Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2024:3585-1 Final 1 1 2024-10-10T09:05:14Z current 2024-10-10T09:05:14Z 2024-10-10T09:05:14Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47069: Fixed a crash due to relying on a stack reference past its expiry in ipc/mqueue, ipc/msg, ipc/sem (bsc#1220826). - CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633). - CVE-2022-48945: media: vivid: fix compose size exceed boundary (bsc#1230398). - CVE-2024-41087: Fix double free on error (bsc#1228466). - CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015). - CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245). - CVE-2024-45021: memcg_write_event_control(): fix a user-triggerable oops (bsc#1230434). - CVE-2024-46695: selinux,smack: do not bypass permissions check in inode_setsecctx hook (bsc#1230519). - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226145). The following non-security bugs were fixed: - ext4: add check to prevent attempting to resize an fs with sparse_super2 (bsc#1230326). - ext4: add reserved GDT blocks check (bsc#1230326). - ext4: consolidate checks for resize of bigalloc into ext4_resize_begin (bsc#1230326). - ext4: fix bug_on ext4_mb_use_inode_pa (bsc#1230326). - kabi: add __nf_queue_get_refs() for kabi compliance. - PKCS#7: Check codeSigning EKU of certificates in PKCS#7 (bsc#1226666). - Revert 'ext4: consolidate checks for resize of bigalloc into ext4_resize_begin' (bsc#1230326). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sle-micro-rancher/5.2:latest-2024-3585,Image SLES15-SP3-BYOS-Azure-2024-3585,Image SLES15-SP3-BYOS-EC2-HVM-2024-3585,Image SLES15-SP3-BYOS-GCE-2024-3585,Image SLES15-SP3-HPC-BYOS-Azure-2024-3585,Image SLES15-SP3-HPC-BYOS-EC2-HVM-2024-3585,Image SLES15-SP3-HPC-BYOS-GCE-2024-3585,Image SLES15-SP3-Micro-5-1-BYOS-Azure-2024-3585,Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM-2024-3585,Image SLES15-SP3-Micro-5-1-BYOS-GCE-2024-3585,Image SLES15-SP3-Micro-5-2-BYOS-Azure-2024-3585,Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM-2024-3585,Image SLES15-SP3-Micro-5-2-BYOS-GCE-2024-3585,Image SLES15-SP3-SAP-Azure-LI-BYOS-Production-2024-3585,Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production-2024-3585,Image SLES15-SP3-SAP-BYOS-Azure-2024-3585,Image SLES15-SP3-SAP-BYOS-EC2-HVM-2024-3585,Image SLES15-SP3-SAP-BYOS-GCE-2024-3585,Image SLES15-SP3-SAPCAL-Azure-2024-3585,Image SLES15-SP3-SAPCAL-EC2-HVM-2024-3585,Image SLES15-SP3-SAPCAL-GCE-2024-3585,SUSE-2024-3585,SUSE-SLE-Module-Live-Patching-15-SP3-2024-3585,SUSE-SLE-Product-HA-15-SP3-2024-3585,SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-3585,SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-3585,SUSE-SLE-Product-SLES_SAP-15-SP3-2024-3585,SUSE-SUSE-MicroOS-5.1-2024-3585,SUSE-SUSE-MicroOS-5.2-2024-3585,SUSE-Storage-7.1-2024-3585 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2024/suse-su-20243585-1/ Link for SUSE-SU-2024:3585-1 https://lists.suse.com/pipermail/sle-updates/2024-October/037202.html E-Mail link for SUSE-SU-2024:3585-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1220826 SUSE Bug 1220826 https://bugzilla.suse.com/1226145 SUSE Bug 1226145 https://bugzilla.suse.com/1226666 SUSE Bug 1226666 https://bugzilla.suse.com/1227487 SUSE Bug 1227487 https://bugzilla.suse.com/1228466 SUSE Bug 1228466 https://bugzilla.suse.com/1229633 SUSE Bug 1229633 https://bugzilla.suse.com/1230015 SUSE Bug 1230015 https://bugzilla.suse.com/1230245 SUSE Bug 1230245 https://bugzilla.suse.com/1230326 SUSE Bug 1230326 https://bugzilla.suse.com/1230398 SUSE Bug 1230398 https://bugzilla.suse.com/1230434 SUSE Bug 1230434 https://bugzilla.suse.com/1230519 SUSE Bug 1230519 https://bugzilla.suse.com/1230767 SUSE Bug 1230767 https://www.suse.com/security/cve/CVE-2021-47069/ SUSE CVE CVE-2021-47069 page https://www.suse.com/security/cve/CVE-2022-48911/ SUSE CVE CVE-2022-48911 page https://www.suse.com/security/cve/CVE-2022-48945/ SUSE CVE CVE-2022-48945 page https://www.suse.com/security/cve/CVE-2024-36971/ SUSE CVE CVE-2024-36971 page https://www.suse.com/security/cve/CVE-2024-41087/ SUSE CVE CVE-2024-41087 page https://www.suse.com/security/cve/CVE-2024-44946/ SUSE CVE CVE-2024-44946 page https://www.suse.com/security/cve/CVE-2024-45003/ SUSE CVE CVE-2024-45003 page https://www.suse.com/security/cve/CVE-2024-45021/ SUSE CVE CVE-2024-45021 page https://www.suse.com/security/cve/CVE-2024-46695/ SUSE CVE CVE-2024-46695 page https://www.suse.com/security/cve/CVE-2024-46774/ SUSE CVE CVE-2024-46774 page Container suse/sle-micro-rancher/5.2:latest Image SLES15-SP3-BYOS-Azure Image SLES15-SP3-BYOS-EC2-HVM Image SLES15-SP3-BYOS-GCE Image SLES15-SP3-HPC-BYOS-Azure Image SLES15-SP3-HPC-BYOS-EC2-HVM Image SLES15-SP3-HPC-BYOS-GCE Image SLES15-SP3-Micro-5-1-BYOS-Azure Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-1-BYOS-GCE Image SLES15-SP3-Micro-5-2-BYOS-Azure Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM Image SLES15-SP3-Micro-5-2-BYOS-GCE Image SLES15-SP3-SAP-Azure-LI-BYOS-Production Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production Image SLES15-SP3-SAP-BYOS-Azure Image SLES15-SP3-SAP-BYOS-EC2-HVM Image SLES15-SP3-SAP-BYOS-GCE Image SLES15-SP3-SAPCAL-Azure Image SLES15-SP3-SAPCAL-EC2-HVM Image SLES15-SP3-SAPCAL-GCE SUSE Enterprise Storage 7.1 SUSE Linux Enterprise High Availability Extension 15 SP3 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Live Patching 15 SP3 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-default-5.3.18-150300.59.179.1 cluster-md-kmp-default-5.3.18-150300.59.179.1 dlm-kmp-default-5.3.18-150300.59.179.1 gfs2-kmp-default-5.3.18-150300.59.179.1 ocfs2-kmp-default-5.3.18-150300.59.179.1 cluster-md-kmp-64kb-5.3.18-150300.59.179.1 cluster-md-kmp-preempt-5.3.18-150300.59.179.1 dlm-kmp-64kb-5.3.18-150300.59.179.1 dlm-kmp-preempt-5.3.18-150300.59.179.1 dtb-al-5.3.18-150300.59.179.1 dtb-allwinner-5.3.18-150300.59.179.1 dtb-altera-5.3.18-150300.59.179.1 dtb-amd-5.3.18-150300.59.179.1 dtb-amlogic-5.3.18-150300.59.179.1 dtb-apm-5.3.18-150300.59.179.1 dtb-arm-5.3.18-150300.59.179.1 dtb-broadcom-5.3.18-150300.59.179.1 