Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2024:3592-1 Final 1 1 2024-10-10T16:03:49Z current 2024-10-10T16:03:49Z 2024-10-10T16:03:49Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2022-48901: btrfs: do not start relocation until in progress drops are done (bsc#1229607). - CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633). - CVE-2022-48923: btrfs: prevent copying too big compressed lzo segment (bsc#1229662) - CVE-2022-48935: Fixed an unregister flowtable hooks on netns exit (bsc#1229619) - CVE-2023-52610: net/sched: act_ct: fix skb leak and crash on ooo frags (bsc#1221610). - CVE-2023-52916: media: aspeed: Fix memory overwrite if timing is 1600x900 (bsc#1230269). - CVE-2024-26640: tcp: add sanity checks to rx zerocopy (bsc#1221650). - CVE-2024-26759: mm/swap: fix race when skipping swapcache (bsc#1230340). - CVE-2024-26767: drm/amd/display: fixed integer types and null check locations (bsc#1230339). - CVE-2024-26804: net: ip_tunnel: prevent perpetual headroom growth (bsc#1222629). - CVE-2024-26837: net: bridge: switchdev: race between creation of new group memberships and generation of the list of MDB events to replay (bsc#1222973). - CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875). - CVE-2024-38538: net: bridge: xmit: make sure we have at least eth header len bytes (bsc#1226606). - CVE-2024-38596: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg (bsc#1226846). - CVE-2024-40910: Fix refcount imbalance on inbound connections (bsc#1227832). - CVE-2024-40973: media: mtk-vcodec: potential null pointer deference in SCP (bsc#1227890). - CVE-2024-40983: tipc: force a dst refcount before doing decryption (bsc#1227819). - CVE-2024-41062: Sync sock recv cb and release (bsc#1228576). - CVE-2024-41082: nvme-fabrics: use reserved tag for reg read/write command (bsc#1228620 CVE-2024-41082). - CVE-2024-42154: tcp_metrics: validate source addr length (bsc#1228507). - CVE-2024-42259: Fix Virtual Memory mapping boundaries calculation (bsc#1229156) - CVE-2024-42265: protect the fetch of ->fd[fd] in do_dup2() from mispredictions (bsc#1229334). - CVE-2024-42304: ext4: make sure the first directory block is not a hole (bsc#1229364). - CVE-2024-42305: ext4: check dot and dotdot of dx_root before making dir indexed (bsc#1229363). - CVE-2024-42306: udf: Avoid using corrupted block bitmap buffer (bsc#1229362). - CVE-2024-43828: ext4: fix infinite loop when replaying fast_commit (bsc#1229394). - CVE-2024-43890: tracing: Fix overflow in get_free_elt() (bsc#1229764). - CVE-2024-43898: ext4: sanity check for NULL pointer after ext4_force_shutdown (bsc#1229753). - CVE-2024-43912: wifi: nl80211: disallow setting special AP channel widths (bsc#1229830) - CVE-2024-43914: md/raid5: avoid BUG_ON() while continue reshape after reassembling (bsc#1229790). - CVE-2024-44935: sctp: Fix null-ptr-deref in reuseport_add_sock() (bsc#1229810). - CVE-2024-44944: netfilter: ctnetlink: use helper function to calculate expect ID (bsc#1229899). - CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015). - CVE-2024-44950: serial: sc16is7xx: fix invalid FIFO access with special register set (bsc#1230180). - CVE-2024-44952: driver core: Fix uevent_show() vs driver detach race (bsc#1230178). - CVE-2024-44954: ALSA: line6: Fix racy access to midibuf (bsc#1230176). - CVE-2024-44970: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink (bsc#1230209). - CVE-2024-44971: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() (bsc#1230211). - CVE-2024-44986: ipv6: fix possible UAF in ip6_finish_output2() (bsc#1230230) - CVE-2024-44987: ipv6: prevent UAF in ip6_send_skb() (bsc#1230185). - CVE-2024-44988: net: dsa: mv88e6xxx: Fix out-of-bound access (bsc#1230192). - CVE-2024-44989: bonding: fix xfrm real_dev null pointer dereference (bsc#1230193). - CVE-2024-44990: bonding: fix null pointer deref in bond_ipsec_offload_ok (bsc#1230194). - CVE-2024-44998: atm: idt77252: prevent use after free in dequeue_rx() (bsc#1230171). - CVE-2024-44999: gtp: pull network headers in gtp_dev_xmit() (bsc#1230233). - CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245). - CVE-2024-45007: char: xillybus: Refine workqueue handling (bsc#1230175). - CVE-2024-45008: Input: MT - limit max slots (bsc#1230248). - CVE-2024-45013: nvme: move stopping keep-alive into nvme_uninit_ctrl() (bsc#1230442). - CVE-2024-45015: drm/msm/dpu: move dpu_encoder's connector assignment to (bsc#1230444) - CVE-2024-45018: netfilter: flowtable: initialise extack before use (bsc#1230431). - CVE-2024-45021: memcg_write_event_control(): fix a user-triggerable oops (bsc#1230434). - CVE-2024-45029: i2c: tegra: Do not mark ACPI devices as irq safe (bsc#1230451). - CVE-2024-46673: scsi: aacraid: Fix double-free on probe failure (bsc#1230506). - CVE-2024-46674: usb: dwc3: st: fix probed platform device ref count on probe error path (bsc#1230507). - CVE-2024-46677: gtp: fix a potential NULL pointer dereference (bsc#1230549). - CVE-2024-46679: ethtool: check device is present when getting link settings (bsc#1230556). - CVE-2024-46685: pinctrl: single: fix potential NULL dereference in pcs_get_function() (bsc#1230515) - CVE-2024-46686: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() (bsc#1230517). - CVE-2024-46689: soc: qcom: cmd-db: Map shared memory as WC, not WB (bsc#1230524) - CVE-2024-46702: thunderbolt: Mark XDomain as unplugged when router is removed (bsc#1230589) - CVE-2024-46707: KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 (bsc#1230582). - CVE-2024-46715: driver: iio: add missing checks on iio_info's callback access (bsc#1230700). - CVE-2024-46717: net/mlx5e: SHAMPO, Fix incorrect page release (bsc#1230719). - CVE-2024-46721: pparmor: fix possible NULL pointer dereference (bsc#1230710) - CVE-2024-46728: drm/amd/display: Check index for aux_rd_interval before using (bsc#1230703) - CVE-2024-46730: drm/amd/display: Ensure array index tg_inst won't be -1 (bsc#1230701) - CVE-2024-46743: of/irq: Prevent device address out-of-bounds read in interrupt map walk (bsc#1230756). - CVE-2024-46750: PCI: Add missing bridge lock to pci_bus_lock() (bsc#1230783). - CVE-2024-46751: btrfs: do not BUG_ON() when 0 reference count at btrfs_lookup_extent_info() (bsc#1230786). - CVE-2024-46752: btrfs: reduce nesting for extent processing at btrfs_lookup_extent_info() (bsc#1230794). - CVE-2024-46753: btrfs: handle errors from btrfs_dec_ref() properly (bsc#1230796). - CVE-2024-46772: drm/amd/display: Check denominator crb_pipes before used (bsc#1230772). - CVE-2024-46783: tcp_bpf: fix return value of tcp_bpf_sendmsg() (bsc#1230810). - CVE-2024-46787: userfaultfd: fix checks for huge PMDs (bsc#1230815). - CVE-2024-46794: x86/tdx: Fix data leak in mmio_read() (bsc#1230825). - CVE-2024-46822: arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry (bsc#1231120). - CVE-2024-46830: KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS (bsc#1231116). The following non-security bugs were fixed: - ACPI: battery: create alarm sysfs attribute atomically (git-fixes). - ACPI: CPPC: Fix MASK_VAL() usage (git-fixes). - ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe() (git-fixes). - ACPI: processor: Fix memory leaks in error paths of processor_add() (stable-fixes). - ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add() (stable-fixes). - ACPI: SBS: manage alarm sysfs attribute through psy core (git-fixes). - ACPI: sysfs: validate return type of _STR method (git-fixes). - af_unix: annotate lockless accesses to sk->sk_err (bsc#1226846). - af_unix: Fix data races around sk->sk_shutdown (bsc#1226846). - af_unix: Fix data-races around sk->sk_shutdown (git-fixes). - ALSA: hda: Add input value sanity checks to HDMI channel map controls (stable-fixes). - ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices (stable-fixes). - ALSA: hda/conexant: Mute speakers at suspend / shutdown (stable-fixes). - ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown (stable-fixes). - ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx (stable-fixes). - apparmor: fix possible NULL pointer dereference (stable-fixes). - arm64: acpi: Move get_cpu_for_acpi_id() to a header (git-fixes). - arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity (git-fixes). - arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E (git-fixes). - arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency (git-fixes). - arm64/mm: Modify range-based tlbi to decrement scale (bsc#1229585) - arm64/mm: Update tlb invalidation routines for FEAT_LPA2 (bsc#1229585) - arm64: tlb: Allow range operation for MAX_TLBI_RANGE_PAGES (bsc#1229585) - arm64: tlb: Fix TLBI RANGE operand (bsc#1229585) - arm64: tlb: Improve __TLBI_VADDR_RANGE() (bsc#1229585) - ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object (git-fixes). - ASoC: meson: axg-card: fix 'use-after-free' (git-fixes). - ASoc: SOF: topology: Clear SOF link platform name upon unload (git-fixes). - ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode (git-fixes). - ASoC: tegra: Fix CBB error during probe() (git-fixes). - ASoC: topology: Properly initialize soc_enum values (stable-fixes). - ata: libata: Fix memory leak for error path in ata_host_alloc() (git-fixes). - ata: pata_macio: Use WARN instead of BUG (stable-fixes). - blk-mq: add helper for checking if one CPU is mapped to specified hctx (bsc#1223600). - blk-mq: add number of queue calc helper (bsc#1229034). - blk-mq: Build default queue map via group_cpus_evenly() (bsc#1229031). - blk-mq: do not schedule block kworker on isolated CPUs (bsc#1223600). - blk-mq: introduce blk_mq_dev_map_queues (bsc#1229034). - blk-mq: issue warning when offlining hctx with online isolcpus (bsc#1229034). - blk-mq: use hk cpus only when isolcpus=io_queue is enabled (bsc#1229034). - Bluetooth: btusb: Fix not handling ZPL/short-transfer (git-fixes). - Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED (git-fixes). - Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL (git-fixes). - Bluetooth: L2CAP: Fix deadlock (git-fixes). - Bluetooth: MGMT: Ignore keys being loaded with invalid type (git-fixes). - cachefiles: fix dentry leak in cachefiles_open_file() (bsc#1231181). - cachefiles: Fix non-taking of sb_writers around set/removexattr (bsc#1231013). - can: bcm: Clear bo->bcm_proc_read after remove_proc_entry() (git-fixes). - can: bcm: Remove proc entry when dev is unregistered (git-fixes). - can: j1939: use correct function name in comment (git-fixes). - can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open (git-fixes). - cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller (git-fixes). - ceph: remove the incorrect Fw reference check when dirtying pages (bsc#1231180). - char: xillybus: Check USB endpoints when probing device (git-fixes). - clk: qcom: clk-alpha-pll: Fix the pll post div mask (git-fixes). - clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API (git-fixes). - clk: qcom: clk-alpha-pll: Fix zonda set_rate failure when PLL is disabled (git-fixes). - cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately (git-fixes). - crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure (git-fixes). - crypto: virtio - Handle dataq logic with tasklet (git-fixes). - crypto: virtio - Wait for tasklet to complete on device remove (git-fixes). - crypto: xor - fix template benchmarking (git-fixes). - devres: Initialize an uninitialized struct member (stable-fixes). - driver core: Add debug logs when fwnode links are added/deleted (git-fixes). - driver core: Add missing parameter description to __fwnode_link_add() (git-fixes). - driver core: Create __fwnode_link_del() helper function (git-fixes). - driver core: fw_devlink: Allow marking a fwnode link as being part of a cycle (git-fixes). - driver core: fw_devlink: Consolidate device link flag computation (git-fixes). - driver core: Set deferred probe reason when deferred by driver core (git-fixes). - drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind() (git-fixes). - Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic (git-fixes). - Drivers: hv: vmbus: Fix the misplaced function description (git-fixes). - drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error (git-fixes). - drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error (git-fixes). - drm/amd/amdgpu: Check tbo resource pointer (stable-fixes). - drm/amd/amdgpu: Properly tune the size of struct (git-fixes). - drm/amd/display: Add array index check for hdcp ddc access (stable-fixes). - drm/amd/display: added NULL check at start of dc_validate_stream (stable-fixes). - drm/amd/display: Assign linear_pitch_alignment even for VM (stable-fixes). - drm/amd/display: Check denominator pbn_div before used (stable-fixes). - drm/amd/display: Check gpio_id before used as array index (stable-fixes). - drm/amd/display: Check HDCP returned status (stable-fixes). - drm/amd/display: Check msg_id before processing transcation (stable-fixes). - drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[] (stable-fixes). - drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX (stable-fixes). - drm/amd/display: Ensure index calculation will not overflow (stable-fixes). - drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create (stable-fixes). - drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration (stable-fixes). - drm/amd/display: Skip wbscl_set_scaler_filter if filter is null (stable-fixes). - drm/amd/display: Spinlock before reading event (stable-fixes). - drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6 (stable-fixes). - drm/amdgpu/atomfirmware: Silence UBSAN warning (stable-fixes). - drm/amdgpu: avoid reading vf2pf info size from FB (stable-fixes). - drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6 (stable-fixes). - drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts (stable-fixes). - drm/amdgpu: fix a possible null pointer dereference (git-fixes). - drm/amdgpu: fix dereference after null check (stable-fixes). - drm/amdgpu: fix mc_data out-of-bounds read warning (stable-fixes). - drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number (stable-fixes). - drm/amdgpu: Fix out-of-bounds write warning (stable-fixes). - drm/amdgpu: fix overflowed array index read warning (stable-fixes). - drm/amdgpu: Fix smatch static checker warning (stable-fixes). - drm/amdgpu: fix the waring dereferencing hive (stable-fixes). - drm/amdgpu: fix ucode out-of-bounds read warning (stable-fixes). - drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr (stable-fixes). - drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs (stable-fixes). - drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc (stable-fixes). - drm/amdgpu/pm: Fix uninitialized variable agc_btc_response (stable-fixes). - drm/amdgpu/pm: Fix uninitialized variable warning for smu10 (stable-fixes). - drm/amdgpu: Set no_hw_access when VF request full GPU fails (stable-fixes). - drm/amdgpu: the warning dereferencing obj for nbio_v7_4 (stable-fixes). - drm/amdgpu: update type of buf size to u32 for eeprom functions (stable-fixes). - drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device (stable-fixes). - drm/amd/pm: check negtive return for table entries (stable-fixes). - drm/amd/pm: check specific index for aldebaran (stable-fixes). - drm/amd/pm: Fix negative array index read (stable-fixes). - drm/amd/pm: fix the Out-of-bounds read warning (stable-fixes). - drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr (stable-fixes). - drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt (stable-fixes). - drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr (stable-fixes). - drm/amd/pm: fix uninitialized variable warning (stable-fixes). - drm/amd/pm: fix warning using uninitialized value of max_vid_step (stable-fixes). - drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid() (git-fixes). - drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ (stable-fixes). - drm/i915/fence: Mark debug_fence_free() with __maybe_unused (git-fixes). - drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused (git-fixes). - drm/i915/guc: prevent a possible int overflow in wq offsets (git-fixes). - drm/meson: plane: Add error handling (stable-fixes). - drm/msm/a5xx: disable preemption in submits by default (git-fixes). - drm/msm/a5xx: fix races in preemption evaluation stage (git-fixes). - drm/msm/a5xx: properly clear preemption records on resume (git-fixes). - drm/msm/a5xx: workaround early ring-buffer emptiness check (git-fixes). - drm/msm/adreno: Fix error return if missing firmware-name (stable-fixes). - drm/msm/disp/dpu: use atomic enable/disable callbacks for encoder (bsc#1230444) - drm/msm: Fix incorrect file name output in adreno_request_fw() (git-fixes). - drm/msm: fix %s null argument error (git-fixes). - drm: omapdrm: Add missing check for alloc_ordered_workqueue (git-fixes). - drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets (git-fixes). - drm/radeon: fix null pointer dereference in radeon_add_common_modes (git-fixes). - drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode (git-fixes). - drm/rockchip: vop: Allow 4096px width scaling (git-fixes). - drm/stm: ltdc: check memory returned by devm_kzalloc() (git-fixes). - exfat: fix memory leak in exfat_load_bitmap() (git-fixes). - fbdev: hpfb: Fix an error handling path in hpfb_dio_probe() (git-fixes). - filemap: remove use of wait bookmarks (bsc#1224085). - firmware_loader: Block path traversal (git-fixes). - fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF (bsc#1230592). - fuse: update stats for pages in dropped aux writeback list (bsc#1230130). - fuse: use unsigned type for getxattr/listxattr size truncation (bsc#1230129). - genirq/affinity: Do not pass irq_affinity_desc array to irq_build_affinity_masks (bsc#1229031). - genirq/affinity: Move group_cpus_evenly() into lib/ (bsc#1229031). - genirq/affinity: Only build SMP-only helper functions on SMP kernels (bsc#1229031). - genirq/affinity: Pass affinity managed mask array to irq_build_affinity_masks (bsc#1229031). - genirq/affinity: Remove the 'firstvec' parameter from irq_build_affinity_masks (bsc#1229031). - genirq/affinity: Rename irq_build_affinity_masks as group_cpus_evenly (bsc#1229031). - genirq/affinity: Replace cpumask_weight() with cpumask_empty() where appropriate (bsc#1229031). - gfs2: setattr_chown: Add missing initialization (git-fixes). - HID: amd_sfh: free driver_data after destroying hid device (stable-fixes). - HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup (stable-fixes). - hwmon: (adc128d818) Fix underflows seen when writing limit attributes (stable-fixes). - hwmon: (lm95234) Fix underflows seen when writing limit attributes (stable-fixes). - hwmon: (max16065) Fix overflows seen when writing limits (git-fixes). - hwmon: (ntc_thermistor) fix module autoloading (git-fixes). - hwmon: (w83627ehf) Fix underflows seen when writing limit attributes (stable-fixes). - hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init (git-fixes). - hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume (git-fixes). - hwrng: mtk - Use devm_pm_runtime_enable (git-fixes). - i2c: aspeed: Update the stop sw state when the bus recovery occurs (git-fixes). - i2c: Fix conditional for substituting empty ACPI functions (stable-fixes). - i2c: isch: Add missed 'else' (git-fixes). - i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq() (git-fixes). - i2c: Use IS_REACHABLE() for substituting empty ACPI functions (git-fixes). - i2c: xiic: Wait for TX empty to avoid missed TX NAKs (git-fixes). - i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup (stable-fixes). - IB/core: Fix ib_cache_setup_one error flow cleanup (git-fixes) - IB/hfi1: Fix potential deadlock on &irq_src_lock and &dd->uctxt_lock (git-fixes) - iio: adc: ad7124: fix chip ID mismatch (git-fixes). - iio: adc: ad7124: fix config comparison (git-fixes). - iio: adc: ad7606: fix oversampling gpio array (git-fixes). - iio: adc: ad7606: fix standby gpio state to match the documentation (git-fixes). - iio: buffer-dmaengine: fix releasing dma channel on error (git-fixes). - iio: chemical: bme680: Fix read/write ops to device by adding mutexes (git-fixes). - iio: fix scale application in iio_convert_raw_to_processed_unlocked (git-fixes). - iio: magnetometer: ak8975: Fix reading for ak099xx sensors (git-fixes). - Input: ilitek_ts_i2c - add report id message validation (git-fixes). - Input: ilitek_ts_i2c - avoid wrong input subsystem sync (git-fixes). - Input: ps2-gpio - use IRQF_NO_AUTOEN flag in request_irq() (git-fixes). - Input: uinput - reject requests with unreasonable number of slots (stable-fixes). - ipmi: docs: do not advertise deprecated sysfs entries (git-fixes). - ipmi:ssif: Improve detecting during probing (bsc#1228771) - ipmi:ssif: Improve detecting during probing (bsc#1228771) - jfs: fix out-of-bounds in dbNextAG() and diAlloc() (git-fixes). - kabi: add __nf_queue_get_refs() for kabi compliance. - kABI, crypto: virtio - Handle dataq logic with tasklet (git-fixes). - kthread: Fix task state in kthread worker if being frozen (bsc#1231146). - lib/group_cpus.c: avoid acquiring cpu hotplug lock in group_cpus_evenly (bsc#1229031). - lib/group_cpus.c: honor housekeeping config when grouping CPUs (bsc#1229034). - lib/group_cpus: Export group_cpus_evenly() (bsc#1229031). - lirc: rc_dev_get_from_fd(): fix file leak (git-fixes). - mailbox: bcm2835: Fix timeout during suspend mode (git-fixes). - mailbox: rockchip: fix a typo in module autoloading (git-fixes). - media: aspeed: Fix no complete irq for non-64-aligned width (bsc#1230269) - media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse (stable-fixes). - media: qcom: camss: Fix ordering of pm_runtime_enable (git-fixes). - media: Revert 'media: dvb-usb: Fix unexpected infinite loop in dvb_usb_read_remote_control()' (git-fixes). - media: sun4i_csi: Implement link validate for sun4i_csi subdev (git-fixes). - media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags (git-fixes). - media: uvcvideo: Enforce alignment of frame and interval (stable-fixes). - media: venus: fix use after free bug in venus_remove due to race condition (git-fixes). - media: vicodec: allow en/decoder cmd w/o CAPTURE (git-fixes). - media: vivid: do not set HDMI TX controls if there are no HDMI outputs (stable-fixes). - media: vivid: fix wrong sizeimage value for mplane (stable-fixes). - mmc: cqhci: Fix checking of CQHCI_HALT state (git-fixes). - mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K (git-fixes). - mmc: sdhci-of-aspeed: fix module autoloading (git-fixes). - mtd: powernv: Add check devm_kasprintf() returned value (git-fixes). - mtd: slram: insert break after errors in parsing the map (git-fixes). - net: drop bad gso csum_start and offset in virtio_net_hdr (git-fixes). - net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup (git-fixes). - net: missing check virtio (git-fixes). - net: tighten bad gso csum offset check in virtio_net_hdr (git-fixes). - nf_conntrack_proto_udp: do not accept packets with IPS_NAT_CLASH (bsc#1199769). - NFSD: Fix frame size warning in svc_export_parse() (git-fixes). - NFS: Do not re-read the entire page cache to find the next cookie (bsc#1226662). - NFSD: Rewrite synopsis of nfsd_percpu_counters_init() (git-fixes). - NFS: never reuse a NFSv4.0 lock-owner (bsc#1227726). - NFS: Reduce use of uncached readdir (bsc#1226662). - NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations (git-fixes). - nilfs2: Constify struct kobj_type (git-fixes). - nilfs2: determine empty node blocks as corrupted (git-fixes). - nilfs2: fix missing cleanup on rollforward recovery error (git-fixes). - nilfs2: fix potential null-ptr-deref in nilfs_btree_insert() (git-fixes). - nilfs2: fix potential oob read in nilfs_btree_check_delete() (git-fixes). - nilfs2: fix state management in error path of log writing function (git-fixes). - nilfs2: protect references to superblock parameters exposed in sysfs (git-fixes). - nilfs2: replace snprintf in show functions with sysfs_emit (git-fixes). - nilfs2: use default_groups in kobj_type (git-fixes). - nvme: move stopping keep-alive into nvme_uninit_ctrl() (git-fixes). - nvme/pci: Add APST quirk for Lenovo N60z laptop (git-fixes). - nvme-pci: Add sleep quirk for Samsung 990 Evo (git-fixes). - nvme-pci: use block layer helpers to calculate num of queues (bsc#1229034). - nvme: replace blk_mq_pci_map_queues with blk_mq_dev_map_queues (bsc#1229034). - nvmet: Identify-Active Namespace ID List command should reject invalid nsid (git-fixes). - nvmet-rdma: fix possible bad dereference when freeing rsps (git-fixes). - nvmet-tcp: do not continue for invalid icreq (git-fixes). - nvmet-tcp: fix kernel crash if commands allocation fails (git-fixes). - nvmet-trace: avoid dereferencing pointer too early (git-fixes). - ocfs2: cancel dqi_sync_work before freeing oinfo (git-fixes). - ocfs2: fix null-ptr-deref when journal load failed (git-fixes). - ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate (git-fixes). - ocfs2: remove unreasonable unlock in ocfs2_read_blocks (git-fixes). - PCI: Add missing bridge lock to pci_bus_lock() (stable-fixes). - PCI: al: Check IORESOURCE_BUS existence during probe (git-fixes). - PCI/ASPM: Move pci_function_0() upward (bsc#1226915) - PCI/ASPM: Remove struct aspm_latency (bsc#1226915) - PCI/ASPM: Stop caching device L0s, L1 acceptable exit latencies (bsc#1226915) - PCI/ASPM: Stop caching link L0s, L1 exit latencies (bsc#1226915) - PCI: dra7xx: Fix error handling when IRQ request fails in probe (git-fixes). - PCI: dwc: Expose dw_pcie_ep_exit() to module (git-fixes). - PCI: dwc: Restore MSI Receiver mask during resume (git-fixes). - pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv (stable-fixes). - PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0) (stable-fixes). - PCI: keystone: Fix if-statement expression in ks_pcie_quirk() (git-fixes). - PCI: Support BAR sizes up to 8TB (bsc#1231017) - PCI: Wait for Link before restoring Downstream Buses (git-fixes). - PCI: xilinx-nwl: Clean up clock on probe failure/removal (git-fixes). - PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler (git-fixes). - PCI: xilinx-nwl: Fix register misspelling (git-fixes). - pcmcia: Use resource_size function on resource object (stable-fixes). - pinctrl: single: fix missing error code in pcs_probe() (git-fixes). - pinctrl: single: fix potential NULL dereference in pcs_get_function() (git-fixes). - PKCS#7: Check codeSigning EKU of certificates in PKCS#7 (bsc#1226666). - platform/x86: dell-smbios: Fix error path in dell_smbios_init() (git-fixes). - platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array (git-fixes). - platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses (git-fixes). - power: supply: axp20x_battery: Remove design from min and max voltage (git-fixes). - power: supply: Drop use_cnt check from power_supply_property_is_writeable() (git-fixes). - power: supply: hwmon: Fix missing temp1_max_alarm attribute (git-fixes). - power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense (git-fixes). - RDMA/core: Remove unused declaration rdma_resolve_ip_route() (git-fixes) - RDMA/cxgb4: Added NULL check for lookup_atid (git-fixes) - RDMA/efa: Properly handle unexpected AQ completions (git-fixes) - RDMA/hns: Do not modify rq next block addr in HIP09 QPC (git-fixes) - RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled (git-fixes) - RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range() (git-fixes) - RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler (git-fixes) - RDMA/hns: Optimize hem allocation performance (git-fixes) - RDMA/irdma: fix error message in irdma_modify_qp_roce() (git-fixes) - RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency (git-fixes) - RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds (git-fixes) - RDMA/rtrs: Fix the problem of variable not initialized fully (git-fixes) - RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer (git-fixes) - Restore dropped fields for bluetooth MGMT/SMP structs (git-fixes). - Revert 'Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE' (git-fixes). - Revert 'media: tuners: fix error return code of hybrid_tuner_request_state()' (git-fixes). - Revert 'media: tuners: fix error return code of hybrid_tuner_request_state()' (stable-fixes). - rtc: at91sam9: fix OF node leak in probe() error path (git-fixes). - scsi: ibmvfc: Add max_sectors module parameter (bsc#1216223). - scsi: lpfc: Change diagnostic log flag during receipt of unknown ELS cmds (bsc#1229429). - scsi: lpfc: Copyright updates for 14.4.0.4 patches (bsc#1229429). - scsi: lpfc: Fix overflow build issue (bsc#1229429). - scsi: lpfc: Fix unintentional double clearing of vmid_flag (bsc#1229429). - scsi: lpfc: Fix unsolicited FLOGI kref imbalance when in direct attached topology (bsc#1229429). - scsi: lpfc: Remove redundant vport assignment when building an abort request (bsc#1229429). - scsi: lpfc: Update lpfc version to 14.4.0.4 (bsc#1229429). - scsi: lpfc: Update PRLO handling in direct attached topology (bsc#1229429). - scsi: lpfc: Validate hdwq pointers before dereferencing in reset/errata paths (bsc#1229429). - scsi: pm8001: do not overwrite PCI queue mapping (bsc#1229034). - scsi: replace blk_mq_pci_map_queues with blk_mq_dev_map_queues (bsc#1229034). - scsi: sd: Fix off-by-one error in sd_read_block_characteristics() (bsc#1223848). - scsi: use block layer helpers to calculate num of queues (bsc#1229034). - spi: nxp-fspi: fix the KASAN report out-of-bounds bug (git-fixes). - Squashfs: sanity check symbolic link size (git-fixes). - staging: iio: frequency: ad9834: Validate frequency parameter value (git-fixes). - thunderbolt: Mark XDomain as unplugged when router is removed (stable-fixes). - tomoyo: fallback to realpath if symlink's pathname does not exist (git-fixes). - tools/virtio: fix build (git-fixes). - tpm: Clean up TPM space after command failure (git-fixes). - tracing: Avoid possible softlockup in tracing_iter_reset() (git-fixes). - tty: rp2: Fix reset with non forgiving PCIe host bridges (git-fixes). - udp: fix receiving fraglist GSO packets (git-fixes). - uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind (git-fixes). - usb: cdnsp: Fix incorrect usb_request status (git-fixes). - USB: class: CDC-ACM: fix race between get_serial and set_serial (git-fixes). - usb: dwc2: drd: fix clock gating on USB role switch (git-fixes). - usb: dwc2: Skip clock gating on Broadcom SoCs (git-fixes). - usb: dwc3: core: Prevent USB core invalid event buffer address access (git-fixes). - usb: dwc3: core: Skip setting event buffers for host only controllers (git-fixes). - usb: dwc3: core: update LC timer as per USB Spec V3.2 (git-fixes). - usb: dwc3: omap: add missing depopulate in probe error path (git-fixes). - usb: dwc3: st: add missing depopulate in probe error path (git-fixes). - usb: dwc3: st: fix probed platform device ref count on probe error path (git-fixes). - usbip: Do not submit special requests twice (stable-fixes). - usbnet: fix cyclical race on disconnect with work queue (git-fixes). - usbnet: ipheth: race between ipheth_close and error handling (git-fixes). - usbnet: modern method to get random MAC (git-fixes). - USB: serial: kobil_sct: restore initial terminal settings (git-fixes). - USB: serial: option: add MeiG Smart SRM825L (git-fixes). - usb: typec: ucsi: Fix null pointer dereference in trace (stable-fixes). - usb: uas: set host status byte on data completion error (git-fixes). - usb: uas: set host status byte on data completion error (stable-fixes). - USB: usbtmc: prevent kernel-usb-infoleak (git-fixes). - usb: xhci: fix loss of data on Cadence xHC (git-fixes). - vhost: Add smp_rmb() in vhost_vq_avail_empty() (git-fixes). - vhost-vdpa: switch to use vmf_insert_pfn() in the fault handler (git-fixes). - virito: add APIs for retrieving vq affinity (bsc#1229034). - virtio-blk: Ensure no requests in virtqueues before deleting vqs (git-fixes). - virtio: blk/scsi: use block layer helpers to calculate num of queues (bsc#1229034). - virtio: blk/scs: replace blk_mq_virtio_map_queues with blk_mq_dev_map_queues (bsc#1229034). - virtiofs: forbid newlines in tags (bsc#1230591). - virtio_net: checksum offloading handling fix (git-fixes). - virtio_net: Fix ''%d' directive writing between 1 and 11 bytes into a region of size 10' warnings (git-fixes). - virtio_net: use u64_stats_t infra to avoid data-races (git-fixes). - virtio: reenable config if freezing device failed (git-fixes). - virtio/vsock: fix logic which reduces credit update messages (git-fixes). - VMCI: Fix use-after-free when removing resource in vmci_resource_remove() (git-fixes). - vsock/virtio: add support for device suspend/resume (git-fixes). - vsock/virtio: factor our the code to initialize and delete VQs (git-fixes). - vsock/virtio: initialize the_virtio_vsock before using VQs (git-fixes). - vsock/virtio: remove socket from connected/bound list on shutdown (git-fixes). - watchdog: imx_sc_wdt: Do not disable WDT in suspend (git-fixes). - wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3 (stable-fixes). - wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors (git-fixes). - wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan() (git-fixes). - wifi: iwlwifi: mvm: increase the time between ranging measurements (git-fixes). - wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop() (git-fixes). - wifi: mt76: mt7615: check devm_kasprintf() returned value (git-fixes). - wifi: mt76: mt7915: fix rx filter setting for bfee functionality (git-fixes). - wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() (stable-fixes). - wifi: rtw88: 8822c: Fix reported RX band width (git-fixes). - wifi: rtw88: always wait for both firmware loading attempts (git-fixes). - wifi: rtw88: remove CPT execution branch never used (git-fixes). - wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param (git-fixes). - x86/hyperv: fix kexec crash due to VP assist page corruption (git-fixes). - x86/kexec: Add EFI config table identity mapping for kexec kernel (bsc#1220382). - x86/mm/ident_map: Use gbpages only where full GB page should be mapped (bsc#1220382). - x86/xen: Convert comma to semicolon (git-fixes). - xen: add capability to remap non-RAM pages to different PFNs (bsc#1226003). - xen: allow mapping ACPI data using a different physical address (bsc#1226003). - xen: introduce generic helper checking for memory map conflicts (bsc#1226003). - xen: move checks for e820 conflicts further up (bsc#1226003). - xen: move max_pfn in xen_memory_setup() out of function scope (bsc#1226003). - xen/swiotlb: add alignment check for dma buffers (bsc#1229928). - xen/swiotlb: fix allocated size (git-fixes). - xen: tolerate ACPI NVS memory overlapping with Xen allocated memory (bsc#1226003). - xen: use correct end address of kernel for conflict checking (bsc#1226003). - xfs: do not include bnobt blocks when reserving free block pool (git-fixes). - xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them (git-fixes). - xz: cleanup CRC32 edits from 2018 (git-fixes). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sle-micro/rt-5.5:latest-2024-3592,SUSE-2024-3592,SUSE-SLE-Micro-5.5-2024-3592,SUSE-SLE-Module-Live-Patching-15-SP5-2024-3592,SUSE-SLE-Module-RT-15-SP5-2024-3592,openSUSE-Leap-Micro-5.5-2024-3592,openSUSE-SLE-15.5-2024-3592 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ Link for SUSE-SU-2024:3592-1 https://lists.suse.com/pipermail/sle-updates/2024-October/037209.html E-Mail link for SUSE-SU-2024:3592-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1199769 SUSE Bug 1199769 https://bugzilla.suse.com/1216223 SUSE Bug 1216223 https://bugzilla.suse.com/1220382 SUSE Bug 1220382 https://bugzilla.suse.com/1221610 SUSE Bug 1221610 https://bugzilla.suse.com/1221650 SUSE Bug 1221650 https://bugzilla.suse.com/1222629 SUSE Bug 1222629 https://bugzilla.suse.com/1222973 SUSE Bug 1222973 https://bugzilla.suse.com/1223600 SUSE Bug 1223600 https://bugzilla.suse.com/1223848 SUSE Bug 1223848 https://bugzilla.suse.com/1224085 SUSE Bug 1224085 https://bugzilla.suse.com/1225903 SUSE Bug 1225903 https://bugzilla.suse.com/1226003 SUSE Bug 1226003 https://bugzilla.suse.com/1226606 SUSE Bug 1226606 https://bugzilla.suse.com/1226662 SUSE Bug 1226662 https://bugzilla.suse.com/1226666 SUSE Bug 1226666 https://bugzilla.suse.com/1226846 SUSE Bug 1226846 https://bugzilla.suse.com/1226860 SUSE Bug 1226860 https://bugzilla.suse.com/1226875 SUSE Bug 1226875 https://bugzilla.suse.com/1226915 SUSE Bug 1226915 https://bugzilla.suse.com/1227487 SUSE Bug 1227487 https://bugzilla.suse.com/1227726 SUSE Bug 1227726 https://bugzilla.suse.com/1227819 SUSE Bug 1227819 https://bugzilla.suse.com/1227832 SUSE Bug 1227832 https://bugzilla.suse.com/1227890 SUSE Bug 1227890 https://bugzilla.suse.com/1228507 SUSE Bug 1228507 https://bugzilla.suse.com/1228576 SUSE Bug 1228576 https://bugzilla.suse.com/1228620 SUSE Bug 1228620 https://bugzilla.suse.com/1228771 SUSE Bug 1228771 https://bugzilla.suse.com/1229031 SUSE Bug 1229031 https://bugzilla.suse.com/1229034 SUSE Bug 1229034 https://bugzilla.suse.com/1229086 SUSE Bug 1229086 https://bugzilla.suse.com/1229156 SUSE Bug 1229156 https://bugzilla.suse.com/1229289 SUSE Bug 1229289 https://bugzilla.suse.com/1229334 SUSE Bug 1229334 https://bugzilla.suse.com/1229362 SUSE Bug 1229362 https://bugzilla.suse.com/1229363 SUSE Bug 1229363 https://bugzilla.suse.com/1229364 SUSE Bug 1229364 https://bugzilla.suse.com/1229394 SUSE Bug 1229394 https://bugzilla.suse.com/1229429 SUSE Bug 1229429 https://bugzilla.suse.com/1229453 SUSE Bug 1229453 https://bugzilla.suse.com/1229572 SUSE Bug 1229572 https://bugzilla.suse.com/1229573 SUSE Bug 1229573 https://bugzilla.suse.com/1229585 SUSE Bug 1229585 https://bugzilla.suse.com/1229607 SUSE Bug 1229607 https://bugzilla.suse.com/1229619 SUSE Bug 1229619 https://bugzilla.suse.com/1229633 SUSE Bug 1229633 https://bugzilla.suse.com/1229662 SUSE Bug 1229662 https://bugzilla.suse.com/1229753 SUSE Bug 1229753 https://bugzilla.suse.com/1229764 SUSE Bug 1229764 https://bugzilla.suse.com/1229790 SUSE Bug 1229790 https://bugzilla.suse.com/1229810 SUSE Bug 1229810 https://bugzilla.suse.com/1229830 SUSE Bug 1229830 https://bugzilla.suse.com/1229899 SUSE Bug 1229899 https://bugzilla.suse.com/1229928 SUSE Bug 1229928 https://bugzilla.suse.com/1229947 SUSE Bug 1229947 https://bugzilla.suse.com/1230015 SUSE Bug 1230015 https://bugzilla.suse.com/1230129 SUSE Bug 1230129 https://bugzilla.suse.com/1230130 SUSE Bug 1230130 https://bugzilla.suse.com/1230170 SUSE Bug 1230170 https://bugzilla.suse.com/1230171 SUSE Bug 1230171 https://bugzilla.suse.com/1230174 SUSE Bug 1230174 https://bugzilla.suse.com/1230175 SUSE Bug 1230175 https://bugzilla.suse.com/1230176 SUSE Bug 1230176 https://bugzilla.suse.com/1230178 SUSE Bug 1230178 https://bugzilla.suse.com/1230180 SUSE Bug 1230180 https://bugzilla.suse.com/1230185 SUSE Bug 1230185 https://bugzilla.suse.com/1230192 SUSE Bug 1230192 https://bugzilla.suse.com/1230193 SUSE Bug 1230193 https://bugzilla.suse.com/1230194 SUSE Bug 1230194 https://bugzilla.suse.com/1230200 SUSE Bug 1230200 https://bugzilla.suse.com/1230204 SUSE Bug 1230204 https://bugzilla.suse.com/1230209 SUSE Bug 1230209 https://bugzilla.suse.com/1230211 SUSE Bug 1230211 https://bugzilla.suse.com/1230212 SUSE Bug 1230212 https://bugzilla.suse.com/1230217 SUSE Bug 1230217 https://bugzilla.suse.com/1230224 SUSE Bug 1230224 https://bugzilla.suse.com/1230230 SUSE Bug 1230230 https://bugzilla.suse.com/1230233 SUSE Bug 1230233 https://bugzilla.suse.com/1230244 SUSE Bug 1230244 https://bugzilla.suse.com/1230245 SUSE Bug 1230245 https://bugzilla.suse.com/1230247 SUSE Bug 1230247 https://bugzilla.suse.com/1230248 SUSE Bug 1230248 https://bugzilla.suse.com/1230269 SUSE Bug 1230269 https://bugzilla.suse.com/1230339 SUSE Bug 1230339 https://bugzilla.suse.com/1230340 SUSE Bug 1230340 https://bugzilla.suse.com/1230392 SUSE Bug 1230392 https://bugzilla.suse.com/1230398 SUSE Bug 1230398 https://bugzilla.suse.com/1230431 SUSE Bug 1230431 https://bugzilla.suse.com/1230433 SUSE Bug 1230433 https://bugzilla.suse.com/1230434 SUSE Bug 1230434 https://bugzilla.suse.com/1230440 SUSE Bug 1230440 https://bugzilla.suse.com/1230442 SUSE Bug 1230442 https://bugzilla.suse.com/1230444 SUSE Bug 1230444 https://bugzilla.suse.com/1230450 SUSE Bug 1230450 https://bugzilla.suse.com/1230451 SUSE Bug 1230451 https://bugzilla.suse.com/1230454 SUSE Bug 1230454 https://bugzilla.suse.com/1230506 SUSE Bug 1230506 https://bugzilla.suse.com/1230507 SUSE Bug 1230507 https://bugzilla.suse.com/1230511 SUSE Bug 1230511 https://bugzilla.suse.com/1230515 SUSE Bug 1230515 https://bugzilla.suse.com/1230517 SUSE Bug 1230517 https://bugzilla.suse.com/1230524 SUSE Bug 1230524 https://bugzilla.suse.com/1230533 SUSE Bug 1230533 https://bugzilla.suse.com/1230535 SUSE Bug 1230535 https://bugzilla.suse.com/1230549 SUSE Bug 1230549 https://bugzilla.suse.com/1230556 SUSE Bug 1230556 https://bugzilla.suse.com/1230582 SUSE Bug 1230582 https://bugzilla.suse.com/1230589 SUSE Bug 1230589 https://bugzilla.suse.com/1230591 SUSE Bug 1230591 https://bugzilla.suse.com/1230592 SUSE Bug 1230592 https://bugzilla.suse.com/1230699 SUSE Bug 1230699 https://bugzilla.suse.com/1230700 SUSE Bug 1230700 https://bugzilla.suse.com/1230701 SUSE Bug 1230701 https://bugzilla.suse.com/1230702 SUSE Bug 1230702 https://bugzilla.suse.com/1230703 SUSE Bug 1230703 https://bugzilla.suse.com/1230705 SUSE Bug 1230705 https://bugzilla.suse.com/1230706 SUSE Bug 1230706 https://bugzilla.suse.com/1230707 SUSE Bug 1230707 https://bugzilla.suse.com/1230709 SUSE Bug 1230709 https://bugzilla.suse.com/1230710 SUSE Bug 1230710 https://bugzilla.suse.com/1230711 SUSE Bug 1230711 https://bugzilla.suse.com/1230712 SUSE Bug 1230712 https://bugzilla.suse.com/1230719 SUSE Bug 1230719 https://bugzilla.suse.com/1230724 SUSE Bug 1230724 https://bugzilla.suse.com/1230725 SUSE Bug 1230725 https://bugzilla.suse.com/1230730 SUSE Bug 1230730 https://bugzilla.suse.com/1230731 SUSE Bug 1230731 https://bugzilla.suse.com/1230732 SUSE Bug 1230732 https://bugzilla.suse.com/1230733 SUSE Bug 1230733 https://bugzilla.suse.com/1230747 SUSE Bug 1230747 https://bugzilla.suse.com/1230748 SUSE Bug 1230748 https://bugzilla.suse.com/1230751 SUSE Bug 1230751 https://bugzilla.suse.com/1230752 SUSE Bug 1230752 https://bugzilla.suse.com/1230756 SUSE Bug 1230756 https://bugzilla.suse.com/1230761 SUSE Bug 1230761 https://bugzilla.suse.com/1230766 SUSE Bug 1230766 https://bugzilla.suse.com/1230767 SUSE Bug 1230767 https://bugzilla.suse.com/1230768 SUSE Bug 1230768 https://bugzilla.suse.com/1230771 SUSE Bug 1230771 https://bugzilla.suse.com/1230772 SUSE Bug 1230772 https://bugzilla.suse.com/1230776 SUSE Bug 1230776 https://bugzilla.suse.com/1230783 SUSE Bug 1230783 https://bugzilla.suse.com/1230786 SUSE Bug 1230786 https://bugzilla.suse.com/1230791 SUSE Bug 1230791 https://bugzilla.suse.com/1230794 SUSE Bug 1230794 https://bugzilla.suse.com/1230796 SUSE Bug 1230796 https://bugzilla.suse.com/1230802 SUSE Bug 1230802 https://bugzilla.suse.com/1230806 SUSE Bug 1230806 https://bugzilla.suse.com/1230808 SUSE Bug 1230808 https://bugzilla.suse.com/1230810 SUSE Bug 1230810 https://bugzilla.suse.com/1230812 SUSE Bug 1230812 https://bugzilla.suse.com/1230813 SUSE Bug 1230813 https://bugzilla.suse.com/1230814 SUSE Bug 1230814 https://bugzilla.suse.com/1230815 SUSE Bug 1230815 https://bugzilla.suse.com/1230821 SUSE Bug 1230821 https://bugzilla.suse.com/1230825 SUSE Bug 1230825 https://bugzilla.suse.com/1230830 SUSE Bug 1230830 https://bugzilla.suse.com/1231013 SUSE Bug 1231013 https://bugzilla.suse.com/1231017 SUSE Bug 1231017 https://bugzilla.suse.com/1231116 SUSE Bug 1231116 https://bugzilla.suse.com/1231120 SUSE Bug 1231120 https://bugzilla.suse.com/1231146 SUSE Bug 1231146 https://bugzilla.suse.com/1231180 SUSE Bug 1231180 https://bugzilla.suse.com/1231181 SUSE Bug 1231181 https://www.suse.com/security/cve/CVE-2022-48901/ SUSE CVE CVE-2022-48901 page https://www.suse.com/security/cve/CVE-2022-48911/ SUSE CVE CVE-2022-48911 page https://www.suse.com/security/cve/CVE-2022-48923/ SUSE CVE CVE-2022-48923 page https://www.suse.com/security/cve/CVE-2022-48935/ SUSE CVE CVE-2022-48935 page https://www.suse.com/security/cve/CVE-2022-48944/ SUSE CVE CVE-2022-48944 page https://www.suse.com/security/cve/CVE-2022-48945/ SUSE CVE CVE-2022-48945 page https://www.suse.com/security/cve/CVE-2023-52610/ SUSE CVE CVE-2023-52610 page https://www.suse.com/security/cve/CVE-2023-52916/ SUSE CVE CVE-2023-52916 page https://www.suse.com/security/cve/CVE-2024-26640/ SUSE CVE CVE-2024-26640 page https://www.suse.com/security/cve/CVE-2024-26759/ SUSE CVE CVE-2024-26759 page https://www.suse.com/security/cve/CVE-2024-26767/ SUSE CVE CVE-2024-26767 page https://www.suse.com/security/cve/CVE-2024-26804/ SUSE CVE CVE-2024-26804 page https://www.suse.com/security/cve/CVE-2024-26837/ SUSE CVE CVE-2024-26837 page https://www.suse.com/security/cve/CVE-2024-37353/ SUSE CVE CVE-2024-37353 page https://www.suse.com/security/cve/CVE-2024-38538/ SUSE CVE CVE-2024-38538 page https://www.suse.com/security/cve/CVE-2024-38596/ SUSE CVE CVE-2024-38596 page https://www.suse.com/security/cve/CVE-2024-38632/ SUSE CVE CVE-2024-38632 page https://www.suse.com/security/cve/CVE-2024-40910/ SUSE CVE CVE-2024-40910 page https://www.suse.com/security/cve/CVE-2024-40973/ SUSE CVE CVE-2024-40973 page https://www.suse.com/security/cve/CVE-2024-40983/ SUSE CVE CVE-2024-40983 page https://www.suse.com/security/cve/CVE-2024-41062/ SUSE CVE CVE-2024-41062 page https://www.suse.com/security/cve/CVE-2024-41082/ SUSE CVE CVE-2024-41082 page https://www.suse.com/security/cve/CVE-2024-42154/ SUSE CVE CVE-2024-42154 page https://www.suse.com/security/cve/CVE-2024-42259/ SUSE CVE CVE-2024-42259 page https://www.suse.com/security/cve/CVE-2024-42265/ SUSE CVE CVE-2024-42265 page https://www.suse.com/security/cve/CVE-2024-42304/ SUSE CVE CVE-2024-42304 page https://www.suse.com/security/cve/CVE-2024-42305/ SUSE CVE CVE-2024-42305 page https://www.suse.com/security/cve/CVE-2024-42306/ SUSE CVE CVE-2024-42306 page https://www.suse.com/security/cve/CVE-2024-43828/ SUSE CVE CVE-2024-43828 page https://www.suse.com/security/cve/CVE-2024-43835/ SUSE CVE CVE-2024-43835 page https://www.suse.com/security/cve/CVE-2024-43890/ SUSE CVE CVE-2024-43890 page https://www.suse.com/security/cve/CVE-2024-43898/ SUSE CVE CVE-2024-43898 page https://www.suse.com/security/cve/CVE-2024-43912/ SUSE CVE CVE-2024-43912 page https://www.suse.com/security/cve/CVE-2024-43914/ SUSE CVE CVE-2024-43914 page https://www.suse.com/security/cve/CVE-2024-44935/ SUSE CVE CVE-2024-44935 page https://www.suse.com/security/cve/CVE-2024-44944/ SUSE CVE CVE-2024-44944 page https://www.suse.com/security/cve/CVE-2024-44946/ SUSE CVE CVE-2024-44946 page https://www.suse.com/security/cve/CVE-2024-44948/ SUSE CVE CVE-2024-44948 page https://www.suse.com/security/cve/CVE-2024-44950/ SUSE CVE CVE-2024-44950 page https://www.suse.com/security/cve/CVE-2024-44952/ SUSE CVE CVE-2024-44952 page https://www.suse.com/security/cve/CVE-2024-44954/ SUSE CVE CVE-2024-44954 page https://www.suse.com/security/cve/CVE-2024-44967/ SUSE CVE CVE-2024-44967 page https://www.suse.com/security/cve/CVE-2024-44969/ SUSE CVE CVE-2024-44969 page https://www.suse.com/security/cve/CVE-2024-44970/ SUSE CVE CVE-2024-44970 page https://www.suse.com/security/cve/CVE-2024-44971/ SUSE CVE CVE-2024-44971 page https://www.suse.com/security/cve/CVE-2024-44972/ SUSE CVE CVE-2024-44972 page https://www.suse.com/security/cve/CVE-2024-44977/ SUSE CVE CVE-2024-44977 page https://www.suse.com/security/cve/CVE-2024-44982/ SUSE CVE CVE-2024-44982 page https://www.suse.com/security/cve/CVE-2024-44986/ SUSE CVE CVE-2024-44986 page https://www.suse.com/security/cve/CVE-2024-44987/ SUSE CVE CVE-2024-44987 page https://www.suse.com/security/cve/CVE-2024-44988/ SUSE CVE CVE-2024-44988 page https://www.suse.com/security/cve/CVE-2024-44989/ SUSE CVE CVE-2024-44989 page https://www.suse.com/security/cve/CVE-2024-44990/ SUSE CVE CVE-2024-44990 page https://www.suse.com/security/cve/CVE-2024-44998/ SUSE CVE CVE-2024-44998 page https://www.suse.com/security/cve/CVE-2024-44999/ SUSE CVE CVE-2024-44999 page https://www.suse.com/security/cve/CVE-2024-45000/ SUSE CVE CVE-2024-45000 page https://www.suse.com/security/cve/CVE-2024-45001/ SUSE CVE CVE-2024-45001 page https://www.suse.com/security/cve/CVE-2024-45003/ SUSE CVE CVE-2024-45003 page https://www.suse.com/security/cve/CVE-2024-45006/ SUSE CVE CVE-2024-45006 page https://www.suse.com/security/cve/CVE-2024-45007/ SUSE CVE CVE-2024-45007 page https://www.suse.com/security/cve/CVE-2024-45008/ SUSE CVE CVE-2024-45008 page https://www.suse.com/security/cve/CVE-2024-45011/ SUSE CVE CVE-2024-45011 page https://www.suse.com/security/cve/CVE-2024-45013/ SUSE CVE CVE-2024-45013 page https://www.suse.com/security/cve/CVE-2024-45015/ SUSE CVE CVE-2024-45015 page https://www.suse.com/security/cve/CVE-2024-45018/ SUSE CVE CVE-2024-45018 page https://www.suse.com/security/cve/CVE-2024-45020/ SUSE CVE CVE-2024-45020 page https://www.suse.com/security/cve/CVE-2024-45021/ SUSE CVE CVE-2024-45021 page https://www.suse.com/security/cve/CVE-2024-45026/ SUSE CVE CVE-2024-45026 page https://www.suse.com/security/cve/CVE-2024-45028/ SUSE CVE CVE-2024-45028 page https://www.suse.com/security/cve/CVE-2024-45029/ SUSE CVE CVE-2024-45029 page https://www.suse.com/security/cve/CVE-2024-46673/ SUSE CVE CVE-2024-46673 page https://www.suse.com/security/cve/CVE-2024-46674/ SUSE CVE CVE-2024-46674 page https://www.suse.com/security/cve/CVE-2024-46675/ SUSE CVE CVE-2024-46675 page https://www.suse.com/security/cve/CVE-2024-46676/ SUSE CVE CVE-2024-46676 page https://www.suse.com/security/cve/CVE-2024-46677/ SUSE CVE CVE-2024-46677 page https://www.suse.com/security/cve/CVE-2024-46679/ SUSE CVE CVE-2024-46679 page https://www.suse.com/security/cve/CVE-2024-46685/ SUSE CVE CVE-2024-46685 page https://www.suse.com/security/cve/CVE-2024-46686/ SUSE CVE CVE-2024-46686 page https://www.suse.com/security/cve/CVE-2024-46689/ SUSE CVE CVE-2024-46689 page https://www.suse.com/security/cve/CVE-2024-46694/ SUSE CVE CVE-2024-46694 page https://www.suse.com/security/cve/CVE-2024-46702/ SUSE CVE CVE-2024-46702 page https://www.suse.com/security/cve/CVE-2024-46707/ SUSE CVE CVE-2024-46707 page https://www.suse.com/security/cve/CVE-2024-46714/ SUSE CVE CVE-2024-46714 page https://www.suse.com/security/cve/CVE-2024-46715/ SUSE CVE CVE-2024-46715 page https://www.suse.com/security/cve/CVE-2024-46717/ SUSE CVE CVE-2024-46717 page https://www.suse.com/security/cve/CVE-2024-46720/ SUSE CVE CVE-2024-46720 page https://www.suse.com/security/cve/CVE-2024-46721/ SUSE CVE CVE-2024-46721 page https://www.suse.com/security/cve/CVE-2024-46722/ SUSE CVE CVE-2024-46722 page https://www.suse.com/security/cve/CVE-2024-46723/ SUSE CVE CVE-2024-46723 page https://www.suse.com/security/cve/CVE-2024-46724/ SUSE CVE CVE-2024-46724 page https://www.suse.com/security/cve/CVE-2024-46725/ SUSE CVE CVE-2024-46725 page https://www.suse.com/security/cve/CVE-2024-46726/ SUSE CVE CVE-2024-46726 page https://www.suse.com/security/cve/CVE-2024-46727/ SUSE CVE CVE-2024-46727 page https://www.suse.com/security/cve/CVE-2024-46728/ SUSE CVE CVE-2024-46728 page https://www.suse.com/security/cve/CVE-2024-46730/ SUSE CVE CVE-2024-46730 page https://www.suse.com/security/cve/CVE-2024-46731/ SUSE CVE CVE-2024-46731 page https://www.suse.com/security/cve/CVE-2024-46732/ SUSE CVE CVE-2024-46732 page https://www.suse.com/security/cve/CVE-2024-46737/ SUSE CVE CVE-2024-46737 page https://www.suse.com/security/cve/CVE-2024-46738/ SUSE CVE CVE-2024-46738 page https://www.suse.com/security/cve/CVE-2024-46739/ SUSE CVE CVE-2024-46739 page https://www.suse.com/security/cve/CVE-2024-46743/ SUSE CVE CVE-2024-46743 page https://www.suse.com/security/cve/CVE-2024-46744/ SUSE CVE CVE-2024-46744 page https://www.suse.com/security/cve/CVE-2024-46745/ SUSE CVE CVE-2024-46745 page https://www.suse.com/security/cve/CVE-2024-46746/ SUSE CVE CVE-2024-46746 page https://www.suse.com/security/cve/CVE-2024-46747/ SUSE CVE CVE-2024-46747 page https://www.suse.com/security/cve/CVE-2024-46750/ SUSE CVE CVE-2024-46750 page https://www.suse.com/security/cve/CVE-2024-46751/ SUSE CVE CVE-2024-46751 page https://www.suse.com/security/cve/CVE-2024-46752/ SUSE CVE CVE-2024-46752 page https://www.suse.com/security/cve/CVE-2024-46753/ SUSE CVE CVE-2024-46753 page https://www.suse.com/security/cve/CVE-2024-46755/ SUSE CVE CVE-2024-46755 page https://www.suse.com/security/cve/CVE-2024-46756/ SUSE CVE CVE-2024-46756 page https://www.suse.com/security/cve/CVE-2024-46758/ SUSE CVE CVE-2024-46758 page https://www.suse.com/security/cve/CVE-2024-46759/ SUSE CVE CVE-2024-46759 page https://www.suse.com/security/cve/CVE-2024-46761/ SUSE CVE CVE-2024-46761 page https://www.suse.com/security/cve/CVE-2024-46771/ SUSE CVE CVE-2024-46771 page https://www.suse.com/security/cve/CVE-2024-46772/ SUSE CVE CVE-2024-46772 page https://www.suse.com/security/cve/CVE-2024-46773/ SUSE CVE CVE-2024-46773 page https://www.suse.com/security/cve/CVE-2024-46774/ SUSE CVE CVE-2024-46774 page https://www.suse.com/security/cve/CVE-2024-46778/ SUSE CVE CVE-2024-46778 page https://www.suse.com/security/cve/CVE-2024-46780/ SUSE CVE CVE-2024-46780 page https://www.suse.com/security/cve/CVE-2024-46781/ SUSE CVE CVE-2024-46781 page https://www.suse.com/security/cve/CVE-2024-46783/ SUSE CVE CVE-2024-46783 page https://www.suse.com/security/cve/CVE-2024-46784/ SUSE CVE CVE-2024-46784 page https://www.suse.com/security/cve/CVE-2024-46786/ SUSE CVE CVE-2024-46786 page https://www.suse.com/security/cve/CVE-2024-46787/ SUSE CVE CVE-2024-46787 page https://www.suse.com/security/cve/CVE-2024-46791/ SUSE CVE CVE-2024-46791 page https://www.suse.com/security/cve/CVE-2024-46794/ SUSE CVE CVE-2024-46794 page https://www.suse.com/security/cve/CVE-2024-46798/ SUSE CVE CVE-2024-46798 page https://www.suse.com/security/cve/CVE-2024-46822/ SUSE CVE CVE-2024-46822 page https://www.suse.com/security/cve/CVE-2024-46830/ SUSE CVE CVE-2024-46830 page Container suse/sle-micro/rt-5.5:latest SUSE Linux Enterprise Live Patching 15 SP5 SUSE Linux Enterprise Micro 5.5 SUSE Real Time Module 15 SP5 openSUSE Leap 15.5 openSUSE Leap Micro 5.5 kernel-rt-5.14.21-150500.13.73.1 cluster-md-kmp-rt-5.14.21-150500.13.73.1 dlm-kmp-rt-5.14.21-150500.13.73.1 gfs2-kmp-rt-5.14.21-150500.13.73.1 kernel-devel-rt-5.14.21-150500.13.73.1 kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 kernel-rt-devel-5.14.21-150500.13.73.1 kernel-rt-extra-5.14.21-150500.13.73.1 kernel-rt-livepatch-5.14.21-150500.13.73.1 kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 kernel-rt-optional-5.14.21-150500.13.73.1 kernel-rt-vdso-5.14.21-150500.13.73.1 kernel-rt_debug-5.14.21-150500.13.73.1 kernel-rt_debug-devel-5.14.21-150500.13.73.1 kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 kernel-rt_debug-vdso-5.14.21-150500.13.73.1 kernel-source-rt-5.14.21-150500.13.73.1 kernel-syms-rt-5.14.21-150500.13.73.1 kselftests-kmp-rt-5.14.21-150500.13.73.1 ocfs2-kmp-rt-5.14.21-150500.13.73.1 reiserfs-kmp-rt-5.14.21-150500.13.73.1 kernel-rt-5.14.21-150500.13.73.1 as a component of Container suse/sle-micro/rt-5.5:latest kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 as a component of SUSE Linux Enterprise Live Patching 15 SP5 kernel-rt-5.14.21-150500.13.73.1 as a component of SUSE Linux Enterprise Micro 5.5 kernel-source-rt-5.14.21-150500.13.73.1 as a component of SUSE Linux Enterprise Micro 5.5 cluster-md-kmp-rt-5.14.21-150500.13.73.1 as a component of SUSE Real Time Module 15 SP5 dlm-kmp-rt-5.14.21-150500.13.73.1 as a component of SUSE Real Time Module 15 SP5 gfs2-kmp-rt-5.14.21-150500.13.73.1 as a component of SUSE Real Time Module 15 SP5 kernel-devel-rt-5.14.21-150500.13.73.1 as a component of SUSE Real Time Module 15 SP5 kernel-rt-5.14.21-150500.13.73.1 as a component of SUSE Real Time Module 15 SP5 kernel-rt-devel-5.14.21-150500.13.73.1 as a component of SUSE Real Time Module 15 SP5 kernel-rt-vdso-5.14.21-150500.13.73.1 as a component of SUSE Real Time Module 15 SP5 kernel-rt_debug-5.14.21-150500.13.73.1 as a component of SUSE Real Time Module 15 SP5 kernel-rt_debug-devel-5.14.21-150500.13.73.1 as a component of SUSE Real Time Module 15 SP5 kernel-rt_debug-vdso-5.14.21-150500.13.73.1 as a component of SUSE Real Time Module 15 SP5 kernel-source-rt-5.14.21-150500.13.73.1 as a component of SUSE Real Time Module 15 SP5 kernel-syms-rt-5.14.21-150500.13.73.1 as a component of SUSE Real Time Module 15 SP5 ocfs2-kmp-rt-5.14.21-150500.13.73.1 as a component of SUSE Real Time Module 15 SP5 cluster-md-kmp-rt-5.14.21-150500.13.73.1 as a component of openSUSE Leap 15.5 dlm-kmp-rt-5.14.21-150500.13.73.1 as a component of openSUSE Leap 15.5 gfs2-kmp-rt-5.14.21-150500.13.73.1 as a component of openSUSE Leap 15.5 kernel-devel-rt-5.14.21-150500.13.73.1 as a component of openSUSE Leap 15.5 kernel-rt-5.14.21-150500.13.73.1 as a component of openSUSE Leap 15.5 kernel-rt-devel-5.14.21-150500.13.73.1 as a component of openSUSE Leap 15.5 kernel-rt-extra-5.14.21-150500.13.73.1 as a component of openSUSE Leap 15.5 kernel-rt-livepatch-5.14.21-150500.13.73.1 as a component of openSUSE Leap 15.5 kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 as a component of openSUSE Leap 15.5 kernel-rt-optional-5.14.21-150500.13.73.1 as a component of openSUSE Leap 15.5 kernel-rt-vdso-5.14.21-150500.13.73.1 as a component of openSUSE Leap 15.5 kernel-rt_debug-5.14.21-150500.13.73.1 as a component of openSUSE Leap 15.5 kernel-rt_debug-devel-5.14.21-150500.13.73.1 as a component of openSUSE Leap 15.5 kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 as a component of openSUSE Leap 15.5 kernel-rt_debug-vdso-5.14.21-150500.13.73.1 as a component of openSUSE Leap 15.5 kernel-source-rt-5.14.21-150500.13.73.1 as a component of openSUSE Leap 15.5 kernel-syms-rt-5.14.21-150500.13.73.1 as a component of openSUSE Leap 15.5 kselftests-kmp-rt-5.14.21-150500.13.73.1 as a component of openSUSE Leap 15.5 ocfs2-kmp-rt-5.14.21-150500.13.73.1 as a component of openSUSE Leap 15.5 reiserfs-kmp-rt-5.14.21-150500.13.73.1 as a component of openSUSE Leap 15.5 kernel-rt-5.14.21-150500.13.73.1 as a component of openSUSE Leap Micro 5.5 In the Linux kernel, the following vulnerability has been resolved: btrfs: do not start relocation until in progress drops are done We hit a bug with a recovering relocation on mount for one of our file systems in production. I reproduced this locally by injecting errors into snapshot delete with balance running at the same time. This presented as an error while looking up an extent item WARNING: CPU: 5 PID: 1501 at fs/btrfs/extent-tree.c:866 lookup_inline_extent_backref+0x647/0x680 CPU: 5 PID: 1501 Comm: btrfs-balance Not tainted 5.16.0-rc8+ #8 RIP: 0010:lookup_inline_extent_backref+0x647/0x680 RSP: 0018:ffffae0a023ab960 EFLAGS: 00010202 RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 000000000000000c RDI: 0000000000000000 RBP: ffff943fd2a39b60 R08: 0000000000000000 R09: 0000000000000001 R10: 0001434088152de0 R11: 0000000000000000 R12: 0000000001d05000 R13: ffff943fd2a39b60 R14: ffff943fdb96f2a0 R15: ffff9442fc923000 FS: 0000000000000000(0000) GS:ffff944e9eb40000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f1157b1fca8 CR3: 000000010f092000 CR4: 0000000000350ee0 Call Trace: <TASK> insert_inline_extent_backref+0x46/0xd0 __btrfs_inc_extent_ref.isra.0+0x5f/0x200 ? btrfs_merge_delayed_refs+0x164/0x190 __btrfs_run_delayed_refs+0x561/0xfa0 ? btrfs_search_slot+0x7b4/0xb30 ? btrfs_update_root+0x1a9/0x2c0 btrfs_run_delayed_refs+0x73/0x1f0 ? btrfs_update_root+0x1a9/0x2c0 btrfs_commit_transaction+0x50/0xa50 ? btrfs_update_reloc_root+0x122/0x220 prepare_to_merge+0x29f/0x320 relocate_block_group+0x2b8/0x550 btrfs_relocate_block_group+0x1a6/0x350 btrfs_relocate_chunk+0x27/0xe0 btrfs_balance+0x777/0xe60 balance_kthread+0x35/0x50 ? btrfs_balance+0xe60/0xe60 kthread+0x16b/0x190 ? set_kthread_struct+0x40/0x40 ret_from_fork+0x22/0x30 </TASK> Normally snapshot deletion and relocation are excluded from running at the same time by the fs_info->cleaner_mutex. However if we had a pending balance waiting to get the ->cleaner_mutex, and a snapshot deletion was running, and then the box crashed, we would come up in a state where we have a half deleted snapshot. Again, in the normal case the snapshot deletion needs to complete before relocation can start, but in this case relocation could very well start before the snapshot deletion completes, as we simply add the root to the dead roots list and wait for the next time the cleaner runs to clean up the snapshot. Fix this by setting a bit on the fs_info if we have any DEAD_ROOT's that had a pending drop_progress key. If they do then we know we were in the middle of the drop operation and set a flag on the fs_info. Then balance can wait until this flag is cleared to start up again. If there are DEAD_ROOT's that don't have a drop_progress set then we're safe to start balance right away as we'll be properly protected by the cleaner_mutex. CVE-2022-48901 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2022-48901.html CVE-2022-48901 https://bugzilla.suse.com/1229607 SUSE Bug 1229607 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_queue: fix possible use-after-free Eric Dumazet says: The sock_hold() side seems suspect, because there is no guarantee that sk_refcnt is not already 0. On failure, we cannot queue the packet and need to indicate an error. The packet will be dropped by the caller. v2: split skb prefetch hunk into separate change CVE-2022-48911 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2022-48911.html CVE-2022-48911 https://bugzilla.suse.com/1229633 SUSE Bug 1229633 https://bugzilla.suse.com/1229640 SUSE Bug 1229640 In the Linux kernel, the following vulnerability has been resolved: btrfs: prevent copying too big compressed lzo segment Compressed length can be corrupted to be a lot larger than memory we have allocated for buffer. This will cause memcpy in copy_compressed_segment to write outside of allocated memory. This mostly results in stuck read syscall but sometimes when using btrfs send can get #GP kernel: general protection fault, probably for non-canonical address 0x841551d5c1000: 0000 [#1] PREEMPT SMP NOPTI kernel: CPU: 17 PID: 264 Comm: kworker/u256:7 Tainted: P OE 5.17.0-rc2-1 #12 kernel: Workqueue: btrfs-endio btrfs_work_helper [btrfs] kernel: RIP: 0010:lzo_decompress_bio (./include/linux/fortify-string.h:225 fs/btrfs/lzo.c:322 fs/btrfs/lzo.c:394) btrfs Code starting with the faulting instruction =========================================== 0:* 48 8b 06 mov (%rsi),%rax <-- trapping instruction 3: 48 8d 79 08 lea 0x8(%rcx),%rdi 7: 48 83 e7 f8 and $0xfffffffffffffff8,%rdi b: 48 89 01 mov %rax,(%rcx) e: 44 89 f0 mov %r14d,%eax 11: 48 8b 54 06 f8 mov -0x8(%rsi,%rax,1),%rdx kernel: RSP: 0018:ffffb110812efd50 EFLAGS: 00010212 kernel: RAX: 0000000000001000 RBX: 000000009ca264c8 RCX: ffff98996e6d8ff8 kernel: RDX: 0000000000000064 RSI: 000841551d5c1000 RDI: ffffffff9500435d kernel: RBP: ffff989a3be856c0 R08: 0000000000000000 R09: 0000000000000000 kernel: R10: 0000000000000000 R11: 0000000000001000 R12: ffff98996e6d8000 kernel: R13: 0000000000000008 R14: 0000000000001000 R15: 000841551d5c1000 kernel: FS: 0000000000000000(0000) GS:ffff98a09d640000(0000) knlGS:0000000000000000 kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 kernel: CR2: 00001e9f984d9ea8 CR3: 000000014971a000 CR4: 00000000003506e0 kernel: Call Trace: kernel: <TASK> kernel: end_compressed_bio_read (fs/btrfs/compression.c:104 fs/btrfs/compression.c:1363 fs/btrfs/compression.c:323) btrfs kernel: end_workqueue_fn (fs/btrfs/disk-io.c:1923) btrfs kernel: btrfs_work_helper (fs/btrfs/async-thread.c:326) btrfs kernel: process_one_work (./arch/x86/include/asm/jump_label.h:27 ./include/linux/jump_label.h:212 ./include/trace/events/workqueue.h:108 kernel/workqueue.c:2312) kernel: worker_thread (./include/linux/list.h:292 kernel/workqueue.c:2455) kernel: ? process_one_work (kernel/workqueue.c:2397) kernel: kthread (kernel/kthread.c:377) kernel: ? kthread_complete_and_exit (kernel/kthread.c:332) kernel: ret_from_fork (arch/x86/entry/entry_64.S:301) kernel: </TASK> CVE-2022-48923 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2022-48923.html CVE-2022-48923 https://bugzilla.suse.com/1229662 SUSE Bug 1229662 https://bugzilla.suse.com/1229663 SUSE Bug 1229663 In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: unregister flowtable hooks on netns exit Unregister flowtable hooks before they are releases via nf_tables_flowtable_destroy() otherwise hook core reports UAF. BUG: KASAN: use-after-free in nf_hook_entries_grow+0x5a7/0x700 net/netfilter/core.c:142 net/netfilter/core.c:142 Read of size 4 at addr ffff8880736f7438 by task syz-executor579/3666 CPU: 0 PID: 3666 Comm: syz-executor579 Not tainted 5.16.0-rc5-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] __dump_stack lib/dump_stack.c:88 [inline] lib/dump_stack.c:106 dump_stack_lvl+0x1dc/0x2d8 lib/dump_stack.c:106 lib/dump_stack.c:106 print_address_description+0x65/0x380 mm/kasan/report.c:247 mm/kasan/report.c:247 __kasan_report mm/kasan/report.c:433 [inline] __kasan_report mm/kasan/report.c:433 [inline] mm/kasan/report.c:450 kasan_report+0x19a/0x1f0 mm/kasan/report.c:450 mm/kasan/report.c:450 nf_hook_entries_grow+0x5a7/0x700 net/netfilter/core.c:142 net/netfilter/core.c:142 __nf_register_net_hook+0x27e/0x8d0 net/netfilter/core.c:429 net/netfilter/core.c:429 nf_register_net_hook+0xaa/0x180 net/netfilter/core.c:571 net/netfilter/core.c:571 nft_register_flowtable_net_hooks+0x3c5/0x730 net/netfilter/nf_tables_api.c:7232 net/netfilter/nf_tables_api.c:7232 nf_tables_newflowtable+0x2022/0x2cf0 net/netfilter/nf_tables_api.c:7430 net/netfilter/nf_tables_api.c:7430 nfnetlink_rcv_batch net/netfilter/nfnetlink.c:513 [inline] nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:634 [inline] nfnetlink_rcv_batch net/netfilter/nfnetlink.c:513 [inline] net/netfilter/nfnetlink.c:652 nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:634 [inline] net/netfilter/nfnetlink.c:652 nfnetlink_rcv+0x10e6/0x2550 net/netfilter/nfnetlink.c:652 net/netfilter/nfnetlink.c:652 __nft_release_hook() calls nft_unregister_flowtable_net_hooks() which only unregisters the hooks, then after RCU grace period, it is guaranteed that no packets add new entries to the flowtable (no flow offload rules and flowtable hooks are reachable from packet path), so it is safe to call nf_flow_table_free() which cleans up the remaining entries from the flowtable (both software and hardware) and it unbinds the flow_block. CVE-2022-48935 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2022-48935.html CVE-2022-48935 https://bugzilla.suse.com/1229619 SUSE Bug 1229619 In the Linux kernel, the following vulnerability has been resolved: sched: Fix yet more sched_fork() races Where commit 4ef0c5c6b5ba ("kernel/sched: Fix sched_fork() access an invalid sched_task_group") fixed a fork race vs cgroup, it opened up a race vs syscalls by not placing the task on the runqueue before it gets exposed through the pidhash. Commit 13765de8148f ("sched/fair: Fix fault in reweight_entity") is trying to fix a single instance of this, instead fix the whole class of issues, effectively reverting this commit. CVE-2022-48944 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2022-48944.html CVE-2022-48944 https://bugzilla.suse.com/1229947 SUSE Bug 1229947 In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix compose size exceed boundary syzkaller found a bug: BUG: unable to handle page fault for address: ffffc9000a3b1000 #PF: supervisor write access in kernel mode #PF: error_code(0x0002) - not-present page PGD 100000067 P4D 100000067 PUD 10015f067 PMD 1121ca067 PTE 0 Oops: 0002 [#1] PREEMPT SMP CPU: 0 PID: 23489 Comm: vivid-000-vid-c Not tainted 6.1.0-rc1+ #512 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014 RIP: 0010:memcpy_erms+0x6/0x10 [...] Call Trace: <TASK> ? tpg_fill_plane_buffer+0x856/0x15b0 vivid_fillbuff+0x8ac/0x1110 vivid_thread_vid_cap_tick+0x361/0xc90 vivid_thread_vid_cap+0x21a/0x3a0 kthread+0x143/0x180 ret_from_fork+0x1f/0x30 </TASK> This is because we forget to check boundary after adjust compose->height int V4L2_SEL_TGT_CROP case. Add v4l2_rect_map_inside() to fix this problem for this case. CVE-2022-48945 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2022-48945.html CVE-2022-48945 https://bugzilla.suse.com/1230398 SUSE Bug 1230398 https://bugzilla.suse.com/1235889 SUSE Bug 1235889 In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix skb leak and crash on ooo frags act_ct adds skb->users before defragmentation. If frags arrive in order, the last frag's reference is reset in: inet_frag_reasm_prepare skb_morph which is not straightforward. However when frags arrive out of order, nobody unref the last frag, and all frags are leaked. The situation is even worse, as initiating packet capture can lead to a crash[0] when skb has been cloned and shared at the same time. Fix the issue by removing skb_get() before defragmentation. act_ct returns TC_ACT_CONSUMED when defrag failed or in progress. [0]: [ 843.804823] ------------[ cut here ]------------ [ 843.809659] kernel BUG at net/core/skbuff.c:2091! [ 843.814516] invalid opcode: 0000 [#1] PREEMPT SMP [ 843.819296] CPU: 7 PID: 0 Comm: swapper/7 Kdump: loaded Tainted: G S 6.7.0-rc3 #2 [ 843.824107] Hardware name: XFUSION 1288H V6/BC13MBSBD, BIOS 1.29 11/25/2022 [ 843.828953] RIP: 0010:pskb_expand_head+0x2ac/0x300 [ 843.833805] Code: 8b 70 28 48 85 f6 74 82 48 83 c6 08 bf 01 00 00 00 e8 38 bd ff ff 8b 83 c0 00 00 00 48 03 83 c8 00 00 00 e9 62 ff ff ff 0f 0b <0f> 0b e8 8d d0 ff ff e9 b3 fd ff ff 81 7c 24 14 40 01 00 00 4c 89 [ 843.843698] RSP: 0018:ffffc9000cce07c0 EFLAGS: 00010202 [ 843.848524] RAX: 0000000000000002 RBX: ffff88811a211d00 RCX: 0000000000000820 [ 843.853299] RDX: 0000000000000640 RSI: 0000000000000000 RDI: ffff88811a211d00 [ 843.857974] RBP: ffff888127d39518 R08: 00000000bee97314 R09: 0000000000000000 [ 843.862584] R10: 0000000000000000 R11: ffff8881109f0000 R12: 0000000000000880 [ 843.867147] R13: ffff888127d39580 R14: 0000000000000640 R15: ffff888170f7b900 [ 843.871680] FS: 0000000000000000(0000) GS:ffff889ffffc0000(0000) knlGS:0000000000000000 [ 843.876242] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 843.880778] CR2: 00007fa42affcfb8 CR3: 000000011433a002 CR4: 0000000000770ef0 [ 843.885336] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 843.889809] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 843.894229] PKRU: 55555554 [ 843.898539] Call Trace: [ 843.902772] <IRQ> [ 843.906922] ? __die_body+0x1e/0x60 [ 843.911032] ? die+0x3c/0x60 [ 843.915037] ? do_trap+0xe2/0x110 [ 843.918911] ? pskb_expand_head+0x2ac/0x300 [ 843.922687] ? do_error_trap+0x65/0x80 [ 843.926342] ? pskb_expand_head+0x2ac/0x300 [ 843.929905] ? exc_invalid_op+0x50/0x60 [ 843.933398] ? pskb_expand_head+0x2ac/0x300 [ 843.936835] ? asm_exc_invalid_op+0x1a/0x20 [ 843.940226] ? pskb_expand_head+0x2ac/0x300 [ 843.943580] inet_frag_reasm_prepare+0xd1/0x240 [ 843.946904] ip_defrag+0x5d4/0x870 [ 843.950132] nf_ct_handle_fragments+0xec/0x130 [nf_conntrack] [ 843.953334] tcf_ct_act+0x252/0xd90 [act_ct] [ 843.956473] ? tcf_mirred_act+0x516/0x5a0 [act_mirred] [ 843.959657] tcf_action_exec+0xa1/0x160 [ 843.962823] fl_classify+0x1db/0x1f0 [cls_flower] [ 843.966010] ? skb_clone+0x53/0xc0 [ 843.969173] tcf_classify+0x24d/0x420 [ 843.972333] tc_run+0x8f/0xf0 [ 843.975465] __netif_receive_skb_core+0x67a/0x1080 [ 843.978634] ? dev_gro_receive+0x249/0x730 [ 843.981759] __netif_receive_skb_list_core+0x12d/0x260 [ 843.984869] netif_receive_skb_list_internal+0x1cb/0x2f0 [ 843.987957] ? mlx5e_handle_rx_cqe_mpwrq_rep+0xfa/0x1a0 [mlx5_core] [ 843.991170] napi_complete_done+0x72/0x1a0 [ 843.994305] mlx5e_napi_poll+0x28c/0x6d0 [mlx5_core] [ 843.997501] __napi_poll+0x25/0x1b0 [ 844.000627] net_rx_action+0x256/0x330 [ 844.003705] __do_softirq+0xb3/0x29b [ 844.006718] irq_exit_rcu+0x9e/0xc0 [ 844.009672] common_interrupt+0x86/0xa0 [ 844.012537] </IRQ> [ 844.015285] <TASK> [ 844.017937] asm_common_interrupt+0x26/0x40 [ 844.020591] RIP: 0010:acpi_safe_halt+0x1b/0x20 [ 844.023247] Code: ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 65 48 8b 04 25 00 18 03 00 48 8b 00 a8 08 75 0c 66 90 0f 00 2d 81 d0 44 00 fb ---truncated--- CVE-2023-52610 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2023-52610.html CVE-2023-52610 https://bugzilla.suse.com/1221610 SUSE Bug 1221610 In the Linux kernel, the following vulnerability has been resolved: media: aspeed: Fix memory overwrite if timing is 1600x900 When capturing 1600x900, system could crash when system memory usage is tight. The way to reproduce this issue: 1. Use 1600x900 to display on host 2. Mount ISO through 'Virtual media' on OpenBMC's web 3. Run script as below on host to do sha continuously #!