net/wireguard/socket.c:139 wg_socket_send_skb_to_peer+0xf9/0x220 drivers/net/wireguard/socket.c:178 wg_socket_send_buffer_to_peer+0x12b/0x190 drivers/net/wireguard/socket.c:200 wg_packet_send_handshake_initiation+0x227/0x360 drivers/net/wireguard/send.c:40 wg_packet_handshake_send_worker+0x1c/0x30 drivers/net/wireguard/send.c:51 process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231 process_scheduled_works kernel/workqueue.c:3312 [inline] worker_thread+0x6c8/0xf70 kernel/workqueue.c:3393 kthread+0x2c1/0x3a0 kernel/kthread.c:389 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 CVE-2024-40959 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40959.html CVE-2024-40959 https://bugzilla.suse.com/1227884 SUSE Bug 1227884 In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible NULL dereference in rt6_probe() syzbot caught a NULL dereference in rt6_probe() [1] Bail out if __in6_dev_get() returns NULL. [1] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000cb: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000658-0x000000000000065f] CPU: 1 PID: 22444 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00383-gb8481381d4e2 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 RIP: 0010:rt6_probe net/ipv6/route.c:656 [inline] RIP: 0010:find_match+0x8c4/0xf50 net/ipv6/route.c:758 Code: 14 fd f7 48 8b 85 38 ff ff ff 48 c7 45 b0 00 00 00 00 48 8d b8 5c 06 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 19 RSP: 0018:ffffc900034af070 EFLAGS: 00010203 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90004521000 RDX: 00000000000000cb RSI: ffffffff8990d0cd RDI: 000000000000065c RBP: ffffc900034af150 R08: 0000000000000005 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000002 R12: 000000000000000a R13: 1ffff92000695e18 R14: ffff8880244a1d20 R15: 0000000000000000 FS: 00007f4844a5a6c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000001b31b27000 CR3: 000000002d42c000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> rt6_nh_find_match+0xfa/0x1a0 net/ipv6/route.c:784 nexthop_for_each_fib6_nh+0x26d/0x4a0 net/ipv4/nexthop.c:1496 __find_rr_leaf+0x6e7/0xe00 net/ipv6/route.c:825 find_rr_leaf net/ipv6/route.c:853 [inline] rt6_select net/ipv6/route.c:897 [inline] fib6_table_lookup+0x57e/0xa30 net/ipv6/route.c:2195 ip6_pol_route+0x1cd/0x1150 net/ipv6/route.c:2231 pol_lookup_func include/net/ip6_fib.h:616 [inline] fib6_rule_lookup+0x386/0x720 net/ipv6/fib6_rules.c:121 ip6_route_output_flags_noref net/ipv6/route.c:2639 [inline] ip6_route_output_flags+0x1d0/0x640 net/ipv6/route.c:2651 ip6_dst_lookup_tail.constprop.0+0x961/0x1760 net/ipv6/ip6_output.c:1147 ip6_dst_lookup_flow+0x99/0x1d0 net/ipv6/ip6_output.c:1250 rawv6_sendmsg+0xdab/0x4340 net/ipv6/raw.c:898 inet_sendmsg+0x119/0x140 net/ipv4/af_inet.c:853 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] sock_write_iter+0x4b8/0x5c0 net/socket.c:1160 new_sync_write fs/read_write.c:497 [inline] vfs_write+0x6b6/0x1140 fs/read_write.c:590 ksys_write+0x1f8/0x260 fs/read_write.c:643 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f CVE-2024-40960 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40960.html CVE-2024-40960 https://bugzilla.suse.com/1227813 SUSE Bug 1227813 In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent possible NULL deref in fib6_nh_init() syzbot reminds us that in6_dev_get() can return NULL. fib6_nh_init() ip6_validate_gw( &idev ) ip6_route_check_nh( idev ) *idev = in6_dev_get(dev); // can be NULL Oops: general protection fault, probably for non-canonical address 0xdffffc00000000bc: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x00000000000005e0-0x00000000000005e7] CPU: 0 PID: 11237 Comm: syz-executor.3 Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 RIP: 0010:fib6_nh_init+0x640/0x2160 net/ipv6/route.c:3606 Code: 00 00 fc ff df 4c 8b 64 24 58 48 8b 44 24 28 4c 8b 74 24 30 48 89 c1 48 89 44 24 28 48 8d 98 e0 05 00 00 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 b3 17 00 00 8b 1b 31 ff 89 de e8 b8 8b RSP: 0018:ffffc900032775a0 EFLAGS: 00010202 RAX: 00000000000000bc RBX: 00000000000005e0 RCX: 0000000000000000 RDX: 0000000000000010 RSI: ffffc90003277a54 RDI: ffff88802b3a08d8 RBP: ffffc900032778b0 R08: 00000000000002fc R09: 0000000000000000 R10: 00000000000002fc R11: 0000000000000000 R12: ffff88802b3a08b8 R13: 1ffff9200064eec8 R14: ffffc90003277a00 R15: dffffc0000000000 FS: 00007f940feb06c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000000 CR3: 00000000245e8000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> ip6_route_info_create+0x99e/0x12b0 net/ipv6/route.c:3809 ip6_route_add+0x28/0x160 net/ipv6/route.c:3853 ipv6_route_ioctl+0x588/0x870 net/ipv6/route.c:4483 inet6_ioctl+0x21a/0x280 net/ipv6/af_inet6.c:579 sock_do_ioctl+0x158/0x460 net/socket.c:1222 sock_ioctl+0x629/0x8e0 net/socket.c:1341 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:907 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f940f07cea9 CVE-2024-40961 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40961.html CVE-2024-40961 https://bugzilla.suse.com/1227814 SUSE Bug 1227814 In the Linux kernel, the following vulnerability has been resolved: tty: add the option to have a tty reject a new ldisc ... and use it to limit the virtual terminals to just N_TTY. They are kind of special, and in particular, the "con_write()" routine violates the "writes cannot sleep" rule that some ldiscs rely on. This avoids the BUG: sleeping function called from invalid context at kernel/printk/printk.c:2659 when N_GSM has been attached to a virtual console, and gsmld_write() calls con_write() while holding a spinlock, and con_write() then tries to get the console lock. CVE-2024-40966 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40966.html CVE-2024-40966 https://bugzilla.suse.com/1227886 SUSE Bug 1227886 In the Linux kernel, the following vulnerability has been resolved: serial: imx: Introduce timeout when waiting on transmitter empty By waiting at most 1 second for USR2_TXDC to be set, we avoid a potential deadlock. In case of the timeout, there is not much we can do, so we simply ignore the transmitter state and optimistically try to continue. CVE-2024-40967 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40967.html CVE-2024-40967 https://bugzilla.suse.com/1227891 SUSE Bug 1227891 In the Linux kernel, the following vulnerability has been resolved: Avoid hw_desc array overrun in dw-axi-dmac I have a use case where nr_buffers = 3 and in which each descriptor is composed by 3 segments, resulting in the DMA channel descs_allocated to be 9. Since axi_desc_put() handles the hw_desc considering the descs_allocated, this scenario would result in a kernel panic (hw_desc array will be overrun). To fix this, the proposal is to add a new member to the axi_dma_desc structure, where we keep the number of allocated hw_descs (axi_desc_alloc()) and use it in axi_desc_put() to handle the hw_desc array correctly. Additionally I propose to remove the axi_chan_start_first_queued() call after completing the transfer, since it was identified that unbalance can occur (started descriptors can be interrupted and transfer ignored due to DMA channel not being enabled). CVE-2024-40970 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40970.html CVE-2024-40970 https://bugzilla.suse.com/1227899 SUSE Bug 1227899 In the Linux kernel, the following vulnerability has been resolved: ext4: do not create EA inode under buffer lock ext4_xattr_set_entry() creates new EA inodes while holding buffer lock on the external xattr block. This is problematic as it nests all the allocation locking (which acquires locks on other buffers) under the buffer lock. This can even deadlock when the filesystem is corrupted and e.g. quota file is setup to contain xattr block as data block. Move the allocation of EA inode out of ext4_xattr_set_entry() into the callers. CVE-2024-40972 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40972.html CVE-2024-40972 https://bugzilla.suse.com/1227910 SUSE Bug 1227910 In the Linux kernel, the following vulnerability has been resolved: drm/lima: mask irqs in timeout path before hard reset There is a race condition in which a rendering job might take just long enough to trigger the drm sched job timeout handler but also still complete before the hard reset is done by the timeout handler. This runs into race conditions not expected by the timeout handler. In some very specific cases it currently may result in a refcount imbalance on lima_pm_idle, with a stack dump such as: [10136.669170] WARNING: CPU: 0 PID: 0 at drivers/gpu/drm/lima/lima_devfreq.c:205 lima_devfreq_record_idle+0xa0/0xb0 ... [10136.669459] pc : lima_devfreq_record_idle+0xa0/0xb0 ... [10136.669628] Call trace: [10136.669634] lima_devfreq_record_idle+0xa0/0xb0 [10136.669646] lima_sched_pipe_task_done+0x5c/0xb0 [10136.669656] lima_gp_irq_handler+0xa8/0x120 [10136.669666] __handle_irq_event_percpu+0x48/0x160 [10136.669679] handle_irq_event+0x4c/0xc0 We can prevent that race condition entirely by masking the irqs at the beginning of the timeout handler, at which point we give up on waiting for that job entirely. The irqs will be enabled again at the next hard reset which is already done as a recovery by the timeout handler. CVE-2024-40976 