dtb-cavium-5.3.18-150300.59.179.1 dtb-exynos-5.3.18-150300.59.179.1 dtb-freescale-5.3.18-150300.59.179.1 dtb-hisilicon-5.3.18-150300.59.179.1 dtb-lg-5.3.18-150300.59.179.1 dtb-marvell-5.3.18-150300.59.179.1 dtb-mediatek-5.3.18-150300.59.179.1 dtb-nvidia-5.3.18-150300.59.179.1 dtb-qcom-5.3.18-150300.59.179.1 dtb-renesas-5.3.18-150300.59.179.1 dtb-rockchip-5.3.18-150300.59.179.1 dtb-socionext-5.3.18-150300.59.179.1 dtb-sprd-5.3.18-150300.59.179.1 dtb-xilinx-5.3.18-150300.59.179.1 dtb-zte-5.3.18-150300.59.179.1 gfs2-kmp-64kb-5.3.18-150300.59.179.1 gfs2-kmp-preempt-5.3.18-150300.59.179.1 kernel-64kb-5.3.18-150300.59.179.1 kernel-64kb-devel-5.3.18-150300.59.179.1 kernel-64kb-extra-5.3.18-150300.59.179.1 kernel-64kb-livepatch-devel-5.3.18-150300.59.179.1 kernel-64kb-optional-5.3.18-150300.59.179.1 kernel-debug-5.3.18-150300.59.179.1 kernel-debug-devel-5.3.18-150300.59.179.1 kernel-debug-livepatch-devel-5.3.18-150300.59.179.1 kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 kernel-default-base-rebuild-5.3.18-150300.59.179.1.150300.18.105.2 kernel-default-devel-5.3.18-150300.59.179.1 kernel-default-extra-5.3.18-150300.59.179.1 kernel-default-livepatch-5.3.18-150300.59.179.1 kernel-default-livepatch-devel-5.3.18-150300.59.179.1 kernel-default-optional-5.3.18-150300.59.179.1 kernel-devel-5.3.18-150300.59.179.1 kernel-docs-5.3.18-150300.59.179.1 kernel-docs-html-5.3.18-150300.59.179.1 kernel-kvmsmall-5.3.18-150300.59.179.1 kernel-kvmsmall-devel-5.3.18-150300.59.179.1 kernel-kvmsmall-livepatch-devel-5.3.18-150300.59.179.1 kernel-livepatch-5_3_18-150300_59_179-default-1-150300.7.3.2 kernel-livepatch-5_3_18-150300_59_179-preempt-1-150300.7.3.2 kernel-macros-5.3.18-150300.59.179.1 kernel-obs-build-5.3.18-150300.59.179.1 kernel-obs-qa-5.3.18-150300.59.179.1 kernel-preempt-5.3.18-150300.59.179.1 kernel-preempt-devel-5.3.18-150300.59.179.1 kernel-preempt-extra-5.3.18-150300.59.179.1 kernel-preempt-livepatch-devel-5.3.18-150300.59.179.1 kernel-preempt-optional-5.3.18-150300.59.179.1 kernel-source-5.3.18-150300.59.179.1 kernel-source-vanilla-5.3.18-150300.59.179.1 kernel-syms-5.3.18-150300.59.179.1 kernel-zfcpdump-5.3.18-150300.59.179.1 kselftests-kmp-64kb-5.3.18-150300.59.179.1 kselftests-kmp-default-5.3.18-150300.59.179.1 kselftests-kmp-preempt-5.3.18-150300.59.179.1 ocfs2-kmp-64kb-5.3.18-150300.59.179.1 ocfs2-kmp-preempt-5.3.18-150300.59.179.1 reiserfs-kmp-64kb-5.3.18-150300.59.179.1 reiserfs-kmp-default-5.3.18-150300.59.179.1 reiserfs-kmp-preempt-5.3.18-150300.59.179.1 kernel-default-5.3.18-150300.59.179.1 as a component of Container suse/sle-micro-rancher/5.2:latest kernel-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-BYOS-Azure kernel-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-BYOS-EC2-HVM kernel-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-BYOS-GCE kernel-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-HPC-BYOS-Azure kernel-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-HPC-BYOS-EC2-HVM kernel-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-HPC-BYOS-GCE kernel-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-Azure kernel-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM kernel-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-Micro-5-1-BYOS-GCE kernel-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-Azure kernel-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM kernel-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-Micro-5-2-BYOS-GCE cluster-md-kmp-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production dlm-kmp-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production gfs2-kmp-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production kernel-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production ocfs2-kmp-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-Azure-LI-BYOS-Production cluster-md-kmp-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production dlm-kmp-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production gfs2-kmp-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production kernel-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production ocfs2-kmp-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production cluster-md-kmp-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure dlm-kmp-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure gfs2-kmp-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure kernel-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure ocfs2-kmp-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-BYOS-Azure cluster-md-kmp-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM dlm-kmp-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM gfs2-kmp-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM kernel-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM ocfs2-kmp-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-BYOS-EC2-HVM cluster-md-kmp-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE dlm-kmp-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE gfs2-kmp-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE kernel-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE ocfs2-kmp-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAP-BYOS-GCE kernel-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAPCAL-Azure kernel-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAPCAL-EC2-HVM kernel-default-5.3.18-150300.59.179.1 as a component of Image SLES15-SP3-SAPCAL-GCE kernel-64kb-5.3.18-150300.59.179.1 as a component of SUSE Enterprise Storage 7.1 kernel-64kb-devel-5.3.18-150300.59.179.1 as a component of SUSE Enterprise Storage 7.1 kernel-default-5.3.18-150300.59.179.1 as a component of SUSE Enterprise Storage 7.1 kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 as a component of SUSE Enterprise Storage 7.1 kernel-default-devel-5.3.18-150300.59.179.1 as a component of SUSE Enterprise Storage 7.1 kernel-devel-5.3.18-150300.59.179.1 as a component of SUSE Enterprise Storage 7.1 kernel-docs-5.3.18-150300.59.179.1 as a component of SUSE Enterprise Storage 7.1 kernel-macros-5.3.18-150300.59.179.1 as a component of SUSE