/bin/bash while [ [1] ]; do find /media -type f -printf '"%h/%f"\n' | xargs sha256sum done 4. Open KVM on OpenBMC's web The size of macro block captured is 8x8. Therefore, we should make sure the height of src-buf is 8 aligned to fix this issue. CVE-2023-52916 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2023-52916.html CVE-2023-52916 https://bugzilla.suse.com/1230269 SUSE Bug 1230269 In the Linux kernel, the following vulnerability has been resolved: tcp: add sanity checks to rx zerocopy TCP rx zerocopy intent is to map pages initially allocated from NIC drivers, not pages owned by a fs. This patch adds to can_map_frag() these additional checks: - Page must not be a compound one. - page->mapping must be NULL. This fixes the panic reported by ZhangPeng. syzbot was able to loopback packets built with sendfile(), mapping pages owned by an ext4 file to TCP rx zerocopy. r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r4, &(0x7f00000006c0)={0x2, 0x4e24, @empty}, 0x10) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x181e42, 0x0) fallocate(r5, 0x0, 0x0, 0x85b8) sendfile(r4, r5, 0x0, 0x8ba0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000440)=0x40) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x181e42, 0x0) CVE-2024-26640 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-26640.html CVE-2024-26640 https://bugzilla.suse.com/1221650 SUSE Bug 1221650 In the Linux kernel, the following vulnerability has been resolved: mm/swap: fix race when skipping swapcache When skipping swapcache for SWP_SYNCHRONOUS_IO, if two or more threads swapin the same entry at the same time, they get different pages (A, B). Before one thread (T0) finishes the swapin and installs page (A) to the PTE, another thread (T1) could finish swapin of page (B), swap_free the entry, then swap out the possibly modified page reusing the same entry. It breaks the pte_same check in (T0) because PTE value is unchanged, causing ABA problem. Thread (T0) will install a stalled page (A) into the PTE and cause data corruption. One possible callstack is like this: CPU0 CPU1 ---- ---- do_swap_page() do_swap_page() with same entry <direct swapin path> <direct swapin path> <alloc page A> <alloc page B> swap_read_folio() <- read to page A swap_read_folio() <- read to page B <slow on later locks or interrupt> <finished swapin first> ... set_pte_at() swap_free() <- entry is free <write to page B, now page A stalled> <swap out page B to same swap entry> pte_same() <- Check pass, PTE seems unchanged, but page A is stalled! swap_free() <- page B content lost! set_pte_at() <- staled page A installed! And besides, for ZRAM, swap_free() allows the swap device to discard the entry content, so even if page (B) is not modified, if swap_read_folio() on CPU0 happens later than swap_free() on CPU1, it may also cause data loss. To fix this, reuse swapcache_prepare which will pin the swap entry using the cache flag, and allow only one thread to swap it in, also prevent any parallel code from putting the entry in the cache. Release the pin after PT unlocked. Racers just loop and wait since it's a rare and very short event. A schedule_timeout_uninterruptible(1) call is added to avoid repeated page faults wasting too much CPU, causing livelock or adding too much noise to perf statistics. A similar livelock issue was described in commit 029c4628b2eb ("mm: swap: get rid of livelock in swapin readahead") Reproducer: This race issue can be triggered easily using a well constructed reproducer and patched brd (with a delay in read path) [1]: With latest 6.8 mainline, race caused data loss can be observed easily: $ gcc -g -lpthread test-thread-swap-race.c && ./a.out Polulating 32MB of memory region... Keep swapping out... Starting round 0... Spawning 65536 workers... 32746 workers spawned, wait for done... Round 0: Error on 0x5aa00, expected 32746, got 32743, 3 data loss! Round 0: Error on 0x395200, expected 32746, got 32743, 3 data loss! Round 0: Error on 0x3fd000, expected 32746, got 32737, 9 data loss! Round 0 Failed, 15 data loss! This reproducer spawns multiple threads sharing the same memory region using a small swap device. Every two threads updates mapped pages one by one in opposite direction trying to create a race, with one dedicated thread keep swapping out the data out using madvise. The reproducer created a reproduce rate of about once every 5 minutes, so the race should be totally possible in production. After this patch, I ran the reproducer for over a few hundred rounds and no data loss observed. Performance overhead is minimal, microbenchmark swapin 10G from 32G zram: Before: 10934698 us After: 11157121 us Cached: 13155355 us (Dropping SWP_SYNCHRONOUS_IO flag) [kasong@tencent.com: v4] Link: https://lkml.kernel.org/r/20240219082040.7495-1-ryncsn@gmail.com CVE-2024-26759 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-26759.html CVE-2024-26759 https://bugzilla.suse.com/1230340 SUSE Bug 1230340 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fixed integer types and null check locations [why]: issues fixed: - comparison with wider integer type in loop condition which can cause infinite loops - pointer dereference before null check CVE-2024-26767 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-26767.html CVE-2024-26767 https://bugzilla.suse.com/1230339 SUSE Bug 1230339 In the Linux kernel, the following vulnerability has been resolved: net: ip_tunnel: prevent perpetual headroom growth syzkaller triggered following kasan splat: BUG: KASAN: use-after-free in __skb_flow_dissect+0x19d1/0x7a50 net/core/flow_dissector.c:1170 Read of size 1 at addr ffff88812fb4000e by task syz-executor183/5191 [..] kasan_report+0xda/0x110 mm/kasan/report.c:588 __skb_flow_dissect+0x19d1/0x7a50 net/core/flow_dissector.c:1170 skb_flow_dissect_flow_keys include/linux/skbuff.h:1514 [inline] ___skb_get_hash net/core/flow_dissector.c:1791 [inline] __skb_get_hash+0xc7/0x540 net/core/flow_dissector.c:1856 skb_get_hash include/linux/skbuff.h:1556 [inline] ip_tunnel_xmit+0x1855/0x33c0 net/ipv4/ip_tunnel.c:748 ipip_tunnel_xmit+0x3cc/0x4e0 net/ipv4/ipip.c:308 __netdev_start_xmit include/linux/netdevice.h:4940 [inline] netdev_start_xmit include/linux/netdevice.h:4954 [inline] xmit_one net/core/dev.c:3548 [inline] dev_hard_start_xmit+0x13d/0x6d0 net/core/dev.c:3564 __dev_queue_xmit+0x7c1/0x3d60 net/core/dev.c:4349 dev_queue_xmit include/linux/netdevice.h:3134 [inline] neigh_connected_output+0x42c/0x5d0 net/core/neighbour.c:1592 ... ip_finish_output2+0x833/0x2550 net/ipv4/ip_output.c:235 ip_finish_output+0x31/0x310 net/ipv4/ip_output.c:323 .. iptunnel_xmit+0x5b4/0x9b0 net/ipv4/ip_tunnel_core.c:82 ip_tunnel_xmit+0x1dbc/0x33c0 net/ipv4/ip_tunnel.c:831 ipgre_xmit+0x4a1/0x980 net/ipv4/ip_gre.c:665 __netdev_start_xmit include/linux/netdevice.h:4940 [inline] netdev_start_xmit include/linux/netdevice.h:4954 [inline] xmit_one net/core/dev.c:3548 [inline] dev_hard_start_xmit+0x13d/0x6d0 net/core/dev.c:3564 ... The splat occurs because skb->data points past skb->head allocated area. This is because neigh layer does: __skb_pull(skb, skb_network_offset(skb)); ... but skb_network_offset() returns a negative offset and __skb_pull() arg is unsigned. IOW, we skb->data gets "adjusted" by a huge value. The negative value is returned because skb->head and skb->data distance is more than 64k and skb->network_header (u16) has wrapped around. The bug is in the ip_tunnel infrastructure, which can cause dev->needed_headroom to increment ad infinitum. The syzkaller reproducer consists of packets getting routed via a gre tunnel, and route of gre encapsulated packets pointing at another (ipip) tunnel. The ipip encapsulation finds gre0 as next output device. This results in the following pattern: 1). First packet is to be sent out via gre0. Route lookup found an output device, ipip0. 2). ip_tunnel_xmit for gre0 bumps gre0->needed_headroom based on the future output device, rt.dev->needed_headroom (ipip0). 3). ip output / start_xmit moves skb on to ipip0. which runs the same code path again (xmit recursion). 4). Routing step for the post-gre0-encap packet finds gre0 as output device to use for ipip0 encapsulated packet. tunl0->needed_headroom is then incremented based on the (already bumped) gre0 device headroom. This repeats for every future packet: gre0->needed_headroom gets inflated because previous packets' ipip0 step incremented rt->dev (gre0) headroom, and ipip0 incremented because gre0 needed_headroom was increased. For each subsequent packet, gre/ipip0->needed_headroom grows until post-expand-head reallocations result in a skb->head/data distance of more than 64k. Once that happens, skb->network_header (u16) wraps around when pskb_expand_head tries to make sure that skb_network_offset() is unchanged after the headroom expansion/reallocation. After this skb_network_offset(skb) returns a different (and negative) result post headroom expansion. The next trip to neigh layer (or anything else that would __skb_pull the network header) makes skb->data point to a memory location outside skb->head area. v2: Cap the needed_headroom update to an arbitarily chosen upperlimit to prevent perpetual increase instead of dropping the headroom increment completely. CVE-2024-26804 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-26804.html CVE-2024-26804 https://bugzilla.suse.com/1222629 SUSE Bug 1222629 In the Linux kernel, the following vulnerability has been resolved: net: bridge: switchdev: Skip MDB replays of deferred events on offload Before this change, generation of the list of MDB events to replay would race against the creation of new group memberships, either from the IGMP/MLD snooping logic or from user configuration. While new memberships are immediately visible to walkers of br->mdb_list, the notification of their existence to switchdev event subscribers is deferred until a later point in time. So if a replay list was generated during a time that overlapped with such a window, it would also contain a replay of the not-yet-delivered event. The driver would thus receive two copies of what the bridge internally considered to be one single event. On destruction of the bridge, only a single membership deletion event was therefore sent. As a consequence of this, drivers which reference count memberships (at least DSA), would be left with orphan groups in their hardware database when the bridge was destroyed. This is only an issue when replaying additions. While deletion events may still be pending on the deferred queue, they will already have been removed from br->mdb_list, so no duplicates can be generated in that scenario. To a user this meant that old group memberships, from a bridge in which a port was previously attached, could be reanimated (in hardware) when the port joined a new bridge, without the new bridge's knowledge. For example, on an mv88e6xxx system, create a snooping bridge and immediately add a port to it: root@infix-06-0b-00:~$ ip link add dev br0 up type bridge mcast_snooping 1 && \ > ip link set dev x3 up master br0 And then destroy the bridge: root@infix-06-0b-00:~$ ip link del dev br0 root@infix-06-0b-00:~$ mvls atu ADDRESS FID STATE Q F 0 1 2 3 4 5 6 7 8 9 a DEV:0 Marvell 88E6393X 33:33:00:00:00:6a 1 static - - 0 . . . . . . . . . . 33:33:ff:87:e4:3f 1 static - - 0 . . . . . . . . . . ff:ff:ff:ff:ff:ff 1 static - - 0 1 2 3 4 5 6 7 8 9 a root@infix-06-0b-00:~$ The two IPv6 groups remain in the hardware database because the port (x3) is notified of the host's membership twice: once via the original event and once via a replay. Since only a single delete notification is sent, the count remains at 1 when the bridge is destroyed. Then add the same port (or another port belonging to the same hardware domain) to a new bridge, this time with snooping disabled: root@infix-06-0b-00:~$ ip link add dev br1 up type bridge mcast_snooping 0 && \ > ip link set dev x3 up master br1 All multicast, including the two IPv6 groups from br0, should now be flooded, according to the policy of br1. But instead the old memberships are still active in the hardware database, causing the switch to only forward traffic to those groups towards the CPU (port 0). Eliminate the race in two steps: 1. Grab the write-side lock of the MDB while generating the replay list. This prevents new memberships from showing up while we are generating the replay list. But it leaves the scenario in which a deferred event was already generated, but not delivered, before we grabbed the lock. Therefore: 2. Make sure that no deferred version of a replay event is already enqueued to the switchdev deferred queue, before adding it to the replay list, when replaying additions. CVE-2024-26837 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-26837.html CVE-2024-26837 https://bugzilla.suse.com/1222973 SUSE Bug 1222973 ** REJECT ** This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2024-37353 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-37353.html CVE-2024-37353 https://bugzilla.suse.com/1226875 SUSE Bug 1226875 In the Linux kernel, the following vulnerability has been resolved: net: bridge: xmit: make sure we have at least eth header len bytes syzbot triggered an uninit value[1] error in bridge device's xmit path by sending a short (less than ETH_HLEN bytes) skb. To fix it check if we can actually pull that amount instead of assuming. Tested with dropwatch: drop at: br_dev_xmit+0xb93/0x12d0 [bridge] (0xffffffffc06739b3) origin: software timestamp: Mon May 13 11:31:53 2024 778214037 nsec protocol: 0x88a8 length: 2 original length: 2 drop reason: PKT_TOO_SMALL [1] BUG: KMSAN: uninit-value in br_dev_xmit+0x61d/0x1cb0 net/bridge/br_device.c:65 br_dev_xmit+0x61d/0x1cb0 net/bridge/br_device.c:65 __netdev_start_xmit include/linux/netdevice.h:4903 [inline] netdev_start_xmit include/linux/netdevice.h:4917 [inline] xmit_one net/core/dev.c:3531 [inline] dev_hard_start_xmit+0x247/0xa20 net/core/dev.c:3547 __dev_queue_xmit+0x34db/0x5350 net/core/dev.c:4341 dev_queue_xmit include/linux/netdevice.h:3091 [inline] __bpf_tx_skb net/core/filter.c:2136 [inline] __bpf_redirect_common net/core/filter.c:2180 [inline] __bpf_redirect+0x14a6/0x1620 net/core/filter.c:2187 ____bpf_clone_redirect net/core/filter.c:2460 [inline] bpf_clone_redirect+0x328/0x470 net/core/filter.c:2432 ___bpf_prog_run+0x13fe/0xe0f0 kernel/bpf/core.c:1997 __bpf_prog_run512+0xb5/0xe0 kernel/bpf/core.c:2238 bpf_dispatcher_nop_func include/linux/bpf.h:1234 [inline] __bpf_prog_run include/linux/filter.h:657 [inline] bpf_prog_run include/linux/filter.h:664 [inline] bpf_test_run+0x499/0xc30 net/bpf/test_run.c:425 bpf_prog_test_run_skb+0x14ea/0x1f20 net/bpf/test_run.c:1058 bpf_prog_test_run+0x6b7/0xad0 kernel/bpf/syscall.c:4269 __sys_bpf+0x6aa/0xd90 kernel/bpf/syscall.c:5678 __do_sys_bpf kernel/bpf/syscall.c:5767 [inline] __se_sys_bpf kernel/bpf/syscall.c:5765 [inline] __x64_sys_bpf+0xa0/0xe0 kernel/bpf/syscall.c:5765 x64_sys_call+0x96b/0x3b50 arch/x86/include/generated/asm/syscalls_64.h:322 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcf/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f CVE-2024-38538 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-38538.html CVE-2024-38538 https://bugzilla.suse.com/1226606 SUSE Bug 1226606 In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix data races in unix_release_sock/unix_stream_sendmsg A data-race condition has been identified in af_unix. In one data path, the write function unix_release_sock() atomically writes to sk->sk_shutdown using WRITE_ONCE. However, on the reader side, unix_stream_sendmsg() does not read it atomically. Consequently, this issue is causing the following KCSAN splat to occur: BUG: KCSAN: data-race in unix_release_sock / unix_stream_sendmsg write (marked) to 0xffff88867256ddbb of 1 bytes by task 7270 on cpu 28: unix_release_sock (net/unix/af_unix.c:640) unix_release (net/unix/af_unix.c:1050) sock_close (net/socket.c:659 net/socket.c:1421) __fput (fs/file_table.c:422) __fput_sync (fs/file_table.c:508) __se_sys_close (fs/open.c:1559 fs/open.c:1541) __x64_sys_close (fs/open.c:1541) x64_sys_call (arch/x86/entry/syscall_64.c:33) do_syscall_64 (arch/x86/entry/common.c:?) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) read to 0xffff88867256ddbb of 1 bytes by task 989 on cpu 14: unix_stream_sendmsg (net/unix/af_unix.c:2273) __sock_sendmsg (net/socket.c:730 net/socket.c:745) ____sys_sendmsg (net/socket.c:2584) __sys_sendmmsg (net/socket.c:2638 net/socket.c:2724) __x64_sys_sendmmsg (net/socket.c:2753 net/socket.c:2750 net/socket.c:2750) x64_sys_call (arch/x86/entry/syscall_64.c:33) do_syscall_64 (arch/x86/entry/common.c:?) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130) value changed: 0x01 -> 0x03 The line numbers are related to commit dd5a440a31fa ("Linux 6.9-rc7"). Commit e1d09c2c2f57 ("af_unix: Fix data races around sk->sk_shutdown.") addressed a comparable issue in the past regarding sk->sk_shutdown. However, it overlooked resolving this particular data path. This patch only offending unix_stream_sendmsg() function, since the other reads seem to be protected by unix_state_lock() as discussed in CVE-2024-38596 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-38596.html CVE-2024-38596 https://bugzilla.suse.com/1226846 SUSE Bug 1226846 In the Linux kernel, the following vulnerability has been resolved: vfio/pci: fix potential memory leak in vfio_intx_enable() If vfio_irq_ctx_alloc() failed will lead to 'name' memory leak. CVE-2024-38632 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-38632.html CVE-2024-38632 https://bugzilla.suse.com/1226860 SUSE Bug 1226860 In the Linux kernel, the following vulnerability has been resolved: ax25: Fix refcount imbalance on inbound connections When releasing a socket in ax25_release(), we call netdev_put() to decrease the refcount on the associated ax.25 device. However, the execution path for accepting an incoming connection never calls netdev_hold(). This imbalance leads to refcount errors, and ultimately to kernel crashes. A typical call trace for the above situation will start with one of the following errors: refcount_t: decrement hit 0; leaking memory. refcount_t: underflow; use-after-free. And will then have a trace like: Call Trace: <TASK> ? show_regs+0x64/0x70 ? __warn+0x83/0x120 ? refcount_warn_saturate+0xb2/0x100 ? report_bug+0x158/0x190 ? prb_read_valid+0x20/0x30 ? handle_bug+0x3e/0x70 ? exc_invalid_op+0x1c/0x70 ? asm_exc_invalid_op+0x1f/0x30 ? refcount_warn_saturate+0xb2/0x100 ? refcount_warn_saturate+0xb2/0x100 ax25_release+0x2ad/0x360 __sock_release+0x35/0xa0 sock_close+0x19/0x20 [...] On reboot (or any attempt to remove the interface), the kernel gets stuck in an infinite loop: unregister_netdevice: waiting for ax0 to become free. Usage count = 0 This patch corrects these issues by ensuring that we call netdev_hold() and ax25_dev_hold() for new connections in ax25_accept(). This makes the logic leading to ax25_accept() match the logic for ax25_bind(): in both cases we increment the refcount, which is ultimately decremented in ax25_release(). CVE-2024-40910 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-40910.html CVE-2024-40910 https://bugzilla.suse.com/1227832 SUSE Bug 1227832 https://bugzilla.suse.com/1227902 SUSE Bug 1227902 In the Linux kernel, the following vulnerability has been resolved: media: mtk-vcodec: potential null pointer deference in SCP The return value of devm_kzalloc() needs to be checked to avoid NULL pointer deference. This is similar to CVE-2022-3113. CVE-2024-40973 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-40973.html CVE-2024-40973 https://bugzilla.suse.com/1227890 SUSE Bug 1227890 In the Linux kernel, the following vulnerability has been resolved: tipc: force a dst refcount before doing decryption As it says in commit 3bc07321ccc2 ("xfrm: Force a dst refcount before entering the xfrm type handlers"): "Crypto requests might return asynchronous. In this case we leave the rcu protected region, so force a refcount on the skb's destination entry before we enter the xfrm type input/output handlers." On TIPC decryption path it has the same problem, and skb_dst_force() should be called before doing decryption to avoid a possible crash. Shuang reported this issue when this warning is triggered: [] WARNING: include/net/dst.h:337 tipc_sk_rcv+0x1055/0x1ea0 [tipc] [] Kdump: loaded Tainted: G W --------- - - 4.18.0-496.el8.x86_64+debug [] Workqueue: crypto cryptd_queue_worker [] RIP: 0010:tipc_sk_rcv+0x1055/0x1ea0 [tipc] [] Call Trace: [] tipc_sk_mcast_rcv+0x548/0xea0 [tipc] [] tipc_rcv+0xcf5/0x1060 [tipc] [] tipc_aead_decrypt_done+0x215/0x2e0 [tipc] [] cryptd_aead_crypt+0xdb/0x190 [] cryptd_queue_worker+0xed/0x190 [] process_one_work+0x93d/0x17e0 CVE-2024-40983 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-40983.html CVE-2024-40983 https://bugzilla.suse.com/1227819 SUSE Bug 1227819 In the Linux kernel, the following vulnerability has been resolved: bluetooth/l2cap: sync sock recv cb and release The problem occurs between the system call to close the sock and hci_rx_work, where the former releases the sock and the latter accesses it without lock protection. CPU0 CPU1 ---- ---- sock_close hci_rx_work l2cap_sock_release hci_acldata_packet l2cap_sock_kill l2cap_recv_frame sk_free l2cap_conless_channel l2cap_sock_recv_cb If hci_rx_work processes the data that needs to be received before the sock is closed, then everything is normal; Otherwise, the work thread may access the released sock when receiving data. Add a chan mutex in the rx callback of the sock to achieve synchronization between the sock release and recv cb. Sock is dead, so set chan data to NULL, avoid others use invalid sock pointer. CVE-2024-41062 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-41062.html CVE-2024-41062 https://bugzilla.suse.com/1228576 SUSE Bug 1228576 https://bugzilla.suse.com/1228578 SUSE Bug 1228578 In the Linux kernel, the following vulnerability has been resolved: nvme-fabrics: use reserved tag for reg read/write command In some scenarios, if too many commands are issued by nvme command in the same time by user tasks, this may exhaust all tags of admin_q. If a reset (nvme reset or IO timeout) occurs before these commands finish, reconnect routine may fail to update nvme regs due to insufficient tags, which will cause kernel hang forever. In order to workaround this issue, maybe we can let reg_read32()/reg_read64()/reg_write32() use reserved tags. This maybe safe for nvmf: 1. For the disable ctrl path, we will not issue connect command 2. For the enable ctrl / fw activate path, since connect and reg_xx() are called serially. So the reserved tags may still be enough while reg_xx() use reserved tags. CVE-2024-41082 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-41082.html CVE-2024-41082 https://bugzilla.suse.com/1228620 SUSE Bug 1228620 In the Linux kernel, the following vulnerability has been resolved: tcp_metrics: validate source addr length I don't see anything checking that TCP_METRICS_ATTR_SADDR_IPV4 is at least 4 bytes long, and the policy doesn't have an entry for this attribute at all (neither does it for IPv6 but