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40976.html CVE-2024-40976 https://bugzilla.suse.com/1227893 SUSE Bug 1227893 In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921s: fix potential hung tasks during chip recovery During chip recovery (e.g. chip reset), there is a possible situation that kernel worker reset_work is holding the lock and waiting for kernel thread stat_worker to be parked, while stat_worker is waiting for the release of the same lock. It causes a deadlock resulting in the dumping of hung tasks messages and possible rebooting of the device. This patch prevents the execution of stat_worker during the chip recovery. CVE-2024-40977 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40977.html CVE-2024-40977 https://bugzilla.suse.com/1227950 SUSE Bug 1227950 In the Linux kernel, the following vulnerability has been resolved: batman-adv: bypass empty buckets in batadv_purge_orig_ref() Many syzbot reports are pointing to soft lockups in batadv_purge_orig_ref() [1] Root cause is unknown, but we can avoid spending too much time there and perhaps get more interesting reports. [1] watchdog: BUG: soft lockup - CPU#0 stuck for 27s! [kworker/u4:6:621] Modules linked in: irq event stamp: 6182794 hardirqs last enabled at (6182793): [<ffff8000801dae10>] __local_bh_enable_ip+0x224/0x44c kernel/softirq.c:386 hardirqs last disabled at (6182794): [<ffff80008ad66a78>] __el1_irq arch/arm64/kernel/entry-common.c:533 [inline] hardirqs last disabled at (6182794): [<ffff80008ad66a78>] el1_interrupt+0x24/0x68 arch/arm64/kernel/entry-common.c:551 softirqs last enabled at (6182792): [<ffff80008aab71c4>] spin_unlock_bh include/linux/spinlock.h:396 [inline] softirqs last enabled at (6182792): [<ffff80008aab71c4>] batadv_purge_orig_ref+0x114c/0x1228 net/batman-adv/originator.c:1287 softirqs last disabled at (6182790): [<ffff80008aab61dc>] spin_lock_bh include/linux/spinlock.h:356 [inline] softirqs last disabled at (6182790): [<ffff80008aab61dc>] batadv_purge_orig_ref+0x164/0x1228 net/batman-adv/originator.c:1271 CPU: 0 PID: 621 Comm: kworker/u4:6 Not tainted 6.8.0-rc7-syzkaller-g707081b61156 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 Workqueue: bat_events batadv_purge_orig pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : should_resched arch/arm64/include/asm/preempt.h:79 [inline] pc : __local_bh_enable_ip+0x228/0x44c kernel/softirq.c:388 lr : __local_bh_enable_ip+0x224/0x44c kernel/softirq.c:386 sp : ffff800099007970 x29: ffff800099007980 x28: 1fffe00018fce1bd x27: dfff800000000000 x26: ffff0000d2620008 x25: ffff0000c7e70de8 x24: 0000000000000001 x23: 1fffe00018e57781 x22: dfff800000000000 x21: ffff80008aab71c4 x20: ffff0001b40136c0 x19: ffff0000c72bbc08 x18: 1fffe0001a817bb0 x17: ffff800125414000 x16: ffff80008032116c x15: 0000000000000001 x14: 1fffe0001ee9d610 x13: 0000000000000000 x12: 0000000000000003 x11: 0000000000000000 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : 00000000005e5789 x7 : ffff80008aab61dc x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000006 x1 : 0000000000000080 x0 : ffff800125414000 Call trace: __daif_local_irq_enable arch/arm64/include/asm/irqflags.h:27 [inline] arch_local_irq_enable arch/arm64/include/asm/irqflags.h:49 [inline] __local_bh_enable_ip+0x228/0x44c kernel/softirq.c:386 __raw_spin_unlock_bh include/linux/spinlock_api_smp.h:167 [inline] _raw_spin_unlock_bh+0x3c/0x4c kernel/locking/spinlock.c:210 spin_unlock_bh include/linux/spinlock.h:396 [inline] batadv_purge_orig_ref+0x114c/0x1228 net/batman-adv/originator.c:1287 batadv_purge_orig+0x20/0x70 net/batman-adv/originator.c:1300 process_one_work+0x694/0x1204 kernel/workqueue.c:2633 process_scheduled_works kernel/workqueue.c:2706 [inline] worker_thread+0x938/0xef4 kernel/workqueue.c:2787 kthread+0x288/0x310 kernel/kthread.c:388 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860 Sending NMI from CPU 0 to CPUs 1: NMI backtrace for cpu 1 CPU: 1 PID: 0 Comm: swapper/1 Not tainted 6.8.0-rc7-syzkaller-g707081b61156 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : arch_local_irq_enable+0x8/0xc arch/arm64/include/asm/irqflags.h:51 lr : default_idle_call+0xf8/0x128 kernel/sched/idle.c:103 sp : ffff800093a17d30 x29: ffff800093a17d30 x28: dfff800000000000 x27: 1ffff00012742fb4 x26: ffff80008ec9d000 x25: 0000000000000000 x24: 0000000000000002 x23: 1ffff00011d93a74 x22: ffff80008ec9d3a0 x21: 0000000000000000 x20: ffff0000c19dbc00 x19: ffff8000802d0fd8 x18: 1fffe00036804396 x17: ffff80008ec9d000 x16: ffff8000802d089c x15: 0000000000000001 ---truncated--- CVE-2024-40981 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40981.html CVE-2024-40981 https://bugzilla.suse.com/1227864 SUSE Bug 1227864 ** REJECT ** This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2024-40982 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40982.html CVE-2024-40982 https://bugzilla.suse.com/1227865 SUSE Bug 1227865 In the Linux kernel, the following vulnerability has been resolved: ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine." Undo the modifications made in commit d410ee5109a1 ("ACPICA: avoid "Info: mapping multiple BARs. Your kernel is fine.""). The initial purpose of this commit was to stop memory mappings for operation regions from overlapping page boundaries, as it can trigger warnings if different page attributes are present. However, it was found that when this situation arises, mapping continues until the boundary's end, but there is still an attempt to read/write the entire length of the map, leading to a NULL pointer deference. For example, if a four-byte mapping request is made but only one byte is mapped because it hits the current page boundary's end, a four-byte read/write attempt is still made, resulting in a NULL pointer deference. Instead, map the entire length, as the ACPI specification does not mandate that it must be within the same page boundary. It is permissible for it to be mapped across different regions. CVE-2024-40984 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40984.html CVE-2024-40984 https://bugzilla.suse.com/1227820 SUSE Bug 1227820 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix UBSAN warning in kv_dpm.c Adds bounds check for sumo_vid_mapping_entry. CVE-2024-40987 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40987.html CVE-2024-40987 https://bugzilla.suse.com/1228235 SUSE Bug 1228235 In the Linux kernel, the following vulnerability has been resolved: drm/radeon: fix UBSAN warning in kv_dpm.c Adds bounds check for sumo_vid_mapping_entry. CVE-2024-40988 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40988.html CVE-2024-40988 https://bugzilla.suse.com/1227957 SUSE Bug 1227957 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Disassociate vcpus from redistributor region on teardown When tearing down a redistributor region, make sure we don't have any dangling pointer to that region stored in a vcpu. CVE-2024-40989 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40989.html CVE-2024-40989 https://bugzilla.suse.com/1227823 SUSE Bug 1227823 https://bugzilla.suse.com/1228589 SUSE Bug 1228589 In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Add check for srq max_sge attribute max_sge attribute is passed by the user, and is inserted and used unchecked, so verify that the value doesn't exceed maximum allowed value before using it. CVE-2024-40990 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40990.html CVE-2024-40990 https://bugzilla.suse.com/1227824 SUSE Bug 1227824 In the Linux kernel, the following vulnerability has been resolved: ptp: fix integer overflow in max_vclocks_store On 32bit systems, the "4 * max" multiply can overflow. Use kcalloc() to do the allocation to prevent this. CVE-2024-40994 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40994.html CVE-2024-40994 https://bugzilla.suse.com/1227829 SUSE Bug 1227829 https://bugzilla.suse.com/1228587 SUSE Bug 1228587 In the Linux kernel, the following vulnerability has been resolved: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() In the following concurrency we will access the uninitialized rs->lock: ext4_fill_super ext4_register_sysfs // sysfs registered msg_ratelimit_interval_ms // Other processes modify rs->interval to // non-zero via msg_ratelimit_interval_ms ext4_orphan_cleanup ext4_msg(sb, KERN_INFO, "Errors on filesystem, " __ext4_msg ___ratelimit(&(EXT4_SB(sb)->s_msg_ratelimit_state) if (!rs->interval) // do nothing if interval is 0 return 1; raw_spin_trylock_irqsave(&rs->lock, flags) raw_spin_trylock(lock) _raw_spin_trylock __raw_spin_trylock spin_acquire(&lock->dep_map, 0, 1, _RET_IP_) lock_acquire __lock_acquire register_lock_class assign_lock_key dump_stack(); ratelimit_state_init(&sbi->s_msg_ratelimit_state, 5 * HZ, 10); raw_spin_lock_init(&rs->lock); // init rs->lock here and get the following dump_stack: ========================================================= INFO: trying to register non-static key. The code is fine but needs lockdep annotation, or maybe you didn't initialize this object before use? turning off the locking correctness validator. CPU: 12 PID: 753 Comm: mount Tainted: G E 6.7.0-rc6-next-20231222 #504 [...] Call Trace: dump_stack_lvl+0xc5/0x170 dump_stack+0x18/0x30 register_lock_class+0x740/0x7c0 __lock_acquire+0x69/0x13a0 