Enterprise Storage 7.1 kernel-obs-build-5.3.18-150300.59.179.1 as a component of SUSE Enterprise Storage 7.1 kernel-preempt-5.3.18-150300.59.179.1 as a component of SUSE Enterprise Storage 7.1 kernel-preempt-devel-5.3.18-150300.59.179.1 as a component of SUSE Enterprise Storage 7.1 kernel-source-5.3.18-150300.59.179.1 as a component of SUSE Enterprise Storage 7.1 kernel-syms-5.3.18-150300.59.179.1 as a component of SUSE Enterprise Storage 7.1 reiserfs-kmp-default-5.3.18-150300.59.179.1 as a component of SUSE Enterprise Storage 7.1 cluster-md-kmp-default-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise High Availability Extension 15 SP3 dlm-kmp-default-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise High Availability Extension 15 SP3 gfs2-kmp-default-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise High Availability Extension 15 SP3 ocfs2-kmp-default-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise High Availability Extension 15 SP3 kernel-64kb-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-64kb-devel-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default-devel-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-devel-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-docs-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-macros-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-obs-build-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-preempt-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-preempt-devel-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-source-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-syms-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS reiserfs-kmp-default-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default-livepatch-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-default-livepatch-devel-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-livepatch-5_3_18-150300_59_179-default-1-150300.7.3.2 as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-default-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Micro 5.1 kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 as a component of SUSE Linux Enterprise Micro 5.1 kernel-default-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Micro 5.2 kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 as a component of SUSE Linux Enterprise Micro 5.2 kernel-64kb-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-64kb-devel-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-default-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-default-devel-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-devel-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-docs-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-macros-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-obs-build-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-preempt-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-preempt-devel-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-source-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-syms-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-zfcpdump-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS reiserfs-kmp-default-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-default-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-default-devel-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-devel-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-docs-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-macros-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-obs-build-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-preempt-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-preempt-devel-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-source-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-syms-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 reiserfs-kmp-default-5.3.18-150300.59.179.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 In the Linux kernel, the following vulnerability has been resolved: ipc/mqueue, msg, sem: avoid relying on a stack reference past its expiry do_mq_timedreceive calls wq_sleep with a stack local address. The sender (do_mq_timedsend) uses this address to later call pipelined_send. This leads to a very hard to trigger race where a do_mq_timedreceive call might return and leave do_mq_timedsend to rely on an invalid address, causing the following crash: RIP: 0010:wake_q_add_safe+0x13/0x60 Call Trace: __x64_sys_mq_timedsend+0x2a9/0x490 do_syscall_64+0x80/0x680 entry_SYSCALL_64_after_hwframe+0x44/0xa9 RIP: 0033:0x7f5928e40343 The race occurs as: 1. do_mq_timedreceive calls wq_sleep with the address of `struct ext_wait_queue` on function stack (aliased as `ewq_addr` here) - it holds a valid `struct ext_wait_queue *` as long as the stack has not been overwritten. 2. `ewq_addr` gets added to info->e_wait_q[RECV].list in wq_add, and do_mq_timedsend receives it via wq_get_first_waiter(info, RECV) to call __pipelined_op. 3. Sender calls __pipelined_op::smp_store_release(&this->state, STATE_READY). Here is where the race window begins. (`this` is `ewq_addr`.) 4. If the receiver wakes up now in do_mq_timedreceive::wq_sleep, it will see `state == STATE_READY` and break. 