v6 is manually validated). CVE-2024-42154 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-42154.html CVE-2024-42154 https://bugzilla.suse.com/1228507 SUSE Bug 1228507 In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix Virtual Memory mapping boundaries calculation Calculating the size of the mapped area as the lesser value between the requested size and the actual size does not consider the partial mapping offset. This can cause page fault access. Fix the calculation of the starting and ending addresses, the total size is now deduced from the difference between the end and start addresses. Additionally, the calculations have been rewritten in a clearer and more understandable form. [Joonas: Add Requires: tag] Requires: 60a2066c5005 ("drm/i915/gem: Adjust vma offset for framebuffer mmap offset") (cherry picked from commit 97b6784753da06d9d40232328efc5c5367e53417) CVE-2024-42259 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-42259.html CVE-2024-42259 https://bugzilla.suse.com/1229156 SUSE Bug 1229156 In the Linux kernel, the following vulnerability has been resolved: protect the fetch of ->fd[fd] in do_dup2() from mispredictions both callers have verified that fd is not greater than ->max_fds; however, misprediction might end up with tofree = fdt->fd[fd]; being speculatively executed. That's wrong for the same reasons why it's wrong in close_fd()/file_close_fd_locked(); the same solution applies - array_index_nospec(fd, fdt->max_fds) could differ from fd only in case of speculative execution on mispredicted path. CVE-2024-42265 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-42265.html CVE-2024-42265 https://bugzilla.suse.com/1229334 SUSE Bug 1229334 In the Linux kernel, the following vulnerability has been resolved: ext4: make sure the first directory block is not a hole The syzbot constructs a directory that has no dirblock but is non-inline, i.e. the first directory block is a hole. And no errors are reported when creating files in this directory in the following flow. ext4_mknod ... ext4_add_entry // Read block 0 ext4_read_dirblock(dir, block, DIRENT) bh = ext4_bread(NULL, inode, block, 0) if (!bh && (type == INDEX || type == DIRENT_HTREE)) // The first directory block is a hole // But type == DIRENT, so no error is reported. After that, we get a directory block without '.' and '..' but with a valid dentry. This may cause some code that relies on dot or dotdot (such as make_indexed_dir()) to crash. Therefore when ext4_read_dirblock() finds that the first directory block is a hole report that the filesystem is corrupted and return an error to avoid loading corrupted data from disk causing something bad. CVE-2024-42304 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-42304.html CVE-2024-42304 https://bugzilla.suse.com/1229364 SUSE Bug 1229364 In the Linux kernel, the following vulnerability has been resolved: ext4: check dot and dotdot of dx_root before making dir indexed Syzbot reports a issue as follows: ============================================ BUG: unable to handle page fault for address: ffffed11022e24fe PGD 23ffee067 P4D 23ffee067 PUD 0 Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 0 PID: 5079 Comm: syz-executor306 Not tainted 6.10.0-rc5-g55027e689933 #0 Call Trace: <TASK> make_indexed_dir+0xdaf/0x13c0 fs/ext4/namei.c:2341 ext4_add_entry+0x222a/0x25d0 fs/ext4/namei.c:2451 ext4_rename fs/ext4/namei.c:3936 [inline] ext4_rename2+0x26e5/0x4370 fs/ext4/namei.c:4214 [...] ============================================ The immediate cause of this problem is that there is only one valid dentry for the block to be split during do_split, so split==0 results in out of bounds accesses to the map triggering the issue. do_split unsigned split dx_make_map count = 1 split = count/2 = 0; continued = hash2 == map[split - 1].hash; ---> map[4294967295] The maximum length of a filename is 255 and the minimum block size is 1024, so it is always guaranteed that the number of entries is greater than or equal to 2 when do_split() is called. But syzbot's crafted image has no dot and dotdot in dir, and the dentry distribution in dirblock is as follows: bus dentry1 hole dentry2 free |xx--|xx-------------|...............|xx-------------|...............| 0 12 (8+248)=256 268 256 524 (8+256)=264 788 236 1024 So when renaming dentry1 increases its name_len length by 1, neither hole nor free is sufficient to hold the new dentry, and make_indexed_dir() is called. In make_indexed_dir() it is assumed that the first two entries of the dirblock must be dot and dotdot, so bus and dentry1 are left in dx_root because they are treated as dot and dotdot, and only dentry2 is moved to the new leaf block. That's why count is equal to 1. Therefore add the ext4_check_dx_root() helper function to add more sanity checks to dot and dotdot before starting the conversion to avoid the above issue. CVE-2024-42305 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-42305.html CVE-2024-42305 https://bugzilla.suse.com/1229363 SUSE Bug 1229363 In the Linux kernel, the following vulnerability has been resolved: udf: Avoid using corrupted block bitmap buffer When the filesystem block bitmap is corrupted, we detect the corruption while loading the bitmap and fail the allocation with error. However the next allocation from the same bitmap will notice the bitmap buffer is already loaded and tries to allocate from the bitmap with mixed results (depending on the exact nature of the bitmap corruption). Fix the problem by using BH_verified bit to indicate whether the bitmap is valid or not. CVE-2024-42306 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-42306.html CVE-2024-42306 https://bugzilla.suse.com/1229362 SUSE Bug 1229362 In the Linux kernel, the following vulnerability has been resolved: ext4: fix infinite loop when replaying fast_commit When doing fast_commit replay an infinite loop may occur due to an uninitialized extent_status struct. ext4_ext_determine_insert_hole() does not detect the replay and calls ext4_es_find_extent_range(), which will return immediately without initializing the 'es' variable. Because 'es' contains garbage, an integer overflow may happen causing an infinite loop in this function, easily reproducible using fstest generic/039. This commit fixes this issue by unconditionally initializing the structure in function ext4_es_find_extent_range(). Thanks to Zhang Yi, for figuring out the real problem! CVE-2024-43828 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-43828.html CVE-2024-43828 https://bugzilla.suse.com/1229394 SUSE Bug 1229394 In the Linux kernel, the following vulnerability has been resolved: virtio_net: Fix napi_skb_cache_put warning After the commit bdacf3e34945 ("net: Use nested-BH locking for napi_alloc_cache.") was merged, the following warning began to appear: WARNING: CPU: 5 PID: 1 at net/core/skbuff.c:1451 napi_skb_cache_put+0x82/0x4b0 __warn+0x12f/0x340 napi_skb_cache_put+0x82/0x4b0 napi_skb_cache_put+0x82/0x4b0 report_bug+0x165/0x370 handle_bug+0x3d/0x80 exc_invalid_op+0x1a/0x50 asm_exc_invalid_op+0x1a/0x20 __free_old_xmit+0x1c8/0x510 napi_skb_cache_put+0x82/0x4b0 __free_old_xmit+0x1c8/0x510 __free_old_xmit+0x1c8/0x510 __pfx___free_old_xmit+0x10/0x10 The issue arises because virtio is assuming it's running in NAPI context even when it's not, such as in the netpoll case. To resolve this, modify virtnet_poll_tx() to only set NAPI when budget is available. Same for virtnet_poll_cleantx(), which always assumed that it was in a NAPI context. CVE-2024-43835 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-43835.html CVE-2024-43835 https://bugzilla.suse.com/1229289 SUSE Bug 1229289 In the Linux kernel, the following vulnerability has been resolved: tracing: Fix overflow in get_free_elt() "tracing_map->next_elt" in get_free_elt() is at risk of overflowing. Once it overflows, new elements can still be inserted into the tracing_map even though the maximum number of elements (`max_elts`) has been reached. Continuing to insert elements after the overflow could result in the tracing_map containing "tracing_map->max_size" elements, leaving no empty entries. If any attempt is made to insert an element into a full tracing_map using `__tracing_map_insert()`, it will cause an infinite loop with preemption disabled, leading to a CPU hang problem. Fix this by preventing any further increments to "tracing_map->next_elt" once it reaches "tracing_map->max_elt". CVE-2024-43890 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-43890.html CVE-2024-43890 https://bugzilla.suse.com/1229764 SUSE Bug 1229764 ** REJECT ** This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2024-43898 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-43898.html CVE-2024-43898 https://bugzilla.suse.com/1229753 SUSE Bug 1229753 In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: disallow setting special AP channel widths Setting the AP channel width is meant for use with the normal 20/40/... MHz channel width progression, and switching around in S1G or narrow channels isn't supported. Disallow that. CVE-2024-43912 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-43912.html CVE-2024-43912 https://bugzilla.suse.com/1229830 SUSE Bug 1229830 In the Linux kernel, the following vulnerability has been resolved: md/raid5: avoid BUG_ON() while continue reshape after reassembling Currently, mdadm support --revert-reshape to abort the reshape while reassembling, as the test 07revert-grow. However, following BUG_ON() can be triggerred by the test: kernel BUG at drivers/md/raid5.c:6278! invalid opcode: 0000 [#1] PREEMPT SMP PTI irq event stamp: 158985 CPU: 6 PID: 891 Comm: md0_reshape Not tainted 6.9.0-03335-g7592a0b0049a #94 RIP: 0010:reshape_request+0x3f1/0xe60 Call Trace: <TASK> raid5_sync_request+0x43d/0x550 md_do_sync+0xb7a/0x2110 md_thread+0x294/0x2b0 kthread+0x147/0x1c0 ret_from_fork+0x59/0x70 ret_from_fork_asm+0x1a/0x30 </TASK> Root cause is that --revert-reshape update the raid_disks from 5 to 4, while reshape position is still set, and after reassembling the array, reshape position will be read from super block, then during reshape the checking of 'writepos' that is caculated by old reshape position will fail. Fix this panic the easy way first, by converting the BUG_ON() to WARN_ON(), and stop the reshape if checkings fail. Noted that mdadm must fix --revert-shape as well, and probably md/raid should enhance metadata validation as well, however this means reassemble will fail and there must be user tools to fix the wrong metadata. CVE-2024-43914 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-43914.html CVE-2024-43914 https://bugzilla.suse.com/1229790 SUSE Bug 1229790 In the Linux kernel, the following vulnerability has been resolved: sctp: Fix null-ptr-deref in reuseport_add_sock(). syzbot reported a null-ptr-deref while accessing sk2->sk_reuseport_cb in reuseport_add_sock(). [0] The repro first creates a listener with SO_REUSEPORT. Then, it creates another listener on the same port and concurrently closes the first listener. The second listen() calls reuseport_add_sock() with the first listener as sk2, where sk2->sk_reuseport_cb is not expected to be cleared concurrently, but the close() does clear it by reuseport_detach_sock(). The problem is SCTP does not properly synchronise reuseport_alloc(), reuseport_add_sock(), and reuseport_detach_sock(). The caller of reuseport_alloc() and reuseport_{add,detach}_sock() must provide synchronisation for sockets that are classified into the same reuseport group. Otherwise, such sockets form multiple identical reuseport groups, and all groups except one would be silently dead. 1. Two sockets call listen() concurrently 2. No socket in the same group found in sctp_ep_hashtable[] 3. Two sockets call reuseport_alloc() and form two reuseport groups 4. Only one group hit first in __sctp_rcv_lookup_endpoint() receives incoming packets Also, the reported null-ptr-deref could occur. TCP/UDP guarantees that would not happen by holding the hash bucket lock. Let's apply the locking strategy to __sctp_hash_endpoint() and __sctp_unhash_endpoint(). [0]: Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN PTI KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] CPU: 1 UID: 0 PID: 10230 Comm: syz-executor119 Not tainted 6.10.0-syzkaller-12585-g301927d2d2eb #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 RIP: 0010:reuseport_add_sock+0x27e/0x5e0 net/core/sock_reuseport.c:350 Code: 00 0f b7 5d 00 bf 01 00 00 00 89 de e8 1b a4 ff f7 83 fb 01 0f 85 a3 01 00 00 e8 6d a0 ff f7 49 8d 7e 12 48 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 4b 02 00 00 41 0f b7 5e 12 49 8d 7e 14 RSP: 0018:ffffc9000b947c98 EFLAGS: 00010202 RAX: 0000000000000002 RBX: ffff8880252ddf98 RCX: ffff888079478000 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000012 RBP: 0000000000000001 R08: ffffffff8993e18d R09: 1ffffffff1fef385 R10: dffffc0000000000 R11: fffffbfff1fef386 R12: ffff8880252ddac0 R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 00007f24e45b96c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007ffcced5f7b8 CR3: 00000000241be000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> __sctp_hash_endpoint net/sctp/input.c:762 [inline] sctp_hash_endpoint+0x52a/0x600 net/sctp/input.c:790 sctp_listen_start net/sctp/socket.c:8570 [inline] sctp_inet_listen+0x767/0xa20 net/sctp/socket.c:8625 __sys_listen_socket net/socket.c:1883 [inline] __sys_listen+0x1b7/0x230 net/socket.c:1894 __do_sys_listen net/socket.c:1902 [inline] __se_sys_listen net/socket.c:1900 [inline] __x64_sys_listen+0x5a/0x70 net/socket.c:1900 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f24e46039b9 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 91 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f24e45b9228 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 RAX: ffffffffffffffda RBX: 00007f24e468e428 RCX: 00007f24e46039b9 RDX: 00007f24e46039b9 RSI: 0000000000000003 RDI: 0000000000000004 RBP: 00007f24e468e420 R08: 00007f24e45b96c0 R09: 00007f24e45b96c0 R10: 00007f24e45b96c0 R11: 0000000000000246 R12: 00007f24e468e42c R13: ---truncated--- CVE-2024-44935 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-44935.html CVE-2024-44935 https://bugzilla.suse.com/1229810 SUSE Bug 1229810 In the Linux kernel, the following vulnerability has been resolved: netfilter: ctnetlink: use helper function to calculate expect ID Delete expectation path is missing a call to the nf_expect_get_id() helper function to calculate the expectation ID, otherwise LSB of the expectation object address is leaked to userspace. CVE-2024-44944 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-44944.html CVE-2024-44944 https://bugzilla.suse.com/1229899 SUSE Bug 1229899 In the Linux kernel, the following vulnerability has been resolved: kcm: Serialise kcm_sendmsg() for the same socket. syzkaller reported UAF in kcm_release(). [0] The scenario is 1. Thread A builds a skb with MSG_MORE and sets kcm->seq_skb. 2. Thread A resumes building skb from kcm->seq_skb but is blocked by sk_stream_wait_memory() 3. Thread B calls sendmsg() concurrently, finishes building kcm->seq_skb and puts the skb to the write queue 4. Thread A faces an error and finally frees skb that is already in the write queue 5. kcm_release() does double-free the skb in the write queue When a thread is building a MSG_MORE skb, another thread must not touch it. Let's add a per-sk mutex and serialise kcm_sendmsg(). [0]: BUG: KASAN: slab-use-after-free in __skb_unlink include/linux/skbuff.h:2366 [inline] BUG: KASAN: slab-use-after-free in __skb_dequeue include/linux/skbuff.h:2385 [inline] BUG: KASAN: slab-use-after-free in __skb_queue_purge_reason include/linux/skbuff.h:3175 [inline] BUG: KASAN: slab-use-after-free in __skb_queue_purge include/linux/skbuff.h:3181 [inline] BUG: KASAN: slab-use-after-free in kcm_release+0x170/0x4c8 net/kcm/kcmsock.c:1691 Read of size 8 at addr ffff0000ced0fc80 by task syz-executor329/6167 CPU: 1 PID: 6167 Comm: syz-executor329 Tainted: G B 6.8.0-rc5-syzkaller-g9abbc24128bc #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 Call trace: dump_backtrace+0x1b8/0x1e4 arch/arm64/kernel/stacktrace.c:291 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:298 __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xd0/0x124 lib/dump_stack.c:106 print_address_description mm/kasan/report.c:377 [inline] print_report+0x178/0x518 mm/kasan/report.c:488 kasan_report+0xd8/0x138 mm/kasan/report.c:601 __asan_report_load8_noabort+0x20/0x2c mm/kasan/report_generic.c:381 __skb_unlink include/linux/skbuff.h:2366 [inline] __skb_dequeue include/linux/skbuff.h:2385 [inline] __skb_queue_purge_reason include/linux/skbuff.h:3175 [inline] __skb_queue_purge include/linux/skbuff.h:3181 [inline] kcm_release+0x170/0x4c8 net/kcm/kcmsock.c:1691 __sock_release net/socket.c:659 [inline] sock_close+0xa4/0x1e8 net/socket.c:1421 __fput+0x30c/0x738 fs/file_table.c:376 ____fput+0x20/0x30 fs/file_table.c:404 task_work_run+0x230/0x2e0 kernel/task_work.c:180 exit_task_work include/linux/task_work.h:38 [inline] do_exit+0x618/0x1f64 kernel/exit.c:871 do_group_exit+0x194/0x22c kernel/exit.c:1020 get_signal+0x1500/0x15ec kernel/signal.c:2893 do_signal+0x23c/0x3b44 arch/arm64/kernel/signal.c:1249 do_notify_resume+0x74/0x1f4 arch/arm64/kernel/entry-common.c:148 exit_to_user_mode_prepare arch/arm64/kernel/entry-common.c:169 [inline] exit_to_user_mode arch/arm64/kernel/entry-common.c:178 [inline] el0_svc+0xac/0x168 arch/arm64/kernel/entry-common.c:713 el0t_64_sync_handler+0x84/0xfc arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x190/0x194 arch/arm64/kernel/entry.S:598 Allocated by task 6166: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x40/0x78 mm/kasan/common.c:68 kasan_save_alloc_info+0x70/0x84 mm/kasan/generic.c:626 unpoison_slab_object mm/kasan/common.c:314 [inline] __kasan_slab_alloc+0x74/0x8c mm/kasan/common.c:340 kasan_slab_alloc include/linux/kasan.h:201 [inline] slab_post_alloc_hook mm/slub.c:3813 [inline] slab_alloc_node mm/slub.c:3860 [inline] kmem_cache_alloc_node+0x204/0x4c0 mm/slub.c:3903 __alloc_skb+0x19c/0x3d8 net/core/skbuff.c:641 alloc_skb include/linux/skbuff.h:1296 [inline] kcm_sendmsg+0x1d3c/0x2124 net/kcm/kcmsock.c:783 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg net/socket.c:745 [inline] sock_sendmsg+0x220/0x2c0 net/socket.c:768 splice_to_socket+0x7cc/0xd58 fs/splice.c:889 do_splice_from fs/splice.c:941 [inline] direct_splice_actor+0xec/0x1d8 fs/splice.c:1164 splice_direct_to_actor+0x438/0xa0c fs/splice.c:1108 do_splice_direct_actor ---truncated--- CVE-2024-44946 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-44946.html CVE-2024-44946 https://bugzilla.suse.com/1230015 SUSE Bug 1230015 https://bugzilla.suse.com/1230016 SUSE Bug 1230016 In the Linux kernel, the following vulnerability has been resolved: x86/mtrr: Check if fixed MTRRs exist before saving them MTRRs have an obsolete fixed variant for fine grained caching control of the 640K-1MB region that uses separate MSRs. This fixed variant has a separate capability bit in the MTRR capability MSR. So far all x86 CPUs which support MTRR have this separate bit set, so it went unnoticed that mtrr_save_state() does not check the capability bit before accessing the fixed MTRR MSRs. Though on a CPU that does not support the fixed MTRR capability this results in a #GP. The #GP itself is harmless because the RDMSR fault is handled gracefully, but results in a WARN_ON(). Add the missing capability check to prevent this. CVE-2024-44948 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-44948.html CVE-2024-44948 https://bugzilla.suse.com/1230174 SUSE Bug 1230174 In the Linux kernel, the following vulnerability has been resolved: serial: sc16is7xx: fix invalid FIFO access with special register set When enabling access to the special register set, Receiver time-out and RHR interrupts can happen. In this case, the IRQ handler will try to read from the FIFO thru the RHR register at address 0x00, but address 0x00 is mapped to DLL register, resulting in erroneous FIFO reading. Call graph example: sc16is7xx_startup(): entry sc16is7xx_ms_proc(): entry sc16is7xx_set_termios(): entry sc16is7xx_set_baud(): DLH/DLL = $009C --> access special register set sc16is7xx_port_irq() entry --> IIR is 0x0C sc16is7xx_handle_rx() entry sc16is7xx_fifo_read(): --> unable to access FIFO (RHR) because it is mapped to DLL (LCR=LCR_CONF_MODE_A) sc16is7xx_set_baud(): exit --> Restore access to general register set Fix the problem by claiming the efr_lock mutex when accessing the Special register set. CVE-2024-44950 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-44950.html CVE-2024-44950 https://bugzilla.suse.com/1230180 SUSE Bug 1230180 ** REJECT ** This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2024-44952 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-44952.html CVE-2024-44952 https://bugzilla.suse.com/1230178 SUSE Bug 1230178 In the Linux kernel, the following vulnerability has been resolved: ALSA: line6: Fix racy access to midibuf There can be concurrent accesses to line6 midibuf from both the URB completion callback and the rawmidi API access. This could be a cause of KMSAN warning triggered by syzkaller below (so put as reported-by here). This patch protects the midibuf call of the former code path with a spinlock for avoiding the possible races. CVE-2024-44954 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-44954.html CVE-2024-44954 https://bugzilla.suse.com/1230176 SUSE Bug 1230176 In the Linux kernel, the following vulnerability has been resolved: drm/mgag200: Bind I2C lifetime to DRM device Managed cleanup with devm_add_action_or_reset() will release the I2C adapter when the underlying Linux device goes away. But the connector still refers to it, so this cleanup leaves behind a stale pointer in struct drm_connector.ddc. Bind the lifetime of the I2C adapter to the connector's lifetime by using DRM's managed release. When the DRM device goes away (after the Linux device) DRM will first clean up the connector and then clean up the I2C adapter. CVE-2024-44967 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-44967.html CVE-2024-44967 https://bugzilla.suse.com/1230224 SUSE Bug 1230224 In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Prevent release of buffer in I/O When a task waiting for completion of a Store Data operation is interrupted, an attempt is made to halt this operation. If this attempt fails due to a hardware or firmware problem, there is a chance that the SCLP facility might store data into buffers referenced by the original operation at a later time. Handle this situation by not releasing the referenced data buffers if the halt attempt fails. For current use cases, this might result in a leak of few pages of memory in case of a rare hardware/firmware malfunction. CVE-2024-44969 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-44969.html CVE-2024-44969 https://bugzilla.suse.com/1230200 SUSE Bug 1230200 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: SHAMPO, Fix invalid WQ linked list unlink When all the strides in a WQE have been consumed, the WQE is unlinked from the WQ linked list (mlx5_wq_ll_pop()). For SHAMPO, it is possible to receive CQEs with 0 consumed strides for the same WQE even after the WQE is fully consumed and unlinked. This triggers an additional unlink for the same wqe which corrupts the linked list. Fix this scenario by accepting 0 sized consumed strides without unlinking the WQE again. CVE-2024-44970 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-44970.html CVE-2024-44970 https://bugzilla.suse.com/1230209 SUSE Bug 1230209 In the Linux kernel, the following vulnerability has been resolved: net: dsa: bcm_sf2: Fix a possible memory leak in bcm_sf2_mdio_register() bcm_sf2_mdio_register() calls of_phy_find_device() and then phy_device_remove() in a loop to remove existing PHY devices. of_phy_find_device() eventually calls bus_find_device(), which calls get_device() on the returned struct device * to increment the refcount. The current implementation does not decrement the refcount, which causes memory leak. This commit adds the missing phy_device_free() call to decrement the refcount via put_device() to balance the refcount. CVE-2024-44971 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-44971.html CVE-2024-44971 https://bugzilla.suse.com/1230211 SUSE Bug 1230211 In the Linux kernel, the following vulnerability has been resolved: btrfs: do not clear page dirty inside extent_write_locked_range() [BUG] For subpage + zoned case, the following workload can lead to rsv data leak at unmount time: # mkfs.btrfs -f -s 4k $dev # mount $dev $mnt # fsstress -w -n 8 -d $mnt -s 1709539240 0/0: fiemap - no filename 0/1: copyrange read - no filename 0/2: write - no filename 0/3: rename - no source filename 0/4: creat f0 x:0 0 0 0/4: creat add id=0,parent=-1 0/5: writev f0[259 1 0 0 0 0] [778052,113,965] 0 0/6: ioctl(FIEMAP) f0[259 1 0 0 224 887097] [1294220,2291618343991484791,0x10000] -1 0/7: dwrite - xfsctl(XFS_IOC_DIOINFO) f0[259 1 0 0 224 887097] return 25, fallback to stat() 0/7: dwrite f0[259 1 0 0 224 887097] [696320,102400] 0 # umount $mnt The dmesg includes the following rsv leak detection warning (all call trace skipped): ------------[ cut here ]------------ WARNING: CPU: 2 PID: 4528 at fs/btrfs/inode.c:8653 btrfs_destroy_inode+0x1e0/0x200 [btrfs] ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 2 PID: 4528 at fs/btrfs/inode.c:8654 btrfs_destroy_inode+0x1a8/0x200 [btrfs] ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 2 PID: 4528 at fs/btrfs/inode.c:8660 btrfs_destroy_inode+0x1a0/0x200 [btrfs] ---[ end trace 0000000000000000 ]--- BTRFS info (device sda): last unmount of filesystem 1b4abba9-de34-4f07-9e7f-157cf12a18d6 ------------[ cut here ]------------ WARNING: CPU: 3 PID: 4528 at fs/btrfs/block-group.c:4434 btrfs_free_block_groups+0x338/0x500 [btrfs] ---[ end trace 0000000000000000 ]--- BTRFS info (device sda): space_info DATA has 268218368 free, is not full BTRFS info (device sda): space_info total=268435456, used=204800, pinned=0, reserved=0, may_use=12288, readonly=0 zone_unusable=0 BTRFS info (device sda): global_block_rsv: size 0 reserved 0 BTRFS info (device sda): trans_block_rsv: size 0 reserved 0 BTRFS info (device sda): chunk_block_rsv: size 0 reserved 0 BTRFS info (device sda): delayed_block_rsv: size 0 reserved 0 BTRFS info (device sda): delayed_refs_rsv: size 0 reserved 0 ------------[ cut here ]------------ WARNING: CPU: 3 PID: 4528 at fs/btrfs/block-group.c:4434 btrfs_free_block_groups+0x338/0x500 [btrfs] ---[ end trace 0000000000000000 ]--- BTRFS info (device sda): space_info METADATA has 267796480 free, is not full BTRFS info (device sda): space_info total=268435456, used=131072, pinned=0, reserved=0, may_use=262144, readonly=0 zone_unusable=245760 BTRFS info (device sda): global_block_rsv: size 0 reserved 0 BTRFS info (device sda): trans_block_rsv: size 0 reserved 0 BTRFS info (device sda): chunk_block_rsv: size 0 reserved 0 BTRFS info (device sda): delayed_block_rsv: size 0 reserved 0 BTRFS info (device sda): delayed_refs_rsv: size 0 reserved 0 Above $dev is a tcmu-runner emulated zoned HDD, which has a max zone append size of 64K, and the system has 64K page size. [CAUSE] I have added several trace_printk() to show the events (header skipped): > btrfs_dirty_pages: r/i=5/259 dirty start=774144 len=114688 > btrfs_dirty_pages: r/i=5/259 dirty part of page=720896 off_in_page=53248 len_in_page=12288 > btrfs_dirty_pages: r/i=5/259 dirty part of page=786432 off_in_page=0 len_in_page=65536 > btrfs_dirty_pages: r/i=5/259 dirty part of page=851968 off_in_page=0 len_in_page=36864 The above lines show our buffered write has dirtied 3 pages of inode 259 of root 5: 704K 768K 832K 896K I |////I/////////////////I///////////| I 756K 868K |///| is the dirtied range using subpage bitmaps. and 'I' is the page boundary. Meanwhile all three pages (704K, 768K, 832K) have their PageDirty flag set. > btrfs_direct_write: r/i=5/259 start dio filepos=696320 len=102400 Then direct IO writ ---truncated--- CVE-2024-44972 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-44972.html CVE-2024-44972 https://bugzilla.suse.com/1230212 SUSE Bug 1230212 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Validate TA binary size Add TA binary size validation to avoid OOB write. (cherry picked from commit c0a04e3570d72aaf090962156ad085e37c62e442) CVE-2024-44977 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-44977.html CVE-2024-44977 https://bugzilla.suse.com/1230217 SUSE Bug 1230217 In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: cleanup FB if dpu_format_populate_layout fails If the dpu_format_populate_layout() fails, then FB is prepared, but not cleaned up. This ends up leaking the pin_count on the GEM object and causes a splat during DRM file closure: msm_obj->pin_count WARNING: CPU: 2 PID: 569 at drivers/gpu/drm/msm/msm_gem.c:121 update_lru_locked+0xc4/0xcc [...] Call trace: update_lru_locked+0xc4/0xcc put_pages+0xac/0x100 msm_gem_free_object+0x138/0x180 drm_gem_object_free+0x1c/0x30 drm_gem_object_handle_put_unlocked+0x108/0x10c drm_gem_object_release_handle+0x58/0x70 idr_for_each+0x68/0xec drm_gem_release+0x28/0x40 drm_file_free+0x174/0x234 drm_release+0xb0/0x160 __fput+0xc0/0x2c8 __fput_sync+0x50/0x5c __arm64_sys_close+0x38/0x7c invoke_syscall+0x48/0x118 el0_svc_common.constprop.0+0x40/0xe0 do_el0_svc+0x1c/0x28 el0_svc+0x4c/0x120 el0t_64_sync_handler+0x100/0x12c el0t_64_sync+0x190/0x194 irq event stamp: 129818 hardirqs last enabled at (129817): [<ffffa5f6d953fcc0>] console_unlock+0x118/0x124 hardirqs last disabled at (129818): [<ffffa5f6da7dcf04>] el1_dbg+0x24/0x8c softirqs last enabled at (129808): [<ffffa5f6d94afc18>] handle_softirqs+0x4c8/0x4e8 softirqs last disabled at (129785): [<ffffa5f6d94105e4>] __do_softirq+0x14/0x20 Patchwork: https://patchwork.freedesktop.org/patch/600714/ CVE-2024-44982 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-44982.html CVE-2024-44982 https://bugzilla.suse.com/1230204 SUSE Bug 1230204 In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in ip6_finish_output2() If skb_expand_head() returns NULL, skb has been freed and associated dst/idev could also have been freed. We need to hold rcu_read_lock() to make sure the dst and associated idev are alive. CVE-2024-44986 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-44986.html CVE-2024-44986 https://bugzilla.suse.com/1230230 SUSE Bug 1230230 In the Linux kernel, the following vulnerability has been resolved: ipv6: prevent UAF in ip6_send_skb() syzbot reported an UAF in ip6_send_skb() [1] After ip6_local_out() has returned, we no longer can safely dereference rt, unless we hold rcu_read_lock(). A similar issue has been fixed in commit a688caa34beb ("ipv6: take rcu lock in rawv6_send_hdrinc()") Another potential issue in ip6_finish_output2() is handled in a separate patch. [1] BUG: KASAN: slab-use-after-free in ip6_send_skb+0x18d/0x230 net/ipv6/ip6_output.c:1964 Read of size 8 at addr ffff88806dde4858 by task syz.1.380/6530 CPU: 1 UID: 0 PID: 6530 Comm: syz.1.380 Not tainted 6.11.0-rc3-syzkaller-00306-gdf6cbc62cc9b #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Call Trace: <TASK> __dump_stack lib/dump_stack.c:93 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119 print_address_description mm/kasan/report.c:377 [inline] print_report+0x169/0x550 mm/kasan/report.c:488 kasan_report+0x143/0x180 mm/kasan/report.c:601 ip6_send_skb+0x18d/0x230 net/ipv6/ip6_output.c:1964 rawv6_push_pending_frames+0x75c/0x9e0 net/ipv6/raw.c:588 rawv6_sendmsg+0x19c7/0x23c0 net/ipv6/raw.c:926 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x1a6/0x270 net/socket.c:745 sock_write_iter+0x2dd/0x400 net/socket.c:1160 do_iter_readv_writev+0x60a/0x890 vfs_writev+0x37c/0xbb0 fs/read_write.c:971 do_writev+0x1b1/0x350 fs/read_write.c:1018 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f936bf79e79 Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f936cd7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 RAX: ffffffffffffffda RBX: 00007f936c115f80 RCX: 00007f936bf79e79 RDX: 0000000000000001 RSI: 0000000020000040 RDI: 0000000000000004 RBP: 00007f936bfe7916 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 0000000000000000 R14: 00007f936c115f80 R15: 00007fff2860a7a8 </TASK> Allocated by task 6530: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 unpoison_slab_object mm/kasan/common.c:312 [inline] __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:338 kasan_slab_alloc include/linux/kasan.h:201 [inline] slab_post_alloc_hook mm/slub.c:3988 [inline] slab_alloc_node mm/slub.c:4037 [inline] kmem_cache_alloc_noprof+0x135/0x2a0 mm/slub.c:4044 dst_alloc+0x12b/0x190 net/core/dst.c:89 ip6_blackhole_route+0x59/0x340 net/ipv6/route.c:2670 make_blackhole net/xfrm/xfrm_policy.c:3120 [inline] xfrm_lookup_route+0xd1/0x1c0 net/xfrm/xfrm_policy.c:3313 ip6_dst_lookup_flow+0x13e/0x180 net/ipv6/ip6_output.c:1257 rawv6_sendmsg+0x1283/0x23c0 net/ipv6/raw.c:898 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x1a6/0x270 net/socket.c:745 ____sys_sendmsg+0x525/0x7d0 net/socket.c:2597 ___sys_sendmsg net/socket.c:2651 [inline] __sys_sendmsg+0x2b0/0x3a0 net/socket.c:2680 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 45: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579 poison_slab_object+0xe0/0x150 mm/kasan/common.c:240 __kasan_slab_free+0x37/0x60 mm/kasan/common.c:256 kasan_slab_free include/linux/kasan.h:184 [inline] slab_free_hook mm/slub.c:2252 [inline] slab_free mm/slub.c:4473 [inline] kmem_cache_free+0x145/0x350 mm/slub.c:4548 dst_destroy+0x2ac/0x460 net/core/dst.c:124 rcu_do_batch kernel/rcu/tree.c:2569 [inline] rcu_core+0xafd/0x1830 kernel/rcu/tree. ---truncated--- CVE-2024-44987 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-44987.html CVE-2024-44987 https://bugzilla.suse.com/1230185 SUSE Bug 1230185 In the Linux kernel, the following vulnerability has been resolved: net: dsa: mv88e6xxx: Fix out-of-bound access If an ATU violation was caused by a CPU Load operation, the SPID could be larger than DSA_MAX_PORTS (the size of mv88e6xxx_chip.ports[] array). CVE-2024-44988 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-44988.html CVE-2024-44988 https://bugzilla.suse.com/1230192 SUSE Bug 1230192 In the Linux kernel, the following vulnerability has been resolved: bonding: fix xfrm real_dev null pointer dereference We shouldn't set real_dev to NULL because packets can be in transit and xfrm might call xdo_dev_offload_ok() in parallel. All callbacks assume real_dev is set. Example trace: kernel: BUG: unable to handle page fault for address: 0000000000001030 kernel: bond0: (slave eni0np1): making interface the new active one kernel: #PF: supervisor write access in kernel mode kernel: #PF: error_code(0x0002) - not-present page kernel: PGD 0 P4D 0 kernel: Oops: 0002 [#1] PREEMPT SMP kernel: CPU: 4 PID: 2237 Comm: ping Not tainted 6.7.7+ #12 kernel: Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-2.fc40 04/01/2014 kernel: RIP: 0010:nsim_ipsec_offload_ok+0xc/0x20 [netdevsim] kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: Code: e0 0f 0b 48 83 7f 38 00 74 de 0f 0b 48 8b 47 08 48 8b 37 48 8b 78 40 e9 b2 e5 9a d7 66 90 0f 1f 44 00 00 48 8b 86 80 02 00 00 <83> 80 30 10 00 00 01 b8 01 00 00 00 c3 0f 1f 80 00 00 00 00 0f 1f kernel: bond0: (slave eni0np1): making interface the new active one kernel: RSP: 0018:ffffabde81553b98 EFLAGS: 00010246 kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: kernel: RAX: 0000000000000000 RBX: ffff9eb404e74900 RCX: ffff9eb403d97c60 kernel: RDX: ffffffffc090de10 RSI: ffff9eb404e74900 RDI: ffff9eb3c5de9e00 kernel: RBP: ffff9eb3c0a42000 R08: 0000000000000010 R09: 0000000000000014 kernel: R10: 7974203030303030 R11: 3030303030303030 R12: 0000000000000000 kernel: R13: ffff9eb3c5de9e00 R14: ffffabde81553cc8 R15: ffff9eb404c53000 kernel: FS: 00007f2a77a3ad00(0000) GS:ffff9eb43bd00000(0000) knlGS:0000000000000000 kernel: CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 kernel: CR2: 0000000000001030 CR3: 00000001122ab000 CR4: 0000000000350ef0 kernel: bond0: (slave eni0np1): making interface the new active one kernel: Call Trace: kernel: <TASK> kernel: ? __die+0x1f/0x60 kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: ? page_fault_oops+0x142/0x4c0 kernel: ? do_user_addr_fault+0x65/0x670 kernel: ? kvm_read_and_reset_apf_flags+0x3b/0x50 kernel: bond0: (slave eni0np1): making interface the new active one kernel: ? exc_page_fault+0x7b/0x180 kernel: ? asm_exc_page_fault+0x22/0x30 kernel: ? nsim_bpf_uninit+0x50/0x50 [netdevsim] kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: ? nsim_ipsec_offload_ok+0xc/0x20 [netdevsim] kernel: bond0: (slave eni0np1): making interface the new active one kernel: bond_ipsec_offload_ok+0x7b/0x90 [bonding] kernel: xfrm_output+0x61/0x3b0 kernel: bond0: (slave eni0np1): bond_ipsec_add_sa_all: failed to add SA kernel: ip_push_pending_frames+0x56/0x80 CVE-2024-44989 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-44989.html CVE-2024-44989 https://bugzilla.suse.com/1230193 SUSE Bug 1230193 In the Linux kernel, the following vulnerability has been resolved: bonding: fix null pointer deref in bond_ipsec_offload_ok We must check if there is an active slave before dereferencing the pointer. CVE-2024-44990 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-44990.html CVE-2024-44990 https://bugzilla.suse.com/1230194 SUSE Bug 1230194 In the Linux kernel, the following vulnerability has been resolved: atm: idt77252: prevent use after free in dequeue_rx() We can't dereference "skb" after calling vcc->push() because the skb is released. CVE-2024-44998 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-44998.html CVE-2024-44998 https://bugzilla.suse.com/1230171 SUSE Bug 1230171 In the Linux kernel, the following vulnerability has been resolved: gtp: pull network headers in gtp_dev_xmit() syzbot/KMSAN reported use of uninit-value in get_dev_xmit() [1] We must make sure the IPv4 or Ipv6 header is pulled in skb->head before accessing fields in them. Use pskb_inet_may_pull() to fix this issue. [1] BUG: KMSAN: uninit-value in ipv6_pdp_find drivers/net/gtp.c:220 [inline] BUG: KMSAN: uninit-value in gtp_build_skb_ip6 drivers/net/gtp.c:1229 [inline] BUG: KMSAN: uninit-value in gtp_dev_xmit+0x1424/0x2540 drivers/net/gtp.c:1281 ipv6_pdp_find drivers/net/gtp.c:220 [inline] gtp_build_skb_ip6 drivers/net/gtp.c:1229 [inline] gtp_dev_xmit+0x1424/0x2540 drivers/net/gtp.c:1281 __netdev_start_xmit include/linux/netdevice.h:4913 [inline] netdev_start_xmit include/linux/netdevice.h:4922 [inline] xmit_one net/core/dev.c:3580 [inline] dev_hard_start_xmit+0x247/0xa20 net/core/dev.c:3596 __dev_queue_xmit+0x358c/0x5610 net/core/dev.c:4423 dev_queue_xmit include/linux/netdevice.h:3105 [inline] packet_xmit+0x9c/0x6c0 net/packet/af_packet.c:276 packet_snd net/packet/af_packet.c:3145 [inline] packet_sendmsg+0x90e3/0xa3a0 net/packet/af_packet.c:3177 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x30f/0x380 net/socket.c:745 __sys_sendto+0x685/0x830 net/socket.c:2204 __do_sys_sendto net/socket.c:2216 [inline] __se_sys_sendto net/socket.c:2212 [inline] __x64_sys_sendto+0x125/0x1d0 net/socket.c:2212 x64_sys_call+0x3799/0x3c10 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Uninit was created at: slab_post_alloc_hook mm/slub.c:3994 [inline] slab_alloc_node mm/slub.c:4037 [inline] kmem_cache_alloc_node_noprof+0x6bf/0xb80 mm/slub.c:4080 kmalloc_reserve+0x13d/0x4a0 net/core/skbuff.c:583 __alloc_skb+0x363/0x7b0 net/core/skbuff.c:674 alloc_skb include/linux/skbuff.h:1320 [inline] alloc_skb_with_frags+0xc8/0xbf0 net/core/skbuff.c:6526 sock_alloc_send_pskb+0xa81/0xbf0 net/core/sock.c:2815 packet_alloc_skb net/packet/af_packet.c:2994 [inline] packet_snd net/packet/af_packet.c:3088 [inline] packet_sendmsg+0x749c/0xa3a0 net/packet/af_packet.c:3177 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x30f/0x380 net/socket.c:745 __sys_sendto+0x685/0x830 net/socket.c:2204 __do_sys_sendto net/socket.c:2216 [inline] __se_sys_sendto net/socket.c:2212 [inline] __x64_sys_sendto+0x125/0x1d0 net/socket.c:2212 x64_sys_call+0x3799/0x3c10 arch/x86/include/generated/asm/syscalls_64.h:45 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f CPU: 0 UID: 0 PID: 7115 Comm: syz.1.515 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 CVE-2024-44999 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-44999.html CVE-2024-44999 https://bugzilla.suse.com/1230233 SUSE Bug 1230233 In the Linux kernel, the following vulnerability has been resolved: fs/netfs/fscache_cookie: add missing "n_accesses" check This fixes a NULL pointer dereference bug due to a data race which looks like this: BUG: kernel NULL pointer dereference, address: 0000000000000008 #PF: supervisor read access in kernel mode #PF: error_code(0x0000) - not-present page PGD 0 P4D 0 Oops: 0000 [#1] SMP PTI CPU: 33 PID: 16573 Comm: kworker/u97:799 Not tainted 6.8.7-cm4all1-hp+ #43 Hardware name: HP ProLiant DL380 Gen9/ProLiant DL380 Gen9, BIOS P89 10/17/2018 Workqueue: events_unbound netfs_rreq_write_to_cache_work RIP: 0010:cachefiles_prepare_write+0x30/0xa0 Code: 57 41 56 45 89 ce 41 55 49 89 cd 41 54 49 89 d4 55 53 48 89 fb 48 83 ec 08 48 8b 47 08 48 83 7f 10 00 48 89 34 24 48 8b 68 20 <48> 8b 45 08 4c 8b 38 74 45 49 8b 7f 50 e8 4e a9 b0 ff 48 8b 73 10 RSP: 0018:ffffb4e78113bde0 EFLAGS: 00010286 RAX: ffff976126be6d10 RBX: ffff97615cdb8438 RCX: 0000000000020000 RDX: ffff97605e6c4c68 RSI: ffff97605e6c4c60 RDI: ffff97615cdb8438 RBP: 0000000000000000 R08: 0000000000278333 R09: 0000000000000001 R10: ffff97605e6c4600 R11: 0000000000000001 R12: ffff97605e6c4c68 R13: 0000000000020000 R14: 0000000000000001 R15: ffff976064fe2c00 FS: 0000000000000000(0000) GS:ffff9776dfd40000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000008 CR3: 000000005942c002 CR4: 00000000001706f0 Call Trace: <TASK> ? __die+0x1f/0x70 ? page_fault_oops+0x15d/0x440 ? search_module_extables+0xe/0x40 ? fixup_exception+0x22/0x2f0 ? exc_page_fault+0x5f/0x100 ? asm_exc_page_fault+0x22/0x30 ? cachefiles_prepare_write+0x30/0xa0 netfs_rreq_write_to_cache_work+0x135/0x2e0 process_one_work+0x137/0x2c0 worker_thread+0x2e9/0x400 ? __pfx_worker_thread+0x10/0x10 kthread+0xcc/0x100 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x30/0x50 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1b/0x30 </TASK> Modules linked in: CR2: 0000000000000008 ---[ end trace 0000000000000000 ]--- This happened because fscache_cookie_state_machine() was slow and was still running while another process invoked fscache_unuse_cookie(); this led to a fscache_cookie_lru_do_one() call, setting the FSCACHE_COOKIE_DO_LRU_DISCARD flag, which was picked up by fscache_cookie_state_machine(), withdrawing the cookie via cachefiles_withdraw_cookie(), clearing cookie->cache_priv. At the same time, yet another process invoked cachefiles_prepare_write(), which found a NULL pointer in this code line: struct cachefiles_object *object = cachefiles_cres_object(cres); The next line crashes, obviously: struct cachefiles_cache *cache = object->volume->cache; During cachefiles_prepare_write(), the "n_accesses" counter is non-zero (via fscache_begin_operation()). The cookie must not be withdrawn until it drops to zero. The counter is checked by fscache_cookie_state_machine() before switching to FSCACHE_COOKIE_STATE_RELINQUISHING and FSCACHE_COOKIE_STATE_WITHDRAWING (in "case FSCACHE_COOKIE_STATE_FAILED"), but not for FSCACHE_COOKIE_STATE_LRU_DISCARDING ("case FSCACHE_COOKIE_STATE_ACTIVE"). This patch adds the missing check. With a non-zero access counter, the function returns and the next fscache_end_cookie_access() call will queue another fscache_cookie_state_machine() call to handle the still-pending FSCACHE_COOKIE_DO_LRU_DISCARD. CVE-2024-45000 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-45000.html CVE-2024-45000 https://bugzilla.suse.com/1230170 SUSE Bug 1230170 In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix RX buf alloc_size alignment and atomic op panic The MANA driver's RX buffer alloc_size is passed into napi_build_skb() to create SKB. skb_shinfo(skb) is located at the end of skb, and its alignment is affected by the alloc_size passed into napi_build_skb(). The size needs to be aligned properly for better performance and atomic operations. Otherwise, on ARM64 CPU, for certain MTU settings like 4000, atomic operations may panic on the skb_shinfo(skb)->dataref due to alignment fault. To fix this bug, add proper alignment to the alloc_size calculation. Sample panic info: [ 253.298819] Unable to handle kernel paging request at virtual address ffff000129ba5cce [ 253.300900] Mem abort info: [ 253.301760] ESR = 0x0000000096000021 [ 253.302825] EC = 0x25: DABT (current EL), IL = 32 bits [ 253.304268] SET = 0, FnV = 0 [ 253.305172] EA = 0, S1PTW = 0 [ 253.306103] FSC = 0x21: alignment fault Call trace: __skb_clone+0xfc/0x198 skb_clone+0x78/0xe0 raw6_local_deliver+0xfc/0x228 ip6_protocol_deliver_rcu+0x80/0x500 ip6_input_finish+0x48/0x80 ip6_input+0x48/0xc0 ip6_sublist_rcv_finish+0x50/0x78 ip6_sublist_rcv+0x1cc/0x2b8 ipv6_list_rcv+0x100/0x150 __netif_receive_skb_list_core+0x180/0x220 netif_receive_skb_list_internal+0x198/0x2a8 __napi_poll+0x138/0x250 net_rx_action+0x148/0x330 handle_softirqs+0x12c/0x3a0 CVE-2024-45001 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-45001.html CVE-2024-45001 https://bugzilla.suse.com/1230244 SUSE Bug 1230244 In the Linux kernel, the following vulnerability has been resolved: vfs: Don't evict inode under the inode lru traversing context The inode reclaiming process(See function prune_icache_sb) collects all reclaimable inodes and mark them with I_FREEING flag at first, at that time, other processes will be stuck if they try getting these inodes (See function find_inode_fast), then the reclaiming process destroy the inodes by function dispose_list(). Some filesystems(eg. ext4 with ea_inode feature, ubifs with xattr) may do inode lookup in the inode evicting callback function, if the inode lookup is operated under the inode lru traversing context, deadlock problems may happen. Case 1: In function ext4_evict_inode(), the ea inode lookup could happen if ea_inode feature is enabled, the lookup process will be stuck under the evicting context like this: 1. File A has inode i_reg and an ea inode i_ea 2. getfattr(A, xattr_buf) // i_ea is added into lru // lru->i_ea 3. Then, following three processes running like this: PA PB echo 2 > /proc/sys/vm/drop_caches shrink_slab prune_dcache_sb // i_reg is added into lru, lru->i_ea->i_reg prune_icache_sb list_lru_walk_one inode_lru_isolate i_ea->i_state |= I_FREEING // set inode state inode_lru_isolate __iget(i_reg) spin_unlock(&i_reg->i_lock) spin_unlock(lru_lock) rm file A i_reg->nlink = 0 iput(i_reg) // i_reg->nlink is 0, do evict ext4_evict_inode ext4_xattr_delete_inode ext4_xattr_inode_dec_ref_all ext4_xattr_inode_iget ext4_iget(i_ea->i_ino) iget_locked find_inode_fast __wait_on_freeing_inode(i_ea) ----→ AA deadlock dispose_list // cannot be executed by prune_icache_sb wake_up_bit(&i_ea->i_state) Case 2: In deleted inode writing function ubifs_jnl_write_inode(), file deleting process holds BASEHD's wbuf->io_mutex while getting the xattr inode, which could race with inode reclaiming process(The reclaiming process could try locking BASEHD's wbuf->io_mutex in inode evicting function), then an ABBA deadlock problem would happen as following: 1. File A has inode ia and a xattr(with inode ixa), regular file B has inode ib and a xattr. 