lock_acquire+0x120/0x450 _raw_spin_trylock+0x98/0xd0 ___ratelimit+0xf6/0x220 __ext4_msg+0x7f/0x160 [ext4] ext4_orphan_cleanup+0x665/0x740 [ext4] __ext4_fill_super+0x21ea/0x2b10 [ext4] ext4_fill_super+0x14d/0x360 [ext4] [...] ========================================================= Normally interval is 0 until s_msg_ratelimit_state is initialized, so ___ratelimit() does nothing. But registering sysfs precedes initializing rs->lock, so it is possible to change rs->interval to a non-zero value via the msg_ratelimit_interval_ms interface of sysfs while rs->lock is uninitialized, and then a call to ext4_msg triggers the problem by accessing an uninitialized rs->lock. Therefore register sysfs after all initializations are complete to avoid such problems. CVE-2024-40998 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40998.html CVE-2024-40998 https://bugzilla.suse.com/1227866 SUSE Bug 1227866 In the Linux kernel, the following vulnerability has been resolved: net: ena: Add validation for completion descriptors consistency Validate that `first` flag is set only for the first descriptor in multi-buffer packets. In case of an invalid descriptor, a reset will occur. A new reset reason for RX data corruption has been added. CVE-2024-40999 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-40999.html CVE-2024-40999 https://bugzilla.suse.com/1227913 SUSE Bug 1227913 In the Linux kernel, the following vulnerability has been resolved: crypto: hisilicon/sec - Fix memory leak for sec resource release The AIV is one of the SEC resources. When releasing resources, it need to release the AIV resources at the same time. Otherwise, memory leakage occurs. The aiv resource release is added to the sec resource release function. CVE-2024-41002 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41002.html CVE-2024-41002 https://bugzilla.suse.com/1227870 SUSE Bug 1227870 In the Linux kernel, the following vulnerability has been resolved: tracing: Build event generation tests only as modules The kprobes and synth event generation test modules add events and lock (get a reference) those event file reference in module init function, and unlock and delete it in module exit function. This is because those are designed for playing as modules. If we make those modules as built-in, those events are left locked in the kernel, and never be removed. This causes kprobe event self-test failure as below. [ 97.349708] ------------[ cut here ]------------ [ 97.353453] WARNING: CPU: 3 PID: 1 at kernel/trace/trace_kprobe.c:2133 kprobe_trace_self_tests_init+0x3f1/0x480 [ 97.357106] Modules linked in: [ 97.358488] CPU: 3 PID: 1 Comm: swapper/0 Not tainted 6.9.0-g699646734ab5-dirty #14 [ 97.361556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 [ 97.363880] RIP: 0010:kprobe_trace_self_tests_init+0x3f1/0x480 [ 97.365538] Code: a8 24 08 82 e9 ae fd ff ff 90 0f 0b 90 48 c7 c7 e5 aa 0b 82 e9 ee fc ff ff 90 0f 0b 90 48 c7 c7 2d 61 06 82 e9 8e fd ff ff 90 <0f> 0b 90 48 c7 c7 33 0b 0c 82 89 c6 e8 6e 03 1f ff 41 ff c7 e9 90 [ 97.370429] RSP: 0000:ffffc90000013b50 EFLAGS: 00010286 [ 97.371852] RAX: 00000000fffffff0 RBX: ffff888005919c00 RCX: 0000000000000000 [ 97.373829] RDX: ffff888003f40000 RSI: ffffffff8236a598 RDI: ffff888003f40a68 [ 97.375715] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 97.377675] R10: ffffffff811c9ae5 R11: ffffffff8120c4e0 R12: 0000000000000000 [ 97.379591] R13: 0000000000000001 R14: 0000000000000015 R15: 0000000000000000 [ 97.381536] FS: 0000000000000000(0000) GS:ffff88807dcc0000(0000) knlGS:0000000000000000 [ 97.383813] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.385449] CR2: 0000000000000000 CR3: 0000000002244000 CR4: 00000000000006b0 [ 97.387347] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 97.389277] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 97.391196] Call Trace: [ 97.391967] <TASK> [ 97.392647] ? __warn+0xcc/0x180 [ 97.393640] ? kprobe_trace_self_tests_init+0x3f1/0x480 [ 97.395181] ? report_bug+0xbd/0x150 [ 97.396234] ? handle_bug+0x3e/0x60 [ 97.397311] ? exc_invalid_op+0x1a/0x50 [ 97.398434] ? asm_exc_invalid_op+0x1a/0x20 [ 97.399652] ? trace_kprobe_is_busy+0x20/0x20 [ 97.400904] ? tracing_reset_all_online_cpus+0x15/0x90 [ 97.402304] ? kprobe_trace_self_tests_init+0x3f1/0x480 [ 97.403773] ? init_kprobe_trace+0x50/0x50 [ 97.404972] do_one_initcall+0x112/0x240 [ 97.406113] do_initcall_level+0x95/0xb0 [ 97.407286] ? kernel_init+0x1a/0x1a0 [ 97.408401] do_initcalls+0x3f/0x70 [ 97.409452] kernel_init_freeable+0x16f/0x1e0 [ 97.410662] ? rest_init+0x1f0/0x1f0 [ 97.411738] kernel_init+0x1a/0x1a0 [ 97.412788] ret_from_fork+0x39/0x50 [ 97.413817] ? rest_init+0x1f0/0x1f0 [ 97.414844] ret_from_fork_asm+0x11/0x20 [ 97.416285] </TASK> [ 97.417134] irq event stamp: 13437323 [ 97.418376] hardirqs last enabled at (13437337): [<ffffffff8110bc0c>] console_unlock+0x11c/0x150 [ 97.421285] hardirqs last disabled at (13437370): [<ffffffff8110bbf1>] console_unlock+0x101/0x150 [ 97.423838] softirqs last enabled at (13437366): [<ffffffff8108e17f>] handle_softirqs+0x23f/0x2a0 [ 97.426450] softirqs last disabled at (13437393): [<ffffffff8108e346>] __irq_exit_rcu+0x66/0xd0 [ 97.428850] ---[ end trace 0000000000000000 ]--- And also, since we can not cleanup dynamic_event file, ftracetest are failed too. To avoid these issues, build these tests only as modules. CVE-2024-41004 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41004.html CVE-2024-41004 https://bugzilla.suse.com/1227851 SUSE Bug 1227851 In the Linux kernel, the following vulnerability has been resolved: netrom: Fix a memory leak in nr_heartbeat_expiry() syzbot reported a memory leak in nr_create() [0]. Commit 409db27e3a2e ("netrom: Fix use-after-free of a listening socket.") added sock_hold() to the nr_heartbeat_expiry() function, where a) a socket has a SOCK_DESTROY flag or b) a listening socket has a SOCK_DEAD flag. But in the case "a," when the SOCK_DESTROY flag is set, the file descriptor has already been closed and the nr_release() function has been called. So it makes no sense to hold the reference count because no one will call another nr_destroy_socket() and put it as in the case "b." nr_connect nr_establish_data_link nr_start_heartbeat nr_release switch (nr->state) case NR_STATE_3 nr->state = NR_STATE_2 sock_set_flag(sk, SOCK_DESTROY); nr_rx_frame nr_process_rx_frame switch (nr->state) case NR_STATE_2 nr_state2_machine() nr_disconnect() nr_sk(sk)->state = NR_STATE_0 sock_set_flag(sk, SOCK_DEAD) nr_heartbeat_expiry switch (nr->state) case NR_STATE_0 if (sock_flag(sk, SOCK_DESTROY) || (sk->sk_state == TCP_LISTEN && sock_flag(sk, SOCK_DEAD))) sock_hold() // ( !!! ) nr_destroy_socket() To fix the memory leak, let's call sock_hold() only for a listening socket. Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with Syzkaller. [0]: https://syzkaller.appspot.com/bug?extid=d327a1f3b12e1e206c16 CVE-2024-41006 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41006.html CVE-2024-41006 https://bugzilla.suse.com/1227862 SUSE Bug 1227862 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix overrunning reservations in ringbuf The BPF ring buffer internally is implemented as a power-of-2 sized circular buffer, with two logical and ever-increasing counters: consumer_pos is the consumer counter to show which logical position the consumer consumed the data, and producer_pos which is the producer counter denoting the amount of data reserved by all producers. Each time a record is reserved, the producer that "owns" the record will successfully advance producer counter. In user space each time a record is read, the consumer of the data advanced the consumer counter once it finished processing. Both counters are stored in separate pages so that from user space, the producer counter is read-only and the consumer counter is read-write. One aspect that simplifies and thus speeds up the implementation of both producers and consumers is how the data area is mapped twice contiguously back-to-back in the virtual memory, allowing to not take any special measures for samples that have to wrap around at the end of the circular buffer data area, because the next page after the last data page would be first data page again, and thus the sample will still appear completely contiguous in virtual memory. Each record has a struct bpf_ringbuf_hdr { u32 len; u32 pg_off; } header for book-keeping the length and offset, and is inaccessible to the BPF program. Helpers like bpf_ringbuf_reserve() return `(void *)hdr + BPF_RINGBUF_HDR_SZ` for the BPF program to use. Bing-Jhong and Muhammad reported that it is however possible to make a second allocated memory chunk overlapping with the first chunk and as a result, the BPF program is now able to edit first chunk's header. For example, consider the creation of a BPF_MAP_TYPE_RINGBUF map with size of 0x4000. Next, the consumer_pos is modified to 0x3000 /before/ a call to bpf_ringbuf_reserve() is made. This will allocate a chunk A, which is in [0x0,0x3008], and the BPF program is able to edit [0x8,0x3008]. Now, lets allocate a chunk B with size 0x3000. This will succeed because consumer_pos was edited ahead of time to pass the `new_prod_pos - cons_pos > rb->mask` check. Chunk B will be in range [0x3008,0x6010], and the BPF program is able to edit [0x3010,0x6010]. Due to the ring buffer memory layout mentioned earlier, the ranges [0x0,0x4000] and [0x4000,0x8000] point to the same data pages. This means that chunk B at [0x4000,0x4008] is chunk A's header. bpf_ringbuf_submit() / bpf_ringbuf_discard() use the header's pg_off to then locate the bpf_ringbuf itself via bpf_ringbuf_restore_from_rec(). Once chunk B modified chunk A's header, then bpf_ringbuf_commit() refers to the wrong page and could cause a crash. Fix it by calculating the oldest pending_pos and check whether the range from the oldest outstanding record to the newest would span beyond the ring buffer size. If that is the case, then reject the request. We've tested with the ring buffer benchmark in BPF selftests (./benchs/run_bench_ringbufs.sh) before/after the fix and while it seems a bit slower on some benchmarks, it is still not significantly enough to matter. CVE-2024-41009 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41009.html CVE-2024-41009 https://bugzilla.suse.com/1228020 SUSE Bug 1228020 In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: don't allow mapping the MMIO HDP page with large pages We don't get the right offset in that case. The GPU has an unused 4K area of the register BAR space into which you can remap registers. We remap the HDP flush registers into this space to allow userspace (CPU or GPU) to flush the HDP when it updates VRAM. However, on systems with >4K pages, we end up exposing PAGE_SIZE of MMIO space. CVE-2024-41011 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41011.html CVE-2024-41011 https://bugzilla.suse.com/1228114 SUSE Bug 1228114 https://bugzilla.suse.com/1228115 SUSE Bug 1228115 In the Linux kernel, the following vulnerability has been resolved: filelock: Remove locks reliably when fcntl/close race is detected When fcntl_setlk() races with close(), it removes the created lock with do_lock_file_wait(). However, LSMs can allow the first do_lock_file_wait() that created the lock while denying the second do_lock_file_wait() that tries to remove the lock. Separately, posix_lock_file() could also fail to remove a lock due to GFP_KERNEL allocation failure (when splitting a range in the middle). After the bug has been triggered, use-after-free reads will occur in lock_get_status() when userspace reads /proc/locks. This can likely be used to read arbitrary kernel memory, but can't corrupt kernel memory. Fix it by calling locks_remove_posix() instead, which is designed to reliably get rid of POSIX locks associated with the given file and files_struct and is also used by filp_flush(). CVE-2024-41012 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41012.html CVE-2024-41012 https://bugzilla.suse.com/1228247 SUSE Bug 1228247 In the Linux kernel, the following vulnerability has been resolved: xfs: don't walk off the end of a directory data block This adds sanity checks for xfs_dir2_data_unused and xfs_dir2_data_entry to make sure don't stray beyond valid memory region. Before patching, the loop simply checks that the start offset of the dup and dep is within the range. So in a crafted image, if last entry is xfs_dir2_data_unused, we can change dup->length to dup->length-1 and leave 1 byte of space. In the next traversal, this space will be considered as dup or dep. We may encounter an out of bound read when accessing the fixed members. In the patch, we make sure that the remaining bytes large enough to hold an unused entry before accessing xfs_dir2_data_unused and xfs_dir2_data_unused is XFS_DIR2_DATA_ALIGN byte aligned. We also make sure that the remaining bytes large enough to hold a dirent with a single-byte name before accessing xfs_dir2_data_entry. CVE-2024-41013 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41013.html CVE-2024-41013 https://bugzilla.suse.com/1228405 SUSE Bug 1228405 In the Linux kernel, the following vulnerability has been resolved: xfs: add bounds checking to xlog_recover_process_data There is a lack of verification of the space occupied by fixed members of xlog_op_header in the xlog_recover_process_data. We can create a crafted image to trigger an out of bounds read by following these steps: 1) Mount an image of xfs, and do some file operations to leave records 2) Before umounting, copy the image for subsequent steps to simulate abnormal exit. Because umount will ensure that tail_blk and head_blk are the same, which will result in the inability to enter xlog_recover_process_data 3) Write a tool to parse and modify the copied image in step 2 4) Make the end of the xlog_op_header entries only 1 byte away from xlog_rec_header->h_size 5) xlog_rec_header->h_num_logops++ 6) Modify xlog_rec_header->h_crc Fix: Add a check to make sure there is sufficient space to access fixed members of xlog_op_header. CVE-2024-41014 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41014.html CVE-2024-41014 https://bugzilla.suse.com/1228408 SUSE Bug 1228408 In the Linux kernel, the following vulnerability has been resolved: ocfs2: add bounds checking to ocfs2_check_dir_entry() This adds sanity checks for ocfs2_dir_entry to make sure all members of ocfs2_dir_entry don't stray beyond valid memory region. CVE-2024-41015 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41015.html CVE-2024-41015 https://bugzilla.suse.com/1228409 SUSE Bug 1228409 In the Linux kernel, the following vulnerability has been resolved: ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry() xattr in ocfs2 maybe 'non-indexed', which saved with additional space requested. It's better to check if the memory is out of bound before memcmp, although this possibility mainly comes from crafted poisonous images. CVE-2024-41016 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41016.html CVE-2024-41016 https://bugzilla.suse.com/1228410 SUSE Bug 1228410 In the Linux kernel, the following vulnerability has been resolved: jfs: don't walk off the end of ealist Add a check before visiting the members of ea to make sure each ea stays within the ealist. CVE-2024-41017 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41017.html CVE-2024-41017 https://bugzilla.suse.com/1228403 SUSE Bug 1228403 In the Linux kernel, the following vulnerability has been resolved: net/sched: Fix UAF when resolving a clash KASAN reports the following UAF: BUG: KASAN: slab-use-after-free in tcf_ct_flow_table_process_conn+0x12b/0x380 [act_ct] Read of size 1 at addr ffff888c07603600 by task handler130/6469 Call Trace: <IRQ> dump_stack_lvl+0x48/0x70 print_address_description.constprop.0+0x33/0x3d0 print_report+0xc0/0x2b0 kasan_report+0xd0/0x120 __asan_load1+0x6c/0x80 tcf_ct_flow_table_process_conn+0x12b/0x380 [act_ct] tcf_ct_act+0x886/0x1350 [act_ct] tcf_action_exec+0xf8/0x1f0 fl_classify+0x355/0x360 [cls_flower] __tcf_classify+0x1fd/0x330 tcf_classify+0x21c/0x3c0 sch_handle_ingress.constprop.0+0x2c5/0x500 __netif_receive_skb_core.constprop.0+0xb25/0x1510 __netif_receive_skb_list_core+0x220/0x4c0 netif_receive_skb_list_internal+0x446/0x620 napi_complete_done+0x157/0x3d0 gro_cell_poll+0xcf/0x100 __napi_poll+0x65/0x310 net_rx_action+0x30c/0x5c0 __do_softirq+0x14f/0x491 __irq_exit_rcu+0x82/0xc0 irq_exit_rcu+0xe/0x20 common_interrupt+0xa1/0xb0 </IRQ> <TASK> asm_common_interrupt+0x27/0x40 Allocated by task 6469: kasan_save_stack+0x38/0x70 kasan_set_track+0x25/0x40 kasan_save_alloc_info+0x1e/0x40 __kasan_krealloc+0x133/0x190 krealloc+0xaa/0x130 nf_ct_ext_add+0xed/0x230 [nf_conntrack] tcf_ct_act+0x1095/0x1350 [act_ct] tcf_action_exec+0xf8/0x1f0 fl_classify+0x355/0x360 [cls_flower] __tcf_classify+0x1fd/0x330 tcf_classify+0x21c/0x3c0 sch_handle_ingress.constprop.0+0x2c5/0x500 __netif_receive_skb_core.constprop.0+0xb25/0x1510 __netif_receive_skb_list_core+0x220/0x4c0 netif_receive_skb_list_internal+0x446/0x620 napi_complete_done+0x157/0x3d0 gro_cell_poll+0xcf/0x100 __napi_poll+0x65/0x310 net_rx_action+0x30c/0x5c0 __do_softirq+0x14f/0x491 Freed by task 6469: kasan_save_stack+0x38/0x70 kasan_set_track+0x25/0x40 kasan_save_free_info+0x2b/0x60 ____kasan_slab_free+0x180/0x1f0 __kasan_slab_free+0x12/0x30 slab_free_freelist_hook+0xd2/0x1a0 __kmem_cache_free+0x1a2/0x2f0 kfree+0x78/0x120 nf_conntrack_free+0x74/0x130 [nf_conntrack] nf_ct_destroy+0xb2/0x140 [nf_conntrack] __nf_ct_resolve_clash+0x529/0x5d0 [nf_conntrack] nf_ct_resolve_clash+0xf6/0x490 [nf_conntrack] __nf_conntrack_confirm+0x2c6/0x770 [nf_conntrack] tcf_ct_act+0x12ad/0x1350 [act_ct] tcf_action_exec+0xf8/0x1f0 fl_classify+0x355/0x360 [cls_flower] __tcf_classify+0x1fd/0x330 tcf_classify+0x21c/0x3c0 sch_handle_ingress.constprop.0+0x2c5/0x500 __netif_receive_skb_core.constprop.0+0xb25/0x1510 __netif_receive_skb_list_core+0x220/0x4c0 netif_receive_skb_list_internal+0x446/0x620 napi_complete_done+0x157/0x3d0 gro_cell_poll+0xcf/0x100 __napi_poll+0x65/0x310 net_rx_action+0x30c/0x5c0 __do_softirq+0x14f/0x491 The ct may be dropped if a clash has been resolved but is still passed to the tcf_ct_flow_table_process_conn function for further usage. This issue can be fixed by retrieving ct from skb again after confirming conntrack. CVE-2024-41040 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41040.html CVE-2024-41040 https://bugzilla.suse.com/1228518 SUSE Bug 1228518 In the Linux kernel, the