5. do_mq_timedreceive returns, and `ewq_addr` is no longer guaranteed to be a `struct ext_wait_queue *` since it was on do_mq_timedreceive's stack. (Although the address may not get overwritten until another function happens to touch it, which means it can persist around for an indefinite time.) 6. do_mq_timedsend::__pipelined_op() still believes `ewq_addr` is a `struct ext_wait_queue *`, and uses it to find a task_struct to pass to the wake_q_add_safe call. In the lucky case where nothing has overwritten `ewq_addr` yet, `ewq_addr->task` is the right task_struct. In the unlucky case, __pipelined_op::wake_q_add_safe gets handed a bogus address as the receiver's task_struct causing the crash. do_mq_timedsend::__pipelined_op() should not dereference `this` after setting STATE_READY, as the receiver counterpart is now free to return. Change __pipelined_op to call wake_q_add_safe on the receiver's task_struct returned by get_task_struct, instead of dereferencing `this` which sits on the receiver's stack. As Manfred pointed out, the race potentially also exists in ipc/msg.c::expunge_all and ipc/sem.c::wake_up_sem_queue_prepare. Fix those in the same way. CVE-2021-47069 Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-GCE:kernel-default-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-64kb-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-default-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Enterprise Storage 7.1:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-docs-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-macros-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-preempt-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-source-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-syms-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:cluster-md-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:dlm-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:gfs2-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:ocfs2-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-64kb-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_179-default-1-150300.7.3.2 SUSE Linux Enterprise Micro 5.1:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Micro 5.1:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Micro 5.2:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Micro 5.2:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-64kb-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-zfcpdump-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:reiserfs-kmp-default-5.3.18-150300.59.179.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243585-1/ https://www.suse.com/security/cve/CVE-2021-47069.html CVE-2021-47069 https://bugzilla.suse.com/1220826 SUSE Bug 1220826 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: fix possible use-after-free Eric Dumazet says: The sock_hold() side seems suspect, because there is no guarantee that sk_refcnt is not already 0. On failure, we cannot queue the packet and need to indicate an error. The packet will be dropped by the caller. v2: split skb prefetch hunk into separate change CVE-2022-48911 Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-GCE:kernel-default-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-64kb-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-default-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Enterprise Storage 7.1:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-docs-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-macros-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-preempt-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-source-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-syms-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:cluster-md-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:dlm-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:gfs2-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:ocfs2-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-64kb-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_179-default-1-150300.7.3.2 SUSE Linux Enterprise Micro 5.1:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Micro 5.1:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Micro 5.2:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Micro 5.2:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-64kb-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-zfcpdump-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:reiserfs-kmp-default-5.3.18-150300.59.179.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243585-1/ https://www.suse.com/security/cve/CVE-2022-48911.html CVE-2022-48911 https://bugzilla.suse.com/1229633 SUSE Bug 1229633 https://bugzilla.suse.com/1229640 SUSE Bug 1229640 In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix compose size exceed boundary syzkaller found a bug: BUG: unable to handle page fault for address: ffffc9000a3b1000 #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD 100000067 P4D 100000067 PUD 10015f067 PMD 1121ca067 PTE 0 Oops: 0002 [#1] PREEMPT SMP CPU: 0 PID: 23489 Comm: vivid-000-vid-c Not tainted 6.1.0-rc1+ #512 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014 RIP: 0010:memcpy_erms+0x6/0x10 [...] Call Trace: <TASK> ? tpg_fill_plane_buffer+0x856/0x15b0 vivid_fillbuff+0x8ac/0x1110 vivid_thread_vid_cap_tick+0x361/0xc90 vivid_thread_vid_cap+0x21a/0x3a0 kthread+0x143/0x180 ret_from_fork+0x1f/0x30 </TASK> This is because we forget to check boundary after adjust compose->height int V4L2_SEL_TGT_CROP case. Add v4l2_rect_map_inside() to fix this problem for this case. CVE-2022-48945 Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-GCE:kernel-default-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-64kb-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-default-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Enterprise Storage 7.1:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-docs-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-macros-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-preempt-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-source-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-syms-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:cluster-md-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:dlm-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:gfs2-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:ocfs2-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-64kb-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_179-default-1-150300.7.3.2 SUSE Linux Enterprise Micro 5.1:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Micro 5.1:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Micro 5.2:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Micro 5.2:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-64kb-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-zfcpdump-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:reiserfs-kmp-default-5.3.18-150300.59.179.