2. getfattr(A, xattr_buf) // ixa is added into lru // lru->ixa 3. Then, following three processes running like this: PA PB PC echo 2 > /proc/sys/vm/drop_caches shrink_slab prune_dcache_sb // ib and ia are added into lru, lru->ixa->ib->ia prune_icache_sb list_lru_walk_one inode_lru_isolate ixa->i_state |= I_FREEING // set inode state inode_lru_isolate __iget(ib) spin_unlock(&ib->i_lock) spin_unlock(lru_lock) rm file B ib->nlink = 0 rm file A iput(ia) ubifs_evict_inode(ia) ubifs_jnl_delete_inode(ia) ubifs_jnl_write_inode(ia) make_reservation(BASEHD) // Lock wbuf->io_mutex ubifs_iget(ixa->i_ino) iget_locked find_inode_fast __wait_on_freeing_inode(ixa) | iput(ib) // ib->nlink is 0, do evict | ubifs_evict_inode | ubifs_jnl_delete_inode(ib) ↓ ubifs_jnl_write_inode ABBA deadlock ←-----make_reservation(BASEHD) dispose_list // cannot be executed by prune_icache_sb wake_up_bit(&ixa->i_state) Fix the possible deadlock by using new inode state flag I_LRU_ISOLATING to pin the inode in memory while inode_lru_isolate( ---truncated--- CVE-2024-45003 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-45003.html CVE-2024-45003 https://bugzilla.suse.com/1230245 SUSE Bug 1230245 In the Linux kernel, the following vulnerability has been resolved: xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration re-enumerating full-speed devices after a failed address device command can trigger a NULL pointer dereference. Full-speed devices may need to reconfigure the endpoint 0 Max Packet Size value during enumeration. Usb core calls usb_ep0_reinit() in this case, which ends up calling xhci_configure_endpoint(). On Panther point xHC the xhci_configure_endpoint() function will additionally check and reserve bandwidth in software. Other hosts do this in hardware If xHC address device command fails then a new xhci_virt_device structure is allocated as part of re-enabling the slot, but the bandwidth table pointers are not set up properly here. This triggers the NULL pointer dereference the next time usb_ep0_reinit() is called and xhci_configure_endpoint() tries to check and reserve bandwidth [46710.713538] usb 3-1: new full-speed USB device number 5 using xhci_hcd [46710.713699] usb 3-1: Device not responding to setup address. [46710.917684] usb 3-1: Device not responding to setup address. [46711.125536] usb 3-1: device not accepting address 5, error -71 [46711.125594] BUG: kernel NULL pointer dereference, address: 0000000000000008 [46711.125600] #PF: supervisor read access in kernel mode [46711.125603] #PF: error_code(0x0000) - not-present page [46711.125606] PGD 0 P4D 0 [46711.125610] Oops: Oops: 0000 [#1] PREEMPT SMP PTI [46711.125615] CPU: 1 PID: 25760 Comm: kworker/1:2 Not tainted 6.10.3_2 #1 [46711.125620] Hardware name: Gigabyte Technology Co., Ltd. [46711.125623] Workqueue: usb_hub_wq hub_event [usbcore] [46711.125668] RIP: 0010:xhci_reserve_bandwidth (drivers/usb/host/xhci.c Fix this by making sure bandwidth table pointers are set up correctly after a failed address device command, and additionally by avoiding checking for bandwidth in cases like this where no actual endpoints are added or removed, i.e. only context for default control endpoint 0 is evaluated. CVE-2024-45006 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-45006.html CVE-2024-45006 https://bugzilla.suse.com/1230247 SUSE Bug 1230247 In the Linux kernel, the following vulnerability has been resolved: char: xillybus: Don't destroy workqueue from work item running on it Triggered by a kref decrement, destroy_workqueue() may be called from within a work item for destroying its own workqueue. This illegal situation is averted by adding a module-global workqueue for exclusive use of the offending work item. Other work items continue to be queued on per-device workqueues to ensure performance. CVE-2024-45007 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-45007.html CVE-2024-45007 https://bugzilla.suse.com/1230175 SUSE Bug 1230175 In the Linux kernel, the following vulnerability has been resolved: Input: MT - limit max slots syzbot is reporting too large allocation at input_mt_init_slots(), for num_slots is supplied from userspace using ioctl(UI_DEV_CREATE). Since nobody knows possible max slots, this patch chose 1024. CVE-2024-45008 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-45008.html CVE-2024-45008 https://bugzilla.suse.com/1230248 SUSE Bug 1230248 In the Linux kernel, the following vulnerability has been resolved: char: xillybus: Check USB endpoints when probing device Ensure, as the driver probes the device, that all endpoints that the driver may attempt to access exist and are of the correct type. All XillyUSB devices must have a Bulk IN and Bulk OUT endpoint at address 1. This is verified in xillyusb_setup_base_eps(). On top of that, a XillyUSB device may have additional Bulk OUT endpoints. The information about these endpoints' addresses is deduced from a data structure (the IDT) that the driver fetches from the device while probing it. These endpoints are checked in setup_channels(). A XillyUSB device never has more than one IN endpoint, as all data towards the host is multiplexed in this single Bulk IN endpoint. This is why setup_channels() only checks OUT endpoints. CVE-2024-45011 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-45011.html CVE-2024-45011 https://bugzilla.suse.com/1230440 SUSE Bug 1230440 In the Linux kernel, the following vulnerability has been resolved: nvme: move stopping keep-alive into nvme_uninit_ctrl() Commit 4733b65d82bd ("nvme: start keep-alive after admin queue setup") moves starting keep-alive from nvme_start_ctrl() into nvme_init_ctrl_finish(), but don't move stopping keep-alive into nvme_uninit_ctrl(), so keep-alive work can be started and keep pending after failing to start controller, finally use-after-free is triggered if nvme host driver is unloaded. This patch fixes kernel panic when running nvme/004 in case that connection failure is triggered, by moving stopping keep-alive into nvme_uninit_ctrl(). This way is reasonable because keep-alive is now started in nvme_init_ctrl_finish(). CVE-2024-45013 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-45013.html CVE-2024-45013 https://bugzilla.suse.com/1230442 SUSE Bug 1230442 In the Linux kernel, the following vulnerability has been resolved: drm/msm/dpu: move dpu_encoder's connector assignment to atomic_enable() For cases where the crtc's connectors_changed was set without enable/active getting toggled , there is an atomic_enable() call followed by an atomic_disable() but without an atomic_mode_set(). This results in a NULL ptr access for the dpu_encoder_get_drm_fmt() call in the atomic_enable() as the dpu_encoder's connector was cleared in the atomic_disable() but not re-assigned as there was no atomic_mode_set() call. Fix the NULL ptr access by moving the assignment for atomic_enable() and also use drm_atomic_get_new_connector_for_encoder() to get the connector from the atomic_state. Patchwork: https://patchwork.freedesktop.org/patch/606729/ CVE-2024-45015 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-45015.html CVE-2024-45015 https://bugzilla.suse.com/1230444 SUSE Bug 1230444 In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: initialise extack before use Fix missing initialisation of extack in flow offload. CVE-2024-45018 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-45018.html CVE-2024-45018 https://bugzilla.suse.com/1230431 SUSE Bug 1230431 In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a kernel verifier crash in stacksafe() Daniel Hodges reported a kernel verifier crash when playing with sched-ext. Further investigation shows that the crash is due to invalid memory access in stacksafe(). More specifically, it is the following code: if (exact != NOT_EXACT && old->stack[spi].slot_type[i % BPF_REG_SIZE] != cur->stack[spi].slot_type[i % BPF_REG_SIZE]) return false; The 'i' iterates old->allocated_stack. If cur->allocated_stack < old->allocated_stack the out-of-bound access will happen. To fix the issue add 'i >= cur->allocated_stack' check such that if the condition is true, stacksafe() should fail. Otherwise, cur->stack[spi].slot_type[i % BPF_REG_SIZE] memory access is legal. CVE-2024-45020 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-45020.html CVE-2024-45020 https://bugzilla.suse.com/1230433 SUSE Bug 1230433 In the Linux kernel, the following vulnerability has been resolved: memcg_write_event_control(): fix a user-triggerable oops we are *not* guaranteed that anything past the terminating NUL is mapped (let alone initialized with anything sane). CVE-2024-45021 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-45021.html CVE-2024-45021 https://bugzilla.suse.com/1230434 SUSE Bug 1230434 In the Linux kernel, the following vulnerability has been resolved: s390/dasd: fix error recovery leading to data corruption on ESE devices Extent Space Efficient (ESE) or thin provisioned volumes need to be formatted on demand during usual IO processing. The dasd_ese_needs_format function checks for error codes that signal the non existence of a proper track format. The check for incorrect length is to imprecise since other error cases leading to transport of insufficient data also have this flag set. This might lead to data corruption in certain error cases for example during a storage server warmstart. Fix by removing the check for incorrect length and replacing by explicitly checking for invalid track format in transport mode. Also remove the check for file protected since this is not a valid ESE handling case. CVE-2024-45026 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-45026.html CVE-2024-45026 https://bugzilla.suse.com/1230454 SUSE Bug 1230454 In the Linux kernel, the following vulnerability has been resolved: mmc: mmc_test: Fix NULL dereference on allocation failure If the "test->highmem = alloc_pages()" allocation fails then calling __free_pages(test->highmem) will result in a NULL dereference. Also change the error code to -ENOMEM instead of returning success. CVE-2024-45028 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-45028.html CVE-2024-45028 https://bugzilla.suse.com/1230450 SUSE Bug 1230450 In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: Do not mark ACPI devices as irq safe On ACPI machines, the tegra i2c module encounters an issue due to a mutex being called inside a spinlock. This leads to the following bug: BUG: sleeping function called from invalid context at kernel/locking/mutex.c:585 ... Call trace: __might_sleep __mutex_lock_common mutex_lock_nested acpi_subsys_runtime_resume rpm_resume tegra_i2c_xfer The problem arises because during __pm_runtime_resume(), the spinlock &dev->power.lock is acquired before rpm_resume() is called. Later, rpm_resume() invokes acpi_subsys_runtime_resume(), which relies on mutexes, triggering the error. To address this issue, devices on ACPI are now marked as not IRQ-safe, considering the dependency of acpi_subsys_runtime_resume() on mutexes. CVE-2024-45029 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-45029.html CVE-2024-45029 https://bugzilla.suse.com/1230451 SUSE Bug 1230451 In the Linux kernel, the following vulnerability has been resolved: scsi: aacraid: Fix double-free on probe failure aac_probe_one() calls hardware-specific init functions through the aac_driver_ident::init pointer, all of which eventually call down to aac_init_adapter(). If aac_init_adapter() fails after allocating memory for aac_dev::queues, it frees the memory but does not clear that member. After the hardware-specific init function returns an error, aac_probe_one() goes down an error path that frees the memory pointed to by aac_dev::queues, resulting.in a double-free. CVE-2024-46673 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46673.html CVE-2024-46673 https://bugzilla.suse.com/1230506 SUSE Bug 1230506 In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: st: fix probed platform device ref count on probe error path The probe function never performs any paltform device allocation, thus error path "undo_platform_dev_alloc" is entirely bogus. It drops the reference count from the platform device being probed. If error path is triggered, this will lead to unbalanced device reference counts and premature release of device resources, thus possible use-after-free when releasing remaining devm-managed resources. CVE-2024-46674 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46674.html CVE-2024-46674 https://bugzilla.suse.com/1230507 SUSE Bug 1230507 https://bugzilla.suse.com/1230599 SUSE Bug 1230599 In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: core: Prevent USB core invalid event buffer address access This commit addresses an issue where the USB core could access an invalid event buffer address during runtime suspend, potentially causing SMMU faults and other memory issues in Exynos platforms. The problem arises from the following sequence. 1. In dwc3_gadget_suspend, there is a chance of a timeout when moving the USB core to the halt state after clearing the run/stop bit by software. 2. In dwc3_core_exit, the event buffer is cleared regardless of the USB core's status, which may lead to an SMMU faults and other memory issues. if the USB core tries to access the event buffer address. To prevent this hardware quirk on Exynos platforms, this commit ensures that the event buffer address is not cleared by software when the USB core is active during runtime suspend by checking its status before clearing the buffer address. CVE-2024-46675 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46675.html CVE-2024-46675 https://bugzilla.suse.com/1230533 SUSE Bug 1230533 In the Linux kernel, the following vulnerability has been resolved: nfc: pn533: Add poll mod list filling check In case of im_protocols value is 1 and tm_protocols value is 0 this combination successfully passes the check 'if (!im_protocols && !tm_protocols)' in the nfc_start_poll(). But then after pn533_poll_create_mod_list() call in pn533_start_poll() poll mod list will remain empty and dev->poll_mod_count will remain 0 which lead to division by zero. Normally no im protocol has value 1 in the mask, so this combination is not expected by driver. But these protocol values actually come from userspace via Netlink interface (NFC_CMD_START_POLL operation). So a broken or malicious program may pass a message containing a "bad" combination of protocol parameter values so that dev->poll_mod_count is not incremented inside pn533_poll_create_mod_list(), thus leading to division by zero. Call trace looks like: nfc_genl_start_poll() nfc_start_poll() ->start_poll() pn533_start_poll() Add poll mod list filling check. Found by Linux Verification Center (linuxtesting.org) with SVACE. CVE-2024-46676 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46676.html CVE-2024-46676 https://bugzilla.suse.com/1230535 SUSE Bug 1230535 In the Linux kernel, the following vulnerability has been resolved: gtp: fix a potential NULL pointer dereference When sockfd_lookup() fails, gtp_encap_enable_socket() returns a NULL pointer, but its callers only check for error pointers thus miss the NULL pointer case. Fix it by returning an error pointer with the error code carried from sockfd_lookup(). (I found this bug during code inspection.) CVE-2024-46677 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46677.html CVE-2024-46677 https://bugzilla.suse.com/1230549 SUSE Bug 1230549 In the Linux kernel, the following vulnerability has been resolved: ethtool: check device is present when getting link settings A sysfs reader can race with a device reset or removal, attempting to read device state when the device is not actually present. eg: [exception RIP: qed_get_current_link+17] #8 [ffffb9e4f2907c48] qede_get_link_ksettings at ffffffffc07a994a [qede] #9 [ffffb9e4f2907cd8] __rh_call_get_link_ksettings at ffffffff992b01a3 #10 [ffffb9e4f2907d38] __ethtool_get_link_ksettings at ffffffff992b04e4 #11 [ffffb9e4f2907d90] duplex_show at ffffffff99260300 #12 [ffffb9e4f2907e38] dev_attr_show at ffffffff9905a01c #13 [ffffb9e4f2907e50] sysfs_kf_seq_show at ffffffff98e0145b #14 [ffffb9e4f2907e68] seq_read at ffffffff98d902e3 #15 [ffffb9e4f2907ec8] vfs_read at ffffffff98d657d1 #16 [ffffb9e4f2907f00] ksys_read at ffffffff98d65c3f #17 [ffffb9e4f2907f38] do_syscall_64 at ffffffff98a052fb crash> struct net_device.state ffff9a9d21336000 state = 5, state 5 is __LINK_STATE_START (0b1) and __LINK_STATE_NOCARRIER (0b100). The device is not present, note lack of __LINK_STATE_PRESENT (0b10). This is the same sort of panic as observed in commit 4224cfd7fb65 ("net-sysfs: add check for netdevice being present to speed_show"). There are many other callers of __ethtool_get_link_ksettings() which don't have a device presence check. Move this check into ethtool to protect all callers. CVE-2024-46679 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46679.html CVE-2024-46679 https://bugzilla.suse.com/1230556 SUSE Bug 1230556 In the Linux kernel, the following vulnerability has been resolved: pinctrl: single: fix potential NULL dereference in pcs_get_function() pinmux_generic_get_function() can return NULL and the pointer 'function' was dereferenced without checking against NULL. Add checking of pointer 'function' in pcs_get_function(). Found by code review. CVE-2024-46685 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46685.html CVE-2024-46685 https://bugzilla.suse.com/1230515 SUSE Bug 1230515 In the Linux kernel, the following vulnerability has been resolved: smb/client: avoid dereferencing rdata=NULL in smb2_new_read_req() This happens when called from SMB2_read() while using rdma and reaching the rdma_readwrite_threshold. CVE-2024-46686 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46686.html CVE-2024-46686 https://bugzilla.suse.com/1230517 SUSE Bug 1230517 In the Linux kernel, the following vulnerability has been resolved: soc: qcom: cmd-db: Map shared memory as WC, not WB Linux does not write into cmd-db region. This region of memory is write protected by XPU. XPU may sometime falsely detect clean cache eviction as "write" into the write protected region leading to secure interrupt which causes an endless loop somewhere in Trust Zone. The only reason it is working right now is because Qualcomm Hypervisor maps the same region as Non-Cacheable memory in Stage 2 translation tables. The issue manifests if we want to use another hypervisor (like Xen or KVM), which does not know anything about those specific mappings. Changing the mapping of cmd-db memory from MEMREMAP_WB to MEMREMAP_WT/WC removes dependency on correct mappings in Stage 2 tables. This patch fixes the issue by updating the mapping to MEMREMAP_WC. I tested this on SA8155P with Xen. CVE-2024-46689 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46689.html CVE-2024-46689 https://bugzilla.suse.com/1230524 SUSE Bug 1230524 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: avoid using null object of framebuffer Instead of using state->fb->obj[0] directly, get object from framebuffer by calling drm_gem_fb_get_obj() and return error code when object is null to avoid using null object of framebuffer. (cherry picked from commit 73dd0ad9e5dad53766ea3e631303430116f834b3) CVE-2024-46694 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46694.html CVE-2024-46694 https://bugzilla.suse.com/1230511 SUSE Bug 1230511 In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Mark XDomain as unplugged when router is removed I noticed that when we do discrete host router NVM upgrade and it gets hot-removed from the PCIe side as a result of NVM firmware authentication, if there is another host connected with enabled paths we hang in tearing them down. This is due to fact that the Thunderbolt networking driver also tries to cleanup the paths and ends up blocking in tb_disconnect_xdomain_paths() waiting for the domain lock. However, at this point we already cleaned the paths in tb_stop() so there is really no need for tb_disconnect_xdomain_paths() to do that anymore. Furthermore it already checks if the XDomain is unplugged and bails out early so take advantage of that and mark the XDomain as unplugged when we remove the parent router. CVE-2024-46702 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46702.html CVE-2024-46702 https://bugzilla.suse.com/1230589 SUSE Bug 1230589 In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Make ICC_*SGI*_EL1 undef in the absence of a vGICv3 On a system with a GICv3, if a guest hasn't been configured with GICv3 and that the host is not capable of GICv2 emulation, a write to any of the ICC_*SGI*_EL1 registers is trapped to EL2. We therefore try to emulate the SGI access, only to hit a NULL pointer as no private interrupt is allocated (no GIC, remember?). The obvious fix is to give the guest what it deserves, in the shape of a UNDEF exception. CVE-2024-46707 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46707.html CVE-2024-46707 https://bugzilla.suse.com/1230582 SUSE Bug 1230582 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip wbscl_set_scaler_filter if filter is null Callers can pass null in filter (i.e. from returned from the function wbscl_get_filter_coeffs_16p) and a null check is added to ensure that is not the case. This fixes 4 NULL_RETURNS issues reported by Coverity. CVE-2024-46714 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46714.html CVE-2024-46714 https://bugzilla.suse.com/1230699 SUSE Bug 1230699 In the Linux kernel, the following vulnerability has been resolved: driver: iio: add missing checks on iio_info's callback access Some callbacks from iio_info structure are accessed without any check, so if a driver doesn't implement them trying to access the corresponding sysfs entries produce a kernel oops such as: [ 2203.527791] Unable to handle kernel NULL pointer dereference at virtual address 00000000 when execute [...] [ 2203.783416] Call trace: [ 2203.783429] iio_read_channel_info_avail from dev_attr_show+0x18/0x48 [ 2203.789807] dev_attr_show from sysfs_kf_seq_show+0x90/0x120 [ 2203.794181] sysfs_kf_seq_show from seq_read_iter+0xd0/0x4e4 [ 2203.798555] seq_read_iter from vfs_read+0x238/0x2a0 [ 2203.802236] vfs_read from ksys_read+0xa4/0xd4 [ 2203.805385] ksys_read from ret_fast_syscall+0x0/0x54 [ 2203.809135] Exception stack(0xe0badfa8 to 0xe0badff0) [ 2203.812880] dfa0: 00000003 b6f10f80 00000003 b6eab000 00020000 00000000 [ 2203.819746] dfc0: 00000003 b6f10f80 7ff00000 00000003 00000003 00000000 00020000 00000000 [ 2203.826619] dfe0: b6e1bc88 bed80958 b6e1bc94 b6e1bcb0 [ 2203.830363] Code: bad PC value [ 2203.832695] ---[ end trace 0000000000000000 ]--- CVE-2024-46715 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46715.html CVE-2024-46715 https://bugzilla.suse.com/1230700 SUSE Bug 1230700 In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: SHAMPO, Fix incorrect page release Under the following conditions: 1) No skb created yet 2) header_size == 0 (no SHAMPO header) 3) header_index + 1 % MLX5E_SHAMPO_WQ_HEADER_PER_PAGE == 0 (this is the last page fragment of a SHAMPO header page) a new skb is formed with a page that is NOT a SHAMPO header page (it is a regular data page). Further down in the same function (mlx5e_handle_rx_cqe_mpwrq_shampo()), a SHAMPO header page from header_index is released. This is wrong and it leads to SHAMPO header pages being released more than once. CVE-2024-46717 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46717.html CVE-2024-46717 https://bugzilla.suse.com/1230719 SUSE Bug 1230719 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix dereference after null check check the pointer hive before use. CVE-2024-46720 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46720.html CVE-2024-46720 https://bugzilla.suse.com/1230724 SUSE Bug 1230724 In the Linux kernel, the following vulnerability has been resolved: apparmor: fix possible NULL pointer dereference profile->parent->dents[AAFS_PROF_DIR] could be NULL only if its parent is made from __create_missing_ancestors(..) and 'ent->old' is NULL in aa_replace_profiles(..). In that case, it must return an error code and the code, -ENOENT represents its state that the path of its parent is not existed yet. BUG: kernel NULL pointer dereference, address: 0000000000000030 PGD 0 P4D 0 PREEMPT SMP PTI CPU: 4 PID: 3362 Comm: apparmor_parser Not tainted 6.8.0-24-generic #24 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014 RIP: 0010:aafs_create.constprop.0+0x7f/0x130 