following vulnerability has been resolved: udp: Set SOCK_RCU_FREE earlier in udp_lib_get_port(). syzkaller triggered the warning [0] in udp_v4_early_demux(). In udp_v[46]_early_demux() and sk_lookup(), we do not touch the refcount of the looked-up sk and use sock_pfree() as skb->destructor, so we check SOCK_RCU_FREE to ensure that the sk is safe to access during the RCU grace period. Currently, SOCK_RCU_FREE is flagged for a bound socket after being put into the hash table. Moreover, the SOCK_RCU_FREE check is done too early in udp_v[46]_early_demux() and sk_lookup(), so there could be a small race window: CPU1 CPU2 ---- ---- udp_v4_early_demux() udp_lib_get_port() | |- hlist_add_head_rcu() |- sk = __udp4_lib_demux_lookup() | |- DEBUG_NET_WARN_ON_ONCE(sk_is_refcounted(sk)); `- sock_set_flag(sk, SOCK_RCU_FREE) We had the same bug in TCP and fixed it in commit 871019b22d1b ("net: set SOCK_RCU_FREE before inserting socket into hashtable"). Let's apply the same fix for UDP. [0]: WARNING: CPU: 0 PID: 11198 at net/ipv4/udp.c:2599 udp_v4_early_demux+0x481/0xb70 net/ipv4/udp.c:2599 Modules linked in: CPU: 0 PID: 11198 Comm: syz-executor.1 Not tainted 6.9.0-g93bda33046e7 #13 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014 RIP: 0010:udp_v4_early_demux+0x481/0xb70 net/ipv4/udp.c:2599 Code: c5 7a 15 fe bb 01 00 00 00 44 89 e9 31 ff d3 e3 81 e3 bf ef ff ff 89 de e8 2c 74 15 fe 85 db 0f 85 02 06 00 00 e8 9f 7a 15 fe <0f> 0b e8 98 7a 15 fe 49 8d 7e 60 e8 4f 39 2f fe 49 c7 46 60 20 52 RSP: 0018:ffffc9000ce3fa58 EFLAGS: 00010293 RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8318c92c RDX: ffff888036ccde00 RSI: ffffffff8318c2f1 RDI: 0000000000000001 RBP: ffff88805a2dd6e0 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 0001ffffffffffff R12: ffff88805a2dd680 R13: 0000000000000007 R14: ffff88800923f900 R15: ffff88805456004e FS: 00007fc449127640(0000) GS:ffff88807dc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc449126e38 CR3: 000000003de4b002 CR4: 0000000000770ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 PKRU: 55555554 Call Trace: <TASK> ip_rcv_finish_core.constprop.0+0xbdd/0xd20 net/ipv4/ip_input.c:349 ip_rcv_finish+0xda/0x150 net/ipv4/ip_input.c:447 NF_HOOK include/linux/netfilter.h:314 [inline] NF_HOOK include/linux/netfilter.h:308 [inline] ip_rcv+0x16c/0x180 net/ipv4/ip_input.c:569 __netif_receive_skb_one_core+0xb3/0xe0 net/core/dev.c:5624 __netif_receive_skb+0x21/0xd0 net/core/dev.c:5738 netif_receive_skb_internal net/core/dev.c:5824 [inline] netif_receive_skb+0x271/0x300 net/core/dev.c:5884 tun_rx_batched drivers/net/tun.c:1549 [inline] tun_get_user+0x24db/0x2c50 drivers/net/tun.c:2002 tun_chr_write_iter+0x107/0x1a0 drivers/net/tun.c:2048 new_sync_write fs/read_write.c:497 [inline] vfs_write+0x76f/0x8d0 fs/read_write.c:590 ksys_write+0xbf/0x190 fs/read_write.c:643 __do_sys_write fs/read_write.c:655 [inline] __se_sys_write fs/read_write.c:652 [inline] __x64_sys_write+0x41/0x50 fs/read_write.c:652 x64_sys_call+0xe66/0x1990 arch/x86/include/generated/asm/syscalls_64.h:2 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0x4b/0x110 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x4b/0x53 RIP: 0033:0x7fc44a68bc1f Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 e9 cf f5 ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 3c d0 f5 ff 48 RSP: 002b:00007fc449126c90 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00000000004bc050 RCX: 00007fc44a68bc1f R ---truncated--- CVE-2024-41041 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41041.html CVE-2024-41041 https://bugzilla.suse.com/1228520 SUSE Bug 1228520 In the Linux kernel, the following vulnerability has been resolved: ppp: reject claimed-as-LCP but actually malformed packets Since 'ppp_async_encode()' assumes valid LCP packets (with code from 1 to 7 inclusive), add 'ppp_check_packet()' to ensure that LCP packet has an actual body beyond PPP_LCP header bytes, and reject claimed-as-LCP but actually malformed data otherwise. CVE-2024-41044 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41044.html CVE-2024-41044 https://bugzilla.suse.com/1228530 SUSE Bug 1228530 In the Linux kernel, the following vulnerability has been resolved: skmsg: Skip zero length skb in sk_msg_recvmsg When running BPF selftests (./test_progs -t sockmap_basic) on a Loongarch platform, the following kernel panic occurs: [...] Oops[#1]: CPU: 22 PID: 2824 Comm: test_progs Tainted: G OE 6.10.0-rc2+ #18 Hardware name: LOONGSON Dabieshan/Loongson-TC542F0, BIOS Loongson-UDK2018 ... ... ra: 90000000048bf6c0 sk_msg_recvmsg+0x120/0x560 ERA: 9000000004162774 copy_page_to_iter+0x74/0x1c0 CRMD: 000000b0 (PLV0 -IE -DA +PG DACF=CC DACM=CC -WE) PRMD: 0000000c (PPLV0 +PIE +PWE) EUEN: 00000007 (+FPE +SXE +ASXE -BTE) ECFG: 00071c1d (LIE=0,2-4,10-12 VS=7) ESTAT: 00010000 [PIL] (IS= ECode=1 EsubCode=0) BADV: 0000000000000040 PRID: 0014c011 (Loongson-64bit, Loongson-3C5000) Modules linked in: bpf_testmod(OE) xt_CHECKSUM xt_MASQUERADE xt_conntrack Process test_progs (pid: 2824, threadinfo=0000000000863a31, task=...) Stack : ... Call Trace: [<9000000004162774>] copy_page_to_iter+0x74/0x1c0 [<90000000048bf6c0>] sk_msg_recvmsg+0x120/0x560 [<90000000049f2b90>] tcp_bpf_recvmsg_parser+0x170/0x4e0 [<90000000049aae34>] inet_recvmsg+0x54/0x100 [<900000000481ad5c>] sock_recvmsg+0x7c/0xe0 [<900000000481e1a8>] __sys_recvfrom+0x108/0x1c0 [<900000000481e27c>] sys_recvfrom+0x1c/0x40 [<9000000004c076ec>] do_syscall+0x8c/0xc0 [<9000000003731da4>] handle_syscall+0xc4/0x160 Code: ... ---[ end trace 0000000000000000 ]--- Kernel panic - not syncing: Fatal exception Kernel relocated by 0x3510000 .text @ 0x9000000003710000 .data @ 0x9000000004d70000 .bss @ 0x9000000006469400 ---[ end Kernel panic - not syncing: Fatal exception ]--- [...] This crash happens every time when running sockmap_skb_verdict_shutdown subtest in sockmap_basic. This crash is because a NULL pointer is passed to page_address() in the sk_msg_recvmsg(). Due to the different implementations depending on the architecture, page_address(NULL) will trigger a panic on Loongarch platform but not on x86 platform. So this bug was hidden on x86 platform for a while, but now it is exposed on Loongarch platform. The root cause is that a zero length skb (skb->len == 0) was put on the queue. This zero length skb is a TCP FIN packet, which was sent by shutdown(), invoked in test_sockmap_skb_verdict_shutdown(): shutdown(p1, SHUT_WR); In this case, in sk_psock_skb_ingress_enqueue(), num_sge is zero, and no page is put to this sge (see sg_set_page in sg_set_page), but this empty sge is queued into ingress_msg list. And in sk_msg_recvmsg(), this empty sge is used, and a NULL page is got by sg_page(sge). Pass this NULL page to copy_page_to_iter(), which passes it to kmap_local_page() and to page_address(), then kernel panics. To solve this, we should skip this zero length skb. So in sk_msg_recvmsg(), if copy is zero, that means it's a zero length skb, skip invoking copy_page_to_iter(). We are using the EFAULT return triggered by copy_page_to_iter to check for is_fin in tcp_bpf.c. CVE-2024-41048 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41048.html CVE-2024-41048 https://bugzilla.suse.com/1228565 SUSE Bug 1228565 In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in cachefiles_withdraw_cookie() We got the following issue in our fault injection stress test: ================================================================== BUG: KASAN: slab-use-after-free in cachefiles_withdraw_cookie+0x4d9/0x600 Read of size 8 at addr ffff888118efc000 by task kworker/u78:0/109 CPU: 13 PID: 109 Comm: kworker/u78:0 Not tainted 6.8.0-dirty #566 Call Trace: <TASK> kasan_report+0x93/0xc0 cachefiles_withdraw_cookie+0x4d9/0x600 fscache_cookie_state_machine+0x5c8/0x1230 fscache_cookie_worker+0x91/0x1c0 process_one_work+0x7fa/0x1800 [...] Allocated by task 117: kmalloc_trace+0x1b3/0x3c0 cachefiles_acquire_volume+0xf3/0x9c0 fscache_create_volume_work+0x97/0x150 process_one_work+0x7fa/0x1800 [...] Freed by task 120301: kfree+0xf1/0x2c0 cachefiles_withdraw_cache+0x3fa/0x920 cachefiles_put_unbind_pincount+0x1f6/0x250 cachefiles_daemon_release+0x13b/0x290 __fput+0x204/0xa00 task_work_run+0x139/0x230 do_exit+0x87a/0x29b0 [...] ================================================================== Following is the process that triggers the issue: p1 | p2 ------------------------------------------------------------ fscache_begin_lookup fscache_begin_volume_access fscache_cache_is_live(fscache_cache) cachefiles_daemon_release cachefiles_put_unbind_pincount cachefiles_daemon_unbind cachefiles_withdraw_cache fscache_withdraw_cache fscache_set_cache_state(cache, FSCACHE_CACHE_IS_WITHDRAWN); cachefiles_withdraw_objects(cache) fscache_wait_for_objects(fscache) atomic_read(&fscache_cache->object_count) == 0 fscache_perform_lookup cachefiles_lookup_cookie cachefiles_alloc_object refcount_set(&object->ref, 1); object->volume = volume fscache_count_object(vcookie->cache); atomic_inc(&fscache_cache->object_count) cachefiles_withdraw_volumes cachefiles_withdraw_volume fscache_withdraw_volume __cachefiles_free_volume kfree(cachefiles_volume) fscache_cookie_state_machine cachefiles_withdraw_cookie cache = object->volume->cache; // cachefiles_volume UAF !!! After setting FSCACHE_CACHE_IS_WITHDRAWN, wait for all the cookie lookups to complete first, and then wait for fscache_cache->object_count == 0 to avoid the cookie exiting after the volume has been freed and triggering the above issue. Therefore call fscache_withdraw_volume() before calling cachefiles_withdraw_objects(). This way, after setting FSCACHE_CACHE_IS_WITHDRAWN, only the following two cases will occur: 1) fscache_begin_lookup fails in fscache_begin_volume_access(). 