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243585-1/ https://www.suse.com/security/cve/CVE-2022-48945.html CVE-2022-48945 https://bugzilla.suse.com/1230398 SUSE Bug 1230398 https://bugzilla.suse.com/1235889 SUSE Bug 1235889 In the Linux kernel, the following vulnerability has been resolved: net: fix __dst_negative_advice() race __dst_negative_advice() does not enforce proper RCU rules when sk->dst_cache must be cleared, leading to possible UAF. RCU rules are that we must first clear sk->sk_dst_cache, then call dst_release(old_dst). Note that sk_dst_reset(sk) is implementing this protocol correctly, while __dst_negative_advice() uses the wrong order. Given that ip6_negative_advice() has special logic against RTF_CACHE, this means each of the three ->negative_advice() existing methods must perform the sk_dst_reset() themselves. Note the check against NULL dst is centralized in __dst_negative_advice(), there is no need to duplicate it in various callbacks. Many thanks to Clement Lecigne for tracking this issue. This old bug became visible after the blamed commit, using UDP sockets. CVE-2024-36971 Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-GCE:kernel-default-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-64kb-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-default-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Enterprise Storage 7.1:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-docs-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-macros-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-preempt-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-source-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-syms-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:cluster-md-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:dlm-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:gfs2-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:ocfs2-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-64kb-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_179-default-1-150300.7.3.2 SUSE Linux Enterprise Micro 5.1:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Micro 5.1:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Micro 5.2:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Micro 5.2:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-64kb-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-zfcpdump-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:reiserfs-kmp-default-5.3.18-150300.59.179.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243585-1/ https://www.suse.com/security/cve/CVE-2024-36971.html CVE-2024-36971 https://bugzilla.suse.com/1226145 SUSE Bug 1226145 https://bugzilla.suse.com/1226324 SUSE Bug 1226324 In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix double free on error If e.g. the ata_port_alloc() call in ata_host_alloc() fails, we will jump to the err_out label, which will call devres_release_group(). devres_release_group() will trigger a call to ata_host_release(). ata_host_release() calls kfree(host), so executing the kfree(host) in ata_host_alloc() will lead to a double free: kernel BUG at mm/slub.c:553! Oops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 11 PID: 599 Comm: (udev-worker) Not tainted 6.10.0-rc5 #47 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014 RIP: 0010:kfree+0x2cf/0x2f0 Code: 5d 41 5e 41 5f 5d e9 80 d6 ff ff 4d 89 f1 41 b8 01 00 00 00 48 89 d9 48 89 da RSP: 0018:ffffc90000f377f0 EFLAGS: 00010246 RAX: ffff888112b1f2c0 RBX: ffff888112b1f2c0 RCX: ffff888112b1f320 RDX: 000000000000400b RSI: ffffffffc02c9de5 RDI: ffff888112b1f2c0 RBP: ffffc90000f37830 R08: 0000000000000000 R09: 0000000000000000 R10: ffffc90000f37610 R11: 617461203a736b6e R12: ffffea00044ac780 R13: ffff888100046400 R14: ffffffffc02c9de5 R15: 0000000000000006 FS: 00007f2f1cabe980(0000) GS:ffff88813b380000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f2f1c3acf75 CR3: 0000000111724000 CR4: 0000000000750ef0 PKRU: 55555554 Call Trace: <TASK> ? __die_body.cold+0x19/0x27 ? die+0x2e/0x50 ? do_trap+0xca/0x110 ? do_error_trap+0x6a/0x90 ? kfree+0x2cf/0x2f0 ? exc_invalid_op+0x50/0x70 ? kfree+0x2cf/0x2f0 ? asm_exc_invalid_op+0x1a/0x20 ? ata_host_alloc+0xf5/0x120 [libata] ? ata_host_alloc+0xf5/0x120 [libata] ? kfree+0x2cf/0x2f0 ata_host_alloc+0xf5/0x120 [libata] ata_host_alloc_pinfo+0x14/0xa0 [libata] ahci_init_one+0x6c9/0xd20 [ahci] Ensure that we will not call kfree(host) twice, by performing the kfree() only if the devres_open_group() call failed. CVE-2024-41087 Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-GCE:kernel-default-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-64kb-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-default-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Enterprise Storage 7.1:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-docs-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-macros-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-preempt-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-source-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-syms-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:cluster-md-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:dlm-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:gfs2-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:ocfs2-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-64kb-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_179-default-1-150300.7.3.2 SUSE Linux Enterprise Micro 5.1:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Micro 5.1:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Micro 5.2:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Micro 5.2:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-64kb-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-zfcpdump-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:reiserfs-kmp-default-5.3.18-150300.59.179.