Code: 4c 63 e0 48 83 c4 18 4c 89 e0 5b 41 5c 41 5d 41 5e 41 5f 5d 31 d2 31 c9 31 f6 31 ff 45 31 c0 45 31 c9 45 31 d2 c3 cc cc cc cc <4d> 8b 55 30 4d 8d ba a0 00 00 00 4c 89 55 c0 4c 89 ff e8 7a 6a ae RSP: 0018:ffffc9000b2c7c98 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 00000000000041ed RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc9000b2c7cd8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff82baac10 R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 FS: 00007be9f22cf740(0000) GS:ffff88817bc00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 0000000000000030 CR3: 0000000134b08000 CR4: 00000000000006f0 Call Trace: <TASK> ? show_regs+0x6d/0x80 ? __die+0x24/0x80 ? page_fault_oops+0x99/0x1b0 ? kernelmode_fixup_or_oops+0xb2/0x140 ? __bad_area_nosemaphore+0x1a5/0x2c0 ? find_vma+0x34/0x60 ? bad_area_nosemaphore+0x16/0x30 ? do_user_addr_fault+0x2a2/0x6b0 ? exc_page_fault+0x83/0x1b0 ? asm_exc_page_fault+0x27/0x30 ? aafs_create.constprop.0+0x7f/0x130 ? aafs_create.constprop.0+0x51/0x130 __aafs_profile_mkdir+0x3d6/0x480 aa_replace_profiles+0x83f/0x1270 policy_update+0xe3/0x180 profile_load+0xbc/0x150 ? rw_verify_area+0x47/0x140 vfs_write+0x100/0x480 ? __x64_sys_openat+0x55/0xa0 ? syscall_exit_to_user_mode+0x86/0x260 ksys_write+0x73/0x100 __x64_sys_write+0x19/0x30 x64_sys_call+0x7e/0x25c0 do_syscall_64+0x7f/0x180 entry_SYSCALL_64_after_hwframe+0x78/0x80 RIP: 0033:0x7be9f211c574 Code: c7 00 16 00 00 00 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 80 3d d5 ea 0e 00 00 74 13 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 54 c3 0f 1f 00 55 48 89 e5 48 83 ec 20 48 89 RSP: 002b:00007ffd26f2b8c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 RAX: ffffffffffffffda RBX: 00005d504415e200 RCX: 00007be9f211c574 RDX: 0000000000001fc1 RSI: 00005d504418bc80 RDI: 0000000000000004 RBP: 0000000000001fc1 R08: 0000000000001fc1 R09: 0000000080000000 R10: 0000000000000000 R11: 0000000000000202 R12: 00005d504418bc80 R13: 0000000000000004 R14: 00007ffd26f2b9b0 R15: 00007ffd26f2ba30 </TASK> Modules linked in: snd_seq_dummy snd_hrtimer qrtr snd_hda_codec_generic snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec snd_hda_core snd_hwdep snd_pcm snd_seq_midi snd_seq_midi_event snd_rawmidi snd_seq snd_seq_device i2c_i801 snd_timer i2c_smbus qxl snd soundcore drm_ttm_helper lpc_ich ttm joydev input_leds serio_raw mac_hid binfmt_misc msr parport_pc ppdev lp parport efi_pstore nfnetlink dmi_sysfs qemu_fw_cfg ip_tables x_tables autofs4 hid_generic usbhid hid ahci libahci psmouse virtio_rng xhci_pci xhci_pci_renesas CR2: 0000000000000030 ---[ end trace 0000000000000000 ]--- RIP: 0010:aafs_create.constprop.0+0x7f/0x130 Code: 4c 63 e0 48 83 c4 18 4c 89 e0 5b 41 5c 41 5d 41 5e 41 5f 5d 31 d2 31 c9 31 f6 31 ff 45 31 c0 45 31 c9 45 31 d2 c3 cc cc cc cc <4d> 8b 55 30 4d 8d ba a0 00 00 00 4c 89 55 c0 4c 89 ff e8 7a 6a ae RSP: 0018:ffffc9000b2c7c98 EFLAGS: 00010246 RAX: 0000000000000000 RBX: 00000000000041ed RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 RBP: ffffc9000b2c7cd8 R08: 0000000000000000 R09: 0000000000000000 R10: 0000 ---truncated--- CVE-2024-46721 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46721.html CVE-2024-46721 https://bugzilla.suse.com/1230710 SUSE Bug 1230710 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix mc_data out-of-bounds read warning Clear warning that read mc_data[i-1] may out-of-bounds. CVE-2024-46722 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46722.html CVE-2024-46722 https://bugzilla.suse.com/1230712 SUSE Bug 1230712 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix ucode out-of-bounds read warning Clear warning that read ucode[] may out-of-bounds. CVE-2024-46723 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46723.html CVE-2024-46723 https://bugzilla.suse.com/1230702 SUSE Bug 1230702 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number Check the fb_channel_number range to avoid the array out-of-bounds read error CVE-2024-46724 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46724.html CVE-2024-46724 https://bugzilla.suse.com/1230725 SUSE Bug 1230725 In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix out-of-bounds write warning Check the ring type value to fix the out-of-bounds write warning CVE-2024-46725 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46725.html CVE-2024-46725 https://bugzilla.suse.com/1230705 SUSE Bug 1230705 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Ensure index calculation will not overflow [WHY & HOW] Make sure vmid0p72_idx, vnom0p8_idx and vmax0p9_idx calculation will never overflow and exceess array size. This fixes 3 OVERRUN and 1 INTEGER_OVERFLOW issues reported by Coverity. CVE-2024-46726 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46726.html CVE-2024-46726 https://bugzilla.suse.com/1230706 SUSE Bug 1230706 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Add otg_master NULL check within resource_log_pipe_topology_update [Why] Coverity reports NULL_RETURN warning. [How] Add otg_master NULL check. CVE-2024-46727 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46727.html CVE-2024-46727 https://bugzilla.suse.com/1230707 SUSE Bug 1230707 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check index for aux_rd_interval before using aux_rd_interval has size of 7 and should be checked. This fixes 3 OVERRUN and 1 INTEGER_OVERFLOW issues reported by Coverity. CVE-2024-46728 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46728.html CVE-2024-46728 https://bugzilla.suse.com/1230703 SUSE Bug 1230703 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Ensure array index tg_inst won't be -1 [WHY & HOW] tg_inst will be a negative if timing_generator_count equals 0, which should be checked before used. This fixes 2 OVERRUN issues reported by Coverity. CVE-2024-46730 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46730.html CVE-2024-46730 https://bugzilla.suse.com/1230701 SUSE Bug 1230701 In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: fix the Out-of-bounds read warning using index i - 1U may beyond element index for mc_data[] when i = 0. CVE-2024-46731 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46731.html CVE-2024-46731 https://bugzilla.suse.com/1230709 SUSE Bug 1230709 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Assign linear_pitch_alignment even for VM [Description] Assign linear_pitch_alignment so we don't cause a divide by 0 error in VM environments CVE-2024-46732 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46732.html CVE-2024-46732 https://bugzilla.suse.com/1230711 SUSE Bug 1230711 In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: fix kernel crash if commands allocation fails If the commands allocation fails in nvmet_tcp_alloc_cmds() the kernel crashes in nvmet_tcp_release_queue_work() because of a NULL pointer dereference. nvmet: failed to install queue 0 cntlid 1 ret 6 Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008 Fix the bug by setting queue->nr_cmds to zero in case nvmet_tcp_alloc_cmd() fails. CVE-2024-46737 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46737.html CVE-2024-46737 https://bugzilla.suse.com/1230730 SUSE Bug 1230730 In the Linux kernel, the following vulnerability has been resolved: VMCI: Fix use-after-free when removing resource in vmci_resource_remove() When removing a resource from vmci_resource_table in vmci_resource_remove(), the search is performed using the resource handle by comparing context and resource fields. It is possible though to create two resources with different types but same handle (same context and resource fields). When trying to remove one of the resources, vmci_resource_remove() may not remove the intended one, but the object will still be freed as in the case of the datagram type in vmci_datagram_destroy_handle(). vmci_resource_table will still hold a pointer to this freed resource leading to a use-after-free vulnerability. BUG: KASAN: use-after-free in vmci_handle_is_equal include/linux/vmw_vmci_defs.h:142 [inline] BUG: KASAN: use-after-free in vmci_resource_remove+0x3a1/0x410 drivers/misc/vmw_vmci/vmci_resource.c:147 Read of size 4 at addr ffff88801c16d800 by task syz-executor197/1592 Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x82/0xa9 lib/dump_stack.c:106 print_address_description.constprop.0+0x21/0x366 mm/kasan/report.c:239 __kasan_report.cold+0x7f/0x132 mm/kasan/report.c:425 kasan_report+0x38/0x51 mm/kasan/report.c:442 vmci_handle_is_equal include/linux/vmw_vmci_defs.h:142 [inline] vmci_resource_remove+0x3a1/0x410 drivers/misc/vmw_vmci/vmci_resource.c:147 vmci_qp_broker_detach+0x89a/0x11b9 drivers/misc/vmw_vmci/vmci_queue_pair.c:2182 ctx_free_ctx+0x473/0xbe1 drivers/misc/vmw_vmci/vmci_context.c:444 kref_put include/linux/kref.h:65 [inline] vmci_ctx_put drivers/misc/vmw_vmci/vmci_context.c:497 [inline] vmci_ctx_destroy+0x170/0x1d6 drivers/misc/vmw_vmci/vmci_context.c:195 vmci_host_close+0x125/0x1ac drivers/misc/vmw_vmci/vmci_host.c:143 __fput+0x261/0xa34 fs/file_table.c:282 task_work_run+0xf0/0x194 kernel/task_work.c:164 tracehook_notify_resume include/linux/tracehook.h:189 [inline] exit_to_user_mode_loop+0x184/0x189 kernel/entry/common.c:187 exit_to_user_mode_prepare+0x11b/0x123 kernel/entry/common.c:220 __syscall_exit_to_user_mode_work kernel/entry/common.c:302 [inline] syscall_exit_to_user_mode+0x18/0x42 kernel/entry/common.c:313 do_syscall_64+0x41/0x85 arch/x86/entry/common.c:86 entry_SYSCALL_64_after_hwframe+0x6e/0x0 This change ensures the type is also checked when removing the resource from vmci_resource_table in vmci_resource_remove(). CVE-2024-46738 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46738.html CVE-2024-46738 https://bugzilla.suse.com/1230731 SUSE Bug 1230731 In the Linux kernel, the following vulnerability has been resolved: uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind For primary VM Bus channels, primary_channel pointer is always NULL. This pointer is valid only for the secondary channels. Also, rescind callback is meant for primary channels only. Fix NULL pointer dereference by retrieving the device_obj from the parent for the primary channel. CVE-2024-46739 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46739.html CVE-2024-46739 https://bugzilla.suse.com/1230732 SUSE Bug 1230732 In the Linux kernel, the following vulnerability has been resolved: of/irq: Prevent device address out-of-bounds read in interrupt map walk When of_irq_parse_raw() is invoked with a device address smaller than the interrupt parent node (from #address-cells property), KASAN detects the following out-of-bounds read when populating the initial match table (dyndbg="func of_irq_parse_* +p"): OF: of_irq_parse_one: dev=/soc@0/picasso/watchdog, index=0 OF: parent=/soc@0/pci@878000000000/gpio0@17,0, intsize=2 OF: intspec=4 OF: of_irq_parse_raw: ipar=/soc@0/pci@878000000000/gpio0@17,0, size=2 OF: -> addrsize=3 ================================================================== BUG: KASAN: slab-out-of-bounds in of_irq_parse_raw+0x2b8/0x8d0 Read of size 4 at addr ffffff81beca5608 by task bash/764 CPU: 1 PID: 764 Comm: bash Tainted: G O 6.1.67-484c613561-nokia_sm_arm64 #1 Hardware name: Unknown Unknown Product/Unknown Product, BIOS 2023.01-12.24.03-dirty 01/01/2023 Call trace: dump_backtrace+0xdc/0x130 show_stack+0x1c/0x30 dump_stack_lvl+0x6c/0x84 print_report+0x150/0x448 kasan_report+0x98/0x140 __asan_load4+0x78/0xa0 of_irq_parse_raw+0x2b8/0x8d0 of_irq_parse_one+0x24c/0x270 parse_interrupts+0xc0/0x120 of_fwnode_add_links+0x100/0x2d0 fw_devlink_parse_fwtree+0x64/0xc0 device_add+0xb38/0xc30 of_device_add+0x64/0x90 of_platform_device_create_pdata+0xd0/0x170 of_platform_bus_create+0x244/0x600 of_platform_notify+0x1b0/0x254 blocking_notifier_call_chain+0x9c/0xd0 __of_changeset_entry_notify+0x1b8/0x230 __of_changeset_apply_notify+0x54/0xe4 of_overlay_fdt_apply+0xc04/0xd94 ... The buggy address belongs to the object at ffffff81beca5600 which belongs to the cache kmalloc-128 of size 128 The buggy address is located 8 bytes inside of 128-byte region [ffffff81beca5600, ffffff81beca5680) The buggy address belongs to the physical page: page:00000000230d3d03 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1beca4 head:00000000230d3d03 order:1 compound_mapcount:0 compound_pincount:0 flags: 0x8000000000010200(slab|head|zone=2) raw: 8000000000010200 0000000000000000 dead000000000122 ffffff810000c300 raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 page dumped because: kasan: bad access detected Memory state around the buggy address: ffffff81beca5500: 04 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffffff81beca5580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc >ffffff81beca5600: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ^ ffffff81beca5680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc ffffff81beca5700: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc ================================================================== OF: -> got it ! Prevent the out-of-bounds read by copying the device address into a buffer of sufficient size. CVE-2024-46743 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46743.html CVE-2024-46743 https://bugzilla.suse.com/1230756 SUSE Bug 1230756 In the Linux kernel, the following vulnerability has been resolved: Squashfs: sanity check symbolic link size Syzkiller reports a "KMSAN: uninit-value in pick_link" bug. This is caused by an uninitialised page, which is ultimately caused by a corrupted symbolic link size read from disk. The reason why the corrupted symlink size causes an uninitialised page is due to the following sequence of events: 1. squashfs_read_inode() is called to read the symbolic link from disk. This assigns the corrupted value 3875536935 to inode->i_size. 2. Later squashfs_symlink_read_folio() is called, which assigns this corrupted value to the length variable, which being a signed int, overflows producing a negative number. 3. The following loop that fills in the page contents checks that the copied bytes is less than length, which being negative means the loop is skipped, producing an uninitialised page. This patch adds a sanity check which checks that the symbolic link size is not larger than expected. -- V2: fix spelling mistake. CVE-2024-46744 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46744.html CVE-2024-46744 https://bugzilla.suse.com/1230747 SUSE Bug 1230747 In the Linux kernel, the following vulnerability has been resolved: Input: uinput - reject requests with unreasonable number of slots When exercising uinput interface syzkaller may try setting up device with a really large number of slots, which causes memory allocation failure in input_mt_init_slots(). While this allocation failure is handled properly and request is rejected, it results in syzkaller reports. Additionally, such request may put undue burden on the system which will try to free a lot of memory for a bogus request. Fix it by limiting allowed number of slots to 100. This can easily be extended if we see devices that can track more than 100 contacts. CVE-2024-46745 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46745.html CVE-2024-46745 https://bugzilla.suse.com/1230748 SUSE Bug 1230748 In the Linux kernel, the following vulnerability has been resolved: HID: amd_sfh: free driver_data after destroying hid device HID driver callbacks aren't called anymore once hid_destroy_device() has been called. Hence, hid driver_data should be freed only after the hid_destroy_device() function returned as driver_data is used in several callbacks. I observed a crash with kernel 6.10.0 on my T14s Gen 3, after enabling KASAN to debug memory allocation, I got this output: [ 13.050438] ================================================================== [ 13.054060] BUG: KASAN: slab-use-after-free in amd_sfh_get_report+0x3ec/0x530 [amd_sfh] [ 13.054809] psmouse serio1: trackpoint: Synaptics TrackPoint firmware: 0x02, buttons: 3/3 [ 13.056432] Read of size 8 at addr ffff88813152f408 by task (udev-worker)/479 [ 13.060970] CPU: 5 PID: 479 Comm: (udev-worker) Not tainted 6.10.0-arch1-2 #1 893bb55d7f0073f25c46adbb49eb3785fefd74b0 [ 13.063978] Hardware name: LENOVO 21CQCTO1WW/21CQCTO1WW, BIOS R22ET70W (1.40 ) 03/21/2024 [ 13.067860] Call Trace: [ 13.069383] input: TPPS/2 Synaptics TrackPoint as /devices/platform/i8042/serio1/input/input8 [ 13.071486] <TASK> [ 13.071492] dump_stack_lvl+0x5d/0x80 [ 13.074870] snd_hda_intel 0000:33:00.6: enabling device (0000 -> 0002) [ 13.078296] ? amd_sfh_get_report+0x3ec/0x530 [amd_sfh 05f43221435b5205f734cd9da29399130f398a38] [ 13.082199] print_report+0x174/0x505 [ 13.085776] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 13.089367] ? srso_alias_return_thunk+0x5/0xfbef5 [ 13.093255] ? amd_sfh_get_report+0x3ec/0x530 [amd_sfh 05f43221435b5205f734cd9da29399130f398a38] [ 13.097464] kasan_report+0xc8/0x150 [ 13.101461] ? amd_sfh_get_report+0x3ec/0x530 [amd_sfh 05f43221435b5205f734cd9da29399130f398a38] [ 13.105802] amd_sfh_get_report+0x3ec/0x530 [amd_sfh 05f43221435b5205f734cd9da29399130f398a38] [ 13.110303] amdtp_hid_request+0xb8/0x110 [amd_sfh 05f43221435b5205f734cd9da29399130f398a38] [ 13.114879] ? srso_alias_return_thunk+0x5/0xfbef5 [ 13.119450] sensor_hub_get_feature+0x1d3/0x540 [hid_sensor_hub 3f13be3016ff415bea03008d45d99da837ee3082] [ 13.124097] hid_sensor_parse_common_attributes+0x4d0/0xad0 [hid_sensor_iio_common c3a5cbe93969c28b122609768bbe23efe52eb8f5] [ 13.127404] ? srso_alias_return_thunk+0x5/0xfbef5 [ 13.131925] ? __pfx_hid_sensor_parse_common_attributes+0x10/0x10 [hid_sensor_iio_common c3a5cbe93969c28b122609768bbe23efe52eb8f5] [ 13.136455] ? _raw_spin_lock_irqsave+0x96/0xf0 [ 13.140197] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 13.143602] ? devm_iio_device_alloc+0x34/0x50 [industrialio 3d261d5e5765625d2b052be40e526d62b1d2123b] [ 13.147234] ? srso_alias_return_thunk+0x5/0xfbef5 [ 13.150446] ? __devm_add_action+0x167/0x1d0 [ 13.155061] hid_gyro_3d_probe+0x120/0x7f0 [hid_sensor_gyro_3d 63da36a143b775846ab2dbb86c343b401b5e3172] [ 13.158581] ? srso_alias_return_thunk+0x5/0xfbef5 [ 13.161814] platform_probe+0xa2/0x150 [ 13.165029] really_probe+0x1e3/0x8a0 [ 13.168243] __driver_probe_device+0x18c/0x370 [ 13.171500] driver_probe_device+0x4a/0x120 [ 13.175000] __driver_attach+0x190/0x4a0 [ 13.178521] ? __pfx___driver_attach+0x10/0x10 [ 13.181771] bus_for_each_dev+0x106/0x180 [ 13.185033] ? __pfx__raw_spin_lock+0x10/0x10 [ 13.188229] ? __pfx_bus_for_each_dev+0x10/0x10 [ 13.191446] ? srso_alias_return_thunk+0x5/0xfbef5 [ 13.194382] bus_add_driver+0x29e/0x4d0 [ 13.197328] driver_register+0x1a5/0x360 [ 13.200283] ? __pfx_hid_gyro_3d_platform_driver_init+0x10/0x10 [hid_sensor_gyro_3d 63da36a143b775846ab2dbb86c343b401b5e3172] [ 13.203362] do_one_initcall+0xa7/0x380 [ 13.206432] ? __pfx_do_one_initcall+0x10/0x10 [ 13.210175] ? srso_alias_return_thunk+0x5/0xfbef5 [ 13.213211] ? kasan_unpoison+0x44/0x70 [ 13.216688] do_init_module+0x238/0x750 [ 13.2196 ---truncated--- CVE-2024-46746 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46746.html CVE-2024-46746 https://bugzilla.suse.com/1230751 SUSE Bug 1230751 In the Linux kernel, the following vulnerability has been resolved: HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup report_fixup for the Cougar 500k Gaming Keyboard was not verifying that the report descriptor size was correct before accessing it CVE-2024-46747 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46747.html CVE-2024-46747 https://bugzilla.suse.com/1230752 SUSE Bug 1230752 In the Linux kernel, the following vulnerability has been resolved: PCI: Add missing bridge lock to pci_bus_lock() One of the true positives that the cfg_access_lock lockdep effort identified is this sequence: WARNING: CPU: 14 PID: 1 at drivers/pci/pci.c:4886 pci_bridge_secondary_bus_reset+0x5d/0x70 RIP: 0010:pci_bridge_secondary_bus_reset+0x5d/0x70 Call Trace: <TASK> ? __warn+0x8c/0x190 ? pci_bridge_secondary_bus_reset+0x5d/0x70 ? report_bug+0x1f8/0x200 ? handle_bug+0x3c/0x70 ? exc_invalid_op+0x18/0x70 ? asm_exc_invalid_op+0x1a/0x20 ? pci_bridge_secondary_bus_reset+0x5d/0x70 pci_reset_bus+0x1d8/0x270 vmd_probe+0x778/0xa10 pci_device_probe+0x95/0x120 Where pci_reset_bus() users are triggering unlocked secondary bus resets. Ironically pci_bus_reset(), several calls down from pci_reset_bus(), uses pci_bus_lock() before issuing the reset which locks everything *but* the bridge itself. For the same motivation as adding: bridge = pci_upstream_bridge(dev); if (bridge) pci_dev_lock(bridge); to pci_reset_function() for the "bus" and "cxl_bus" reset cases, add pci_dev_lock() for @bus->self to pci_bus_lock(). [bhelgaas: squash in recursive locking deadlock fix from Keith Busch: https://lore.kernel.org/r/20240711193650.701834-1-kbusch@meta.com] CVE-2024-46750 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46750.html CVE-2024-46750 https://bugzilla.suse.com/1230783 SUSE Bug 1230783 In the Linux kernel, the following vulnerability has been resolved: btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info() Instead of doing a BUG_ON() handle the error by returning -EUCLEAN, aborting the transaction and logging an error message. CVE-2024-46751 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46751.html CVE-2024-46751 https://bugzilla.suse.com/1230786 SUSE Bug 1230786 In the Linux kernel, the following vulnerability has been resolved: btrfs: replace BUG_ON() with error handling at update_ref_for_cow() Instead of a BUG_ON() just return an error, log an error message and abort the transaction in case we find an extent buffer belonging to the relocation tree that doesn't have the full backref flag set. This is unexpected and should never happen (save for bugs or a potential bad memory). CVE-2024-46752 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46752.html CVE-2024-46752 https://bugzilla.suse.com/1230794 SUSE Bug 1230794 In the Linux kernel, the following vulnerability has been resolved: btrfs: handle errors from btrfs_dec_ref() properly In walk_up_proc() we BUG_ON(ret) from btrfs_dec_ref(). This is incorrect, we have proper error handling here, return the error. CVE-2024-46753 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46753.html CVE-2024-46753 https://bugzilla.suse.com/1230796 SUSE Bug 1230796 In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id() mwifiex_get_priv_by_id() returns the priv pointer corresponding to the bss_num and bss_type, but without checking if the priv is actually currently in use. Unused priv pointers do not have a wiphy attached to them which can lead to NULL pointer dereferences further down the callstack. Fix this by returning only used priv pointers which have priv->bss_mode set to something else than NL80211_IFTYPE_UNSPECIFIED. Said NULL pointer dereference happened when an Accesspoint was started with wpa_supplicant -i mlan0 with this config: network={ ssid="somessid" mode=2 frequency=2412 key_mgmt=WPA-PSK WPA-PSK-SHA256 proto=RSN group=CCMP pairwise=CCMP psk="12345678" } When waiting for the AP to be established, interrupting wpa_supplicant with <ctrl-c> and starting it again this happens: | Unable to handle kernel NULL pointer dereference at virtual address 0000000000000140 | Mem abort info: | ESR = 0x0000000096000004 | EC = 0x25: DABT (current EL), IL = 32 bits | SET = 0, FnV = 0 | EA = 0, S1PTW = 0 | FSC = 0x04: level 0 translation fault | Data abort info: | ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 | CM = 0, WnR = 0, TnD = 0, TagAccess = 0 | GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 | user pgtable: 4k pages, 48-bit VAs, pgdp=0000000046d96000 | [0000000000000140] pgd=0000000000000000, p4d=0000000000000000 | Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP | Modules linked in: caam_jr caamhash_desc spidev caamalg_desc crypto_engine authenc libdes mwifiex_sdio +mwifiex crct10dif_ce cdc_acm onboard_usb_hub fsl_imx8_ddr_perf imx8m_ddrc rtc_ds1307 lm75 rtc_snvs +imx_sdma caam imx8mm_thermal spi_imx error imx_cpufreq_dt fuse ip_tables x_tables ipv6 