2) fscache_withdraw_volume() will ensure that fscache_count_object() has been executed before calling fscache_wait_for_objects(). CVE-2024-41057 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41057.html CVE-2024-41057 https://bugzilla.suse.com/1228462 SUSE Bug 1228462 https://bugzilla.suse.com/1229275 SUSE Bug 1229275 In the Linux kernel, the following vulnerability has been resolved: cachefiles: fix slab-use-after-free in fscache_withdraw_volume() We got the following issue in our fault injection stress test: ================================================================== BUG: KASAN: slab-use-after-free in fscache_withdraw_volume+0x2e1/0x370 Read of size 4 at addr ffff88810680be08 by task ondemand-04-dae/5798 CPU: 0 PID: 5798 Comm: ondemand-04-dae Not tainted 6.8.0-dirty #565 Call Trace: kasan_check_range+0xf6/0x1b0 fscache_withdraw_volume+0x2e1/0x370 cachefiles_withdraw_volume+0x31/0x50 cachefiles_withdraw_cache+0x3ad/0x900 cachefiles_put_unbind_pincount+0x1f6/0x250 cachefiles_daemon_release+0x13b/0x290 __fput+0x204/0xa00 task_work_run+0x139/0x230 Allocated by task 5820: __kmalloc+0x1df/0x4b0 fscache_alloc_volume+0x70/0x600 __fscache_acquire_volume+0x1c/0x610 erofs_fscache_register_volume+0x96/0x1a0 erofs_fscache_register_fs+0x49a/0x690 erofs_fc_fill_super+0x6c0/0xcc0 vfs_get_super+0xa9/0x140 vfs_get_tree+0x8e/0x300 do_new_mount+0x28c/0x580 [...] Freed by task 5820: kfree+0xf1/0x2c0 fscache_put_volume.part.0+0x5cb/0x9e0 erofs_fscache_unregister_fs+0x157/0x1b0 erofs_kill_sb+0xd9/0x1c0 deactivate_locked_super+0xa3/0x100 vfs_get_super+0x105/0x140 vfs_get_tree+0x8e/0x300 do_new_mount+0x28c/0x580 [...] ================================================================== Following is the process that triggers the issue: mount failed | daemon exit ------------------------------------------------------------ deactivate_locked_super cachefiles_daemon_release erofs_kill_sb erofs_fscache_unregister_fs fscache_relinquish_volume __fscache_relinquish_volume fscache_put_volume(fscache_volume, fscache_volume_put_relinquish) zero = __refcount_dec_and_test(&fscache_volume->ref, &ref); cachefiles_put_unbind_pincount cachefiles_daemon_unbind cachefiles_withdraw_cache cachefiles_withdraw_volumes list_del_init(&volume->cache_link) fscache_free_volume(fscache_volume) cache->ops->free_volume cachefiles_free_volume list_del_init(&cachefiles_volume->cache_link); kfree(fscache_volume) cachefiles_withdraw_volume fscache_withdraw_volume fscache_volume->n_accesses // fscache_volume UAF !!! The fscache_volume in cache->volumes must not have been freed yet, but its reference count may be 0. So use the new fscache_try_get_volume() helper function try to get its reference count. If the reference count of fscache_volume is 0, fscache_put_volume() is freeing it, so wait for it to be removed from cache->volumes. If its reference count is not 0, call cachefiles_withdraw_volume() with reference count protection to avoid the above issue. CVE-2024-41058 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41058.html CVE-2024-41058 https://bugzilla.suse.com/1228459 SUSE Bug 1228459 In the Linux kernel, the following vulnerability has been resolved: hfsplus: fix uninit-value in copy_name [syzbot reported] BUG: KMSAN: uninit-value in sized_strscpy+0xc4/0x160 sized_strscpy+0xc4/0x160 copy_name+0x2af/0x320 fs/hfsplus/xattr.c:411 hfsplus_listxattr+0x11e9/0x1a50 fs/hfsplus/xattr.c:750 vfs_listxattr fs/xattr.c:493 [inline] listxattr+0x1f3/0x6b0 fs/xattr.c:840 path_listxattr fs/xattr.c:864 [inline] __do_sys_listxattr fs/xattr.c:876 [inline] __se_sys_listxattr fs/xattr.c:873 [inline] __x64_sys_listxattr+0x16b/0x2f0 fs/xattr.c:873 x64_sys_call+0x2ba0/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:195 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was created at: slab_post_alloc_hook mm/slub.c:3877 [inline] slab_alloc_node mm/slub.c:3918 [inline] kmalloc_trace+0x57b/0xbe0 mm/slub.c:4065 kmalloc include/linux/slab.h:628 [inline] hfsplus_listxattr+0x4cc/0x1a50 fs/hfsplus/xattr.c:699 vfs_listxattr fs/xattr.c:493 [inline] listxattr+0x1f3/0x6b0 fs/xattr.c:840 path_listxattr fs/xattr.c:864 [inline] __do_sys_listxattr fs/xattr.c:876 [inline] __se_sys_listxattr fs/xattr.c:873 [inline] __x64_sys_listxattr+0x16b/0x2f0 fs/xattr.c:873 x64_sys_call+0x2ba0/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:195 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f [Fix] When allocating memory to strbuf, initialize memory to 0. CVE-2024-41059 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41059.html CVE-2024-41059 https://bugzilla.suse.com/1228561 SUSE Bug 1228561 https://bugzilla.suse.com/1228573 SUSE Bug 1228573 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_core: cancel all works upon hci_unregister_dev() syzbot is reporting that calling hci_release_dev() from hci_error_reset() due to hci_dev_put() from hci_error_reset() can cause deadlock at destroy_workqueue(), for hci_error_reset() is called from hdev->req_workqueue which destroy_workqueue() needs to flush. We need to make sure that hdev->{rx_work,cmd_work,tx_work} which are queued into hdev->workqueue and hdev->{power_on,error_reset} which are queued into hdev->req_workqueue are no longer running by the moment destroy_workqueue(hdev->workqueue); destroy_workqueue(hdev->req_workqueue); are called from hci_release_dev(). Call cancel_work_sync() on these work items from hci_unregister_dev() as soon as hdev->list is removed from hci_dev_list. CVE-2024-41063 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41063.html CVE-2024-41063 https://bugzilla.suse.com/1228580 SUSE Bug 1228580 In the Linux kernel, the following vulnerability has been resolved: powerpc/eeh: avoid possible crash when edev->pdev changes If a PCI device is removed during eeh_pe_report_edev(), edev->pdev will change and can cause a crash, hold the PCI rescan/remove lock while taking a copy of edev->pdev->bus. CVE-2024-41064 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41064.html CVE-2024-41064 https://bugzilla.suse.com/1228599 SUSE Bug 1228599 In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Add tx check to prevent skb leak Below is a summary of how the driver stores a reference to an skb during transmit: tx_buff[free_map[consumer_index]]->skb = new_skb; free_map[consumer_index] = IBMVNIC_INVALID_MAP; consumer_index ++; Where variable data looks like this: free_map == [4, IBMVNIC_INVALID_MAP, IBMVNIC_INVALID_MAP, 0, 3] consumer_index^ tx_buff == [skb=null, skb=<ptr>, skb=<ptr>, skb=null, skb=null] The driver has checks to ensure that free_map[consumer_index] pointed to a valid index but there was no check to ensure that this index pointed to an unused/null skb address. So, if, by some chance, our free_map and tx_buff lists become out of sync then we were previously risking an skb memory leak. This could then cause tcp congestion control to stop sending packets, eventually leading to ETIMEDOUT. Therefore, add a conditional to ensure that the skb address is null. If not then warn the user (because this is still a bug that should be patched) and free the old pointer to prevent memleak/tcp problems. CVE-2024-41066 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41066.html CVE-2024-41066 https://bugzilla.suse.com/1228640 SUSE Bug 1228640 In the Linux kernel, the following vulnerability has been resolved: ASoC: topology: Fix references to freed memory Most users after parsing a topology file, release memory used by it, so having pointer references directly into topology file contents is wrong. Use devm_kmemdup(), to allocate memory as needed. CVE-2024-41069 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41069.html CVE-2024-41069 https://bugzilla.suse.com/1228644 SUSE Bug 1228644 https://bugzilla.suse.com/1228645 SUSE Bug 1228645 In the Linux kernel, the following vulnerability has been resolved: KVM: PPC: Book3S HV: Prevent UAF in kvm_spapr_tce_attach_iommu_group() Al reported a possible use-after-free (UAF) in kvm_spapr_tce_attach_iommu_group(). It looks up `stt` from tablefd, but then continues to use it after doing fdput() on the returned fd. After the fdput() the tablefd is free to be closed by another thread. The close calls kvm_spapr_tce_release() and then release_spapr_tce_table() (via call_rcu()) which frees `stt`. Although there are calls to rcu_read_lock() in kvm_spapr_tce_attach_iommu_group() they are not sufficient to prevent the UAF, because `stt` is used outside the locked regions. With an artifcial delay after the fdput() and a userspace program which triggers the race, KASAN detects the UAF: BUG: KASAN: slab-use-after-free in kvm_spapr_tce_attach_iommu_group+0x298/0x720 [kvm] Read of size 4 at addr c000200027552c30 by task kvm-vfio/2505 CPU: 54 PID: 2505 Comm: kvm-vfio Not tainted 6.10.0-rc3-next-20240612-dirty #1 Hardware name: 8335-GTH POWER9 0x4e1202 opal:skiboot-v6.5.3-35-g1851b2a06 PowerNV Call Trace: dump_stack_lvl+0xb4/0x108 (unreliable) print_report+0x2b4/0x6ec kasan_report+0x118/0x2b0 __asan_load4+0xb8/0xd0 kvm_spapr_tce_attach_iommu_group+0x298/0x720 [kvm] kvm_vfio_set_attr+0x524/0xac0 [kvm] kvm_device_ioctl+0x144/0x240 [kvm] sys_ioctl+0x62c/0x1810 system_call_exception+0x190/0x440 system_call_vectored_common+0x15c/0x2ec ... Freed by task 0: ... kfree+0xec/0x3e0 release_spapr_tce_table+0xd4/0x11c [kvm] rcu_core+0x568/0x16a0 handle_softirqs+0x23c/0x920 do_softirq_own_stack+0x6c/0x90 do_softirq_own_stack+0x58/0x90 __irq_exit_rcu+0x218/0x2d0 irq_exit+0x30/0x80 arch_local_irq_restore+0x128/0x230 arch_local_irq_enable+0x1c/0x30 cpuidle_enter_state+0x134/0x5cc cpuidle_enter+0x6c/0xb0 call_cpuidle+0x7c/0x100 do_idle+0x394/0x410 cpu_startup_entry+0x60/0x70 start_secondary+0x3fc/0x410 start_secondary_prolog+0x10/0x14 Fix it by delaying the fdput() until `stt` is no longer in use, which is effectively the entire function. To keep the patch minimal add a call to fdput() at each of the existing return paths. Future work can convert the function to goto or __cleanup style cleanup. With the fix in place the test case no longer triggers the UAF. CVE-2024-41070 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41070.html CVE-2024-41070 https://bugzilla.suse.com/1228581 SUSE Bug 1228581 ** REJECT ** This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2024-41071 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41071.html CVE-2024-41071 https://bugzilla.suse.com/1228625 SUSE Bug 1228625 In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: wext: add extra SIOCSIWSCAN data check In 'cfg80211_wext_siwscan()', add extra check whether number of channels passed via 'ioctl(sock, SIOCSIWSCAN, ...)' doesn't exceed IW_MAX_FREQUENCIES and reject invalid request with -EINVAL otherwise. CVE-2024-41072 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41072.html CVE-2024-41072 https://bugzilla.suse.com/1228626 SUSE Bug 1228626 In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix memory leak in nfs4_set_security_label We leak nfs_fattr and nfs4_label every time we set a security xattr. CVE-2024-41076 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41076.html CVE-2024-41076 https://bugzilla.suse.com/1228649 SUSE Bug 1228649 In the Linux kernel, the following vulnerability has been resolved: btrfs: qgroup: fix quota root leak after quota disable failure If during the quota disable we fail when cleaning the quota tree or when deleting the root from the root tree, we jump to the 'out' label without ever dropping the reference on the quota root, resulting in a leak of the root since fs_info->quota_root is no longer pointing to the root (we have set it to NULL just before those steps). Fix this by always doing a btrfs_put_root() call under the 'out' label. This is a problem that exists since qgroups were first added in 2012 by commit bed92eae26cc ("Btrfs: qgroup implementation and prototypes"), but back then we missed a kfree on the quota root and free_extent_buffer() calls on its root and commit root nodes, since back then roots were not yet reference counted. CVE-2024-41078 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41078.html CVE-2024-41078 https://bugzilla.suse.com/1228655 SUSE Bug 1228655 In the Linux kernel, the following vulnerability has been resolved: ila: block BH in ila_output() As explained in commit 1378817486d6 ("tipc: block BH before using dst_cache"), net/core/dst_cache.c helpers need to be called with BH disabled. ila_output() is called from lwtunnel_output() possibly from process context, and under rcu_read_lock(). We might be interrupted by a softirq, re-enter ila_output() and corrupt dst_cache data structures. Fix the race by using local_bh_disable(). CVE-2024-41081 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41081.html CVE-2024-41081 https://bugzilla.suse.com/1228617 SUSE Bug 1228617 In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix double free on error If e.g. the ata_port_alloc() call in ata_host_alloc() fails, we will jump to the err_out label, which will call devres_release_group(). devres_release_group() will trigger a call to ata_host_release(). ata_host_release() calls kfree(host), so executing the kfree(host) in ata_host_alloc() will lead to a double free: kernel BUG at mm/slub.c:553! Oops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 11 PID: 599 Comm: (udev-worker) Not tainted 6.10.0-rc5 #47 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014 RIP: 0010:kfree+0x2cf/0x2f0 Code: 5d 41 5e 41 5f 5d e9 80 d6 ff ff 4d 89 f1 41 b8 01 00 00 00 48 89 d9 48 89 da RSP: 0018:ffffc90000f377f0 EFLAGS: 00010246 RAX: ffff888112b1f2c0 RBX: ffff888112b1f2c0 RCX: ffff888112b1f320 RDX: 000000000000400b RSI: ffffffffc02c9de5 RDI: ffff888112b1f2c0 RBP: ffffc90000f37830 R08: 0000000000000000 R09: 0000000000000000 R10: ffffc90000f37610 R11: 617461203a736b6e R12: ffffea00044ac780 R13: ffff888100046400 R14: ffffffffc02c9de5 R15: 0000000000000006 FS: 00007f2f1cabe980(0000) GS:ffff88813b380000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f2f1c3acf75 CR3: 0000000111724000 CR4: 0000000000750ef0 PKRU: 55555554 Call Trace: <TASK> ? __die_body.cold+0x19/0x27 ? die+0x2e/0x50 ? do_trap+0xca/0x110 ? do_error_trap+0x6a/0x90 ? kfree+0x2cf/0x2f0 ? exc_invalid_op+0x50/0x70 ? kfree+0x2cf/0x2f0 ? asm_exc_invalid_op+0x1a/0x20 ? ata_host_alloc+0xf5/0x120 [libata] ? ata_host_alloc+0xf5/0x120 [libata] ? kfree+0x2cf/0x2f0 ata_host_alloc+0xf5/0x120 [libata] ata_host_alloc_pinfo+0x14/0xa0 [libata] ahci_init_one+0x6c9/0xd20 [ahci] Ensure that we will not call kfree(host) twice, by performing the kfree() only if the devres_open_group() call failed. CVE-2024-41087 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41087.html CVE-2024-41087 https://bugzilla.suse.com/1228466 SUSE Bug 1228466 https://bugzilla.suse.com/1228740 SUSE Bug 1228740 In the Linux kernel, the following vulnerability has been resolved: tap: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tap_get_user_xdp() path, which could cause a corrupted skb to be sent downstack. Even before the skb is transmitted, the tap_get_user_xdp()-->skb_set_network_header() may assume the size is more than ETH_HLEN. Once transmitted, this could either cause out-of-bound access beyond the actual length, or confuse the underlayer with incorrect or inconsistent header length in the skb metadata. In the alternative path, tap_get_user() already prohibits short frame which has the length less than Ethernet header size from being transmitted. This is to drop any frame shorter than the Ethernet header size just like how tap_get_user() does. CVE: CVE-2024-41090 CVE-2024-41090 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41090.html CVE-2024-41090 https://bugzilla.suse.com/1228328 SUSE Bug 1228328 https://bugzilla.suse.com/1228714 SUSE Bug 1228714 In the Linux kernel, the following vulnerability has been resolved: tun: add missing verification for short frame The cited commit missed to check against the validity of the frame length in the tun_xdp_one() path, which could cause a corrupted skb to be sent downstack. Even before the skb is transmitted, the tun_xdp_one-->eth_type_trans() may access the Ethernet header although it can be less than ETH_HLEN. Once transmitted, this could either cause out-of-bound access beyond the actual length, or confuse the underlayer with incorrect or inconsistent header length in the skb metadata. In the alternative path, tun_get_user() already prohibits short frame which has the length less than Ethernet header size from being transmitted for IFF_TAP. This is to drop any frame shorter than the Ethernet header size just like how tun_get_user() does. CVE: CVE-2024-41091 CVE-2024-41091 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-41091.html CVE-2024-41091 https://bugzilla.suse.com/1228327 SUSE Bug 1228327 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers register store validation for NFT_DATA_VALUE is conditional, however, the datatype is always either NFT_DATA_VALUE or NFT_DATA_VERDICT. This only requires a new helper function to infer the register type from the set datatype so this conditional check can be removed. Otherwise, pointer to chain object can be leaked through the registers. CVE-2024-42070 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-42070.html CVE-2024-42070 https://bugzilla.suse.com/1228470 SUSE Bug 1228470 In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix NULL pointer dereference in gfs2_log_flush In gfs2_jindex_free(), set sdp->sd_jdesc to NULL under the log flush lock to provide exclusion against gfs2_log_flush(). In gfs2_log_flush(), check if sdp->sd_jdesc is non-NULL before dereferencing it. Otherwise, we could run into a NULL pointer dereference when outstanding glock work races with an unmount (glock_work_func -> run_queue -> do_xmote -> inode_go_sync -> gfs2_log_flush). CVE-2024-42079 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-42079.html CVE-2024-42079 https://bugzilla.suse.com/1228672 SUSE Bug 1228672 In the Linux kernel, the following vulnerability has been resolved: net/dpaa2: Avoid explicit cpumask var allocation on