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243585-1/ https://www.suse.com/security/cve/CVE-2024-41087.html CVE-2024-41087 https://bugzilla.suse.com/1228466 SUSE Bug 1228466 https://bugzilla.suse.com/1228740 SUSE Bug 1228740 In the Linux kernel, the following vulnerability has been resolved: kcm: Serialise kcm_sendmsg() for the same socket. syzkaller reported UAF in kcm_release(). [0] The scenario is 1. Thread A builds a skb with MSG_MORE and sets kcm->seq_skb. 2. Thread A resumes building skb from kcm->seq_skb but is blocked by sk_stream_wait_memory() 3. Thread B calls sendmsg() concurrently, finishes building kcm->seq_skb and puts the skb to the write queue 4. Thread A faces an error and finally frees skb that is already in the write queue 5. kcm_release() does double-free the skb in the write queue When a thread is building a MSG_MORE skb, another thread must not touch it. Let's add a per-sk mutex and serialise kcm_sendmsg(). [0]: BUG: KASAN: slab-use-after-free in __skb_unlink include/linux/skbuff.h:2366 [inline] BUG: KASAN: slab-use-after-free in __skb_dequeue include/linux/skbuff.h:2385 [inline] BUG: KASAN: slab-use-after-free in __skb_queue_purge_reason include/linux/skbuff.h:3175 [inline] BUG: KASAN: slab-use-after-free in __skb_queue_purge include/linux/skbuff.h:3181 [inline] BUG: KASAN: slab-use-after-free in kcm_release+0x170/0x4c8 net/kcm/kcmsock.c:1691 Read of size 8 at addr ffff0000ced0fc80 by task syz-executor329/6167 CPU: 1 PID: 6167 Comm: syz-executor329 Tainted: G B 6.8.0-rc5-syzkaller-g9abbc24128bc #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 Call trace: dump_backtrace+0x1b8/0x1e4 arch/arm64/kernel/stacktrace.c:291 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:298 __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd0/0x124 lib/dump_stack.c:106 print_address_description mm/kasan/report.c:377 [inline] print_report+0x178/0x518 mm/kasan/report.c:488 kasan_report+0xd8/0x138 mm/kasan/report.c:601 __asan_report_load8_noabort+0x20/0x2c mm/kasan/report_generic.c:381 __skb_unlink include/linux/skbuff.h:2366 [inline] __skb_dequeue include/linux/skbuff.h:2385 [inline] __skb_queue_purge_reason include/linux/skbuff.h:3175 [inline] __skb_queue_purge include/linux/skbuff.h:3181 [inline] kcm_release+0x170/0x4c8 net/kcm/kcmsock.c:1691 __sock_release net/socket.c:659 [inline] sock_close+0xa4/0x1e8 net/socket.c:1421 __fput+0x30c/0x738 fs/file_table.c:376 ____fput+0x20/0x30 fs/file_table.c:404 task_work_run+0x230/0x2e0 kernel/task_work.c:180 exit_task_work include/linux/task_work.h:38 [inline] do_exit+0x618/0x1f64 kernel/exit.c:871 do_group_exit+0x194/0x22c kernel/exit.c:1020 get_signal+0x1500/0x15ec kernel/signal.c:2893 do_signal+0x23c/0x3b44 arch/arm64/kernel/signal.c:1249 do_notify_resume+0x74/0x1f4 arch/arm64/kernel/entry-common.c:148 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:169 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:178 [inline] el0_svc+0xac/0x168 arch/arm64/kernel/entry-common.c:713 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598 Allocated by task 6166: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x40/0x78 mm/kasan/common.c:68 kasan_save_alloc_info+0x70/0x84 mm/kasan/generic.c:626 unpoison_slab_object mm/kasan/common.c:314 [inline] __kasan_slab_alloc+0x74/0x8c mm/kasan/common.c:340 kasan_slab_alloc include/linux/kasan.h:201 [inline] slab_post_alloc_hook mm/slub.c:3813 [inline] slab_alloc_node mm/slub.c:3860 [inline] kmem_cache_alloc_node+0x204/0x4c0 mm/slub.c:3903 __alloc_skb+0x19c/0x3d8 net/core/skbuff.c:641 alloc_skb include/linux/skbuff.h:1296 [inline] kcm_sendmsg+0x1d3c/0x2124 net/kcm/kcmsock.c:783 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] sock_sendmsg+0x220/0x2c0 net/socket.c:768 splice_to_socket+0x7cc/0xd58 fs/splice.c:889 do_splice_from fs/splice.c:941 [inline] direct_splice_actor+0xec/0x1d8 fs/splice.c:1164 splice_direct_to_actor+0x438/0xa0c fs/splice.c:1108 do_splice_direct_actor ---truncated--- CVE-2024-44946 Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-GCE:kernel-default-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-64kb-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-default-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Enterprise Storage 7.1:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-docs-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-macros-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-preempt-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-source-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-syms-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:cluster-md-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:dlm-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:gfs2-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:ocfs2-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-64kb-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_179-default-1-150300.7.3.2 SUSE Linux Enterprise Micro 5.1:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Micro 5.1:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Micro 5.2:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Micro 5.2:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-64kb-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-zfcpdump-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:reiserfs-kmp-default-5.3.18-150300.59.179.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243585-1/ https://www.suse.com/security/cve/CVE-2024-44946.html CVE-2024-44946 https://bugzilla.suse.com/1230015 SUSE Bug 1230015 https://bugzilla.suse.com/1230016 SUSE Bug 1230016 In the Linux kernel, the following vulnerability has been resolved: vfs: Don't evict inode under the inode lru traversing context The inode reclaiming process(See function prune_icache_sb) collects all reclaimable inodes and mark them with I_FREEING flag at first, at that time, other processes will be stuck if they try getting these inodes (See function find_inode_fast), then the reclaiming process destroy the inodes by function dispose_list(). Some filesystems(eg. ext4 with ea_inode feature, ubifs with xattr) may do inode lookup in the inode evicting callback function, if the inode lookup is operated under the inode lru traversing context, deadlock problems may happen. Case 1: In function ext4_evict_inode(), the ea inode lookup could happen if ea_inode feature is enabled, the lookup process will be stuck under the evicting context like this: 1. File A has inode i_reg and an ea inode i_ea 2. getfattr(A, xattr_buf) // i_ea is added into lru // lru->i_ea 3. Then, following three processes running like this: PA PB echo 2 > /proc/sys/vm/drop_caches shrink_slab prune_dcache_sb // i_reg is added into lru, lru->i_ea->i_reg prune_icache_sb list_lru_walk_one inode_lru_isolate i_ea->i_state |= I_FREEING // set inode state inode_lru_isolate __iget(i_reg) spin_unlock(&i_reg->i_lock) spin_unlock(lru_lock) rm file A i_reg->nlink = 0 iput(i_reg) // i_reg->nlink is 0, do evict ext4_evict_inode ext4_xattr_delete_inode ext4_xattr_inode_dec_ref_all ext4_xattr_inode_iget ext4_iget(i_ea->i_ino) iget_locked find_inode_fast __wait_on_freeing_inode(i_ea) ----→ AA deadlock dispose_list // cannot be executed by prune_icache_sb wake_up_bit(&i_ea->i_state) Case 2: In deleted inode writing function ubifs_jnl_write_inode(), file deleting process holds BASEHD's wbuf->io_mutex while getting the xattr inode, which could race with inode reclaiming process(The reclaiming process could try locking BASEHD's wbuf->io_mutex in inode evicting function), then an ABBA deadlock problem would happen as following: 1. File A has inode ia and a xattr(with inode ixa), regular file B has inode ib and a xattr. 2. getfattr(A, xattr_buf) // ixa is added into lru // lru->ixa 3. Then, following three processes running like this: PA PB PC echo 2 > /proc/sys/vm/drop_caches shrink_slab prune_dcache_sb // ib and ia are added into lru, lru->ixa->ib->ia prune_icache_sb list_lru_walk_one inode_lru_isolate ixa->i_state |= I_FREEING // set inode state inode_lru_isolate __iget(ib) spin_unlock(&ib->i_lock) spin_unlock(lru_lock) rm file B ib->nlink = 0 rm file A iput(ia) ubifs_evict_inode(ia) ubifs_jnl_delete_inode(ia) ubifs_jnl_write_inode(ia) make_reservation(BASEHD) // Lock wbuf->io_mutex ubifs_iget(ixa->i_ino) iget_locked find_inode_fast __wait_on_freeing_inode(ixa) | iput(ib) // ib->nlink is 0, do evict | ubifs_evict_inode | ubifs_jnl_delete_inode(ib) ↓ ubifs_jnl_write_inode ABBA deadlock ←-----make_reservation(BASEHD) dispose_list // cannot be executed by prune_icache_sb wake_up_bit(&ixa->i_state) Fix the possible deadlock by using new inode state flag I_LRU_ISOLATING to pin the inode in memory while inode_lru_isolate( ---truncated--- CVE-2024-45003 Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-GCE:kernel-default-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-64kb-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-default-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Enterprise Storage 7.1:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-docs-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-macros-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-preempt-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-source-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-syms-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:cluster-md-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:dlm-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:gfs2-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:ocfs2-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-64kb-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_179-default-1-150300.7.3.2 SUSE Linux Enterprise Micro 5.1:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Micro 5.1:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Micro 5.2:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Micro 5.2:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-64kb-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-zfcpdump-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:reiserfs-kmp-default-5.3.18-150300.59.179.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243585-1/ https://www.suse.com/security/cve/CVE-2024-45003.html CVE-2024-45003 https://bugzilla.suse.com/1230245 SUSE Bug 1230245 In the Linux kernel, the following vulnerability has been resolved: memcg_write_event_control(): fix a user-triggerable oops we are *not* guaranteed that anything past the terminating NUL is mapped (let alone initialized with anything sane). CVE-2024-45021 Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-GCE:kernel-default-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-64kb-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-default-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Enterprise Storage 7.1:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-docs-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-macros-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-preempt-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-source-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-syms-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:cluster-md-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:dlm-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:gfs2-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:ocfs2-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-64kb-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_179-default-1-150300.7.3.2 SUSE Linux Enterprise Micro 5.1:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Micro 5.1:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Micro 5.2:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Micro 5.2:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-64kb-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-zfcpdump-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:reiserfs-kmp-default-5.3.18-150300.59.179.