stack For CONFIG_CPUMASK_OFFSTACK=y kernel, explicit allocation of cpumask variable on stack is not recommended since it can cause potential stack overflow. Instead, kernel code should always use *cpumask_var API(s) to allocate cpumask var in config-neutral way, leaving allocation strategy to CONFIG_CPUMASK_OFFSTACK. Use *cpumask_var API(s) to address it. CVE-2024-42093 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-42093.html CVE-2024-42093 https://bugzilla.suse.com/1228680 SUSE Bug 1228680 In the Linux kernel, the following vulnerability has been resolved: x86: stop playing stack games in profile_pc() The 'profile_pc()' function is used for timer-based profiling, which isn't really all that relevant any more to begin with, but it also ends up making assumptions based on the stack layout that aren't necessarily valid. Basically, the code tries to account the time spent in spinlocks to the caller rather than the spinlock, and while I support that as a concept, it's not worth the code complexity or the KASAN warnings when no serious profiling is done using timers anyway these days. And the code really does depend on stack layout that is only true in the simplest of cases. We've lost the comment at some point (I think when the 32-bit and 64-bit code was unified), but it used to say: Assume the lock function has either no stack frame or a copy of eflags from PUSHF. which explains why it just blindly loads a word or two straight off the stack pointer and then takes a minimal look at the values to just check if they might be eflags or the return pc: Eflags always has bits 22 and up cleared unlike kernel addresses but that basic stack layout assumption assumes that there isn't any lock debugging etc going on that would complicate the code and cause a stack frame. It causes KASAN unhappiness reported for years by syzkaller [1] and others [2]. With no real practical reason for this any more, just remove the code. Just for historical interest, here's some background commits relating to this code from 2006: 0cb91a229364 ("i386: Account spinlocks to the caller during profiling for !FP kernels") 31679f38d886 ("Simplify profile_pc on x86-64") and a code unification from 2009: ef4512882dbe ("x86: time_32/64.c unify profile_pc") but the basics of this thing actually goes back to before the git tree. CVE-2024-42096 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-42096.html CVE-2024-42096 https://bugzilla.suse.com/1228633 SUSE Bug 1228633 In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix inode number range checks Patch series "nilfs2: fix potential issues related to reserved inodes". This series fixes one use-after-free issue reported by syzbot, caused by nilfs2's internal inode being exposed in the namespace on a corrupted filesystem, and a couple of flaws that cause problems if the starting number of non-reserved inodes written in the on-disk super block is intentionally (or corruptly) changed from its default value. This patch (of 3): In the current implementation of nilfs2, "nilfs->ns_first_ino", which gives the first non-reserved inode number, is read from the superblock, but its lower limit is not checked. As a result, if a number that overlaps with the inode number range of reserved inodes such as the root directory or metadata files is set in the super block parameter, the inode number test macros (NILFS_MDT_INODE and NILFS_VALID_INODE) will not function properly. In addition, these test macros use left bit-shift calculations using with the inode number as the shift count via the BIT macro, but the result of a shift calculation that exceeds the bit width of an integer is undefined in the C specification, so if "ns_first_ino" is set to a large value other than the default value NILFS_USER_INO (=11), the macros may potentially malfunction depending on the environment. Fix these issues by checking the lower bound of "nilfs->ns_first_ino" and by preventing bit shifts equal to or greater than the NILFS_USER_INO constant in the inode number test macros. Also, change the type of "ns_first_ino" from signed integer to unsigned integer to avoid the need for type casting in comparisons such as the lower bound check introduced this time. CVE-2024-42105 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-42105.html CVE-2024-42105 https://bugzilla.suse.com/1228665 SUSE Bug 1228665 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add NULL pointer check for kzalloc [Why & How] Check return pointer of kzalloc before using it. CVE-2024-42122 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-42122.html CVE-2024-42122 https://bugzilla.suse.com/1228591 SUSE Bug 1228591 In the Linux kernel, the following vulnerability has been resolved: scsi: qedf: Make qedf_execute_tmf() non-preemptible Stop calling smp_processor_id() from preemptible code in qedf_execute_tmf90. This results in BUG_ON() when running an RT kernel. [ 659.343280] BUG: using smp_processor_id() in preemptible [00000000] code: sg_reset/3646 [ 659.343282] caller is qedf_execute_tmf+0x8b/0x360 [qedf] CVE-2024-42124 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-42124.html CVE-2024-42124 https://bugzilla.suse.com/1228705 SUSE Bug 1228705 In the Linux kernel, the following vulnerability has been resolved: IB/core: Implement a limit on UMAD receive List The existing behavior of ib_umad, which maintains received MAD packets in an unbounded list, poses a risk of uncontrolled growth. As user-space applications extract packets from this list, the rate of extraction may not match the rate of incoming packets, leading to potential list overflow. To address this, we introduce a limit to the size of the list. After considering typical scenarios, such as OpenSM processing, which can handle approximately 100k packets per second, and the 1-second retry timeout for most packets, we set the list size limit to 200k. Packets received beyond this limit are dropped, assuming they are likely timed out by the time they are handled by user-space. Notably, packets queued on the receive list due to reasons like timed-out sends are preserved even when the list is full. CVE-2024-42145 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-42145.html CVE-2024-42145 https://bugzilla.suse.com/1223384 SUSE Bug 1223384 https://bugzilla.suse.com/1228743 SUSE Bug 1228743 https://bugzilla.suse.com/1228744 SUSE Bug 1228744 In the Linux kernel, the following vulnerability has been resolved: bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD [Changes from V1: - Use a default branch in the switch statement to initialize `val'.] GCC warns that `val' may be used uninitialized in the BPF_CRE_READ_BITFIELD macro, defined in bpf_core_read.h as: [...] unsigned long long val; \ [...] \ switch (__CORE_RELO(s, field, BYTE_SIZE)) { \ case 1: val = *(const unsigned char *)p; break; \ case 2: val = *(const unsigned short *)p; break; \ case 4: val = *(const unsigned int *)p; break; \ case 8: val = *(const unsigned long long *)p; break; \ } \ [...] val; \ } \ This patch adds a default entry in the switch statement that sets `val' to zero in order to avoid the warning, and random values to be used in case __builtin_preserve_field_info returns unexpected values for BPF_FIELD_BYTE_SIZE. Tested in bpf-next master. No regressions. CVE-2024-42161 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-42161.html CVE-2024-42161 https://bugzilla.suse.com/1228756 SUSE Bug 1228756 In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Correct check for empty list Since commit a3c53be55c95 ("net: dsa: mv88e6xxx: Support multiple MDIO busses") mv88e6xxx_default_mdio_bus() has checked that the return value of list_first_entry() is non-NULL. This appears to be intended to guard against the list chip->mdios being empty. However, it is not the correct check as the implementation of list_first_entry is not designed to return NULL for empty lists. Instead, use list_first_entry_or_null() which does return NULL if the list is empty. Flagged by Smatch. Compile tested only. CVE-2024-42224 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-42224.html CVE-2024-42224 https://bugzilla.suse.com/1228723 SUSE Bug 1228723 In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix scv instruction crash with kexec kexec on pseries disables AIL (reloc_on_exc), required for scv instruction support, before other CPUs have been shut down. This means they can execute scv instructions after AIL is disabled, which causes an interrupt at an unexpected entry location that crashes the kernel. Change the kexec sequence to disable AIL after other CPUs have been brought down. As a refresher, the real-mode scv interrupt vector is 0x17000, and the fixed-location head code probably couldn't easily deal with implementing such high addresses so it was just decided not to support that interrupt at all. CVE-2024-42230 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_64-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.64.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.64.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.64.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20242894-1/ https://www.suse.com/security/cve/CVE-2024-42230.html CVE-2024-42230 https://bugzilla.suse.com/1228489 SUSE Bug 1228489