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243585-1/ https://www.suse.com/security/cve/CVE-2024-45021.html CVE-2024-45021 https://bugzilla.suse.com/1230434 SUSE Bug 1230434 In the Linux kernel, the following vulnerability has been resolved: selinux,smack: don't bypass permissions check in inode_setsecctx hook Marek Gresko reports that the root user on an NFS client is able to change the security labels on files on an NFS filesystem that is exported with root squashing enabled. The end of the kerneldoc comment for __vfs_setxattr_noperm() states: * This function requires the caller to lock the inode's i_mutex before it * is executed. It also assumes that the caller will make the appropriate * permission checks. nfsd_setattr() does do permissions checking via fh_verify() and nfsd_permission(), but those don't do all the same permissions checks that are done by security_inode_setxattr() and its related LSM hooks do. Since nfsd_setattr() is the only consumer of security_inode_setsecctx(), simplest solution appears to be to replace the call to __vfs_setxattr_noperm() with a call to __vfs_setxattr_locked(). This fixes the above issue and has the added benefit of causing nfsd to recall conflicting delegations on a file when a client tries to change its security label. CVE-2024-46695 Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-GCE:kernel-default-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-64kb-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-default-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Enterprise Storage 7.1:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-docs-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-macros-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-preempt-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-source-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-syms-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:cluster-md-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:dlm-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:gfs2-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:ocfs2-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-64kb-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_179-default-1-150300.7.3.2 SUSE Linux Enterprise Micro 5.1:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Micro 5.1:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Micro 5.2:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Micro 5.2:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-64kb-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-zfcpdump-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:reiserfs-kmp-default-5.3.18-150300.59.179.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243585-1/ https://www.suse.com/security/cve/CVE-2024-46695.html CVE-2024-46695 https://bugzilla.suse.com/1230519 SUSE Bug 1230519 In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() Smatch warns: arch/powerpc/kernel/rtas.c:1932 __do_sys_rtas() warn: potential spectre issue 'args.args' [r] (local cap) The 'nargs' and 'nret' locals come directly from a user-supplied buffer and are used as indexes into a small stack-based array and as inputs to copy_to_user() after they are subject to bounds checks. Use array_index_nospec() after the bounds checks to clamp these values for speculative execution. CVE-2024-46774 Container suse/sle-micro-rancher/5.2:latest:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-HPC-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-1-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-Micro-5-2-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-Azure:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-EC2-HVM:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:cluster-md-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:dlm-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:gfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAP-BYOS-GCE:ocfs2-kmp-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-Azure:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-EC2-HVM:kernel-default-5.3.18-150300.59.179.1 Image SLES15-SP3-SAPCAL-GCE:kernel-default-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-64kb-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-default-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Enterprise Storage 7.1:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-docs-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-macros-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-preempt-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-source-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:kernel-syms-5.3.18-150300.59.179.1 SUSE Enterprise Storage 7.1:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:cluster-md-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:dlm-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:gfs2-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Availability Extension 15 SP3:ocfs2-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-64kb-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Live Patching 15 SP3:kernel-livepatch-5_3_18-150300_59_179-default-1-150300.7.3.2 SUSE Linux Enterprise Micro 5.1:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Micro 5.1:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Micro 5.2:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Micro 5.2:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-64kb-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-64kb-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-zfcpdump-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server 15 SP3-LTSS:reiserfs-kmp-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-base-5.3.18-150300.59.179.1.150300.18.105.2 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-docs-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-macros-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-obs-build-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-preempt-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-preempt-devel-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-source-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-syms-5.3.18-150300.59.179.1 SUSE Linux Enterprise Server for SAP Applications 15 SP3:reiserfs-kmp-default-5.3.18-150300.59.179.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243585-1/ https://www.suse.com/security/cve/CVE-2024-46774.html CVE-2024-46774 https://bugzilla.suse.com/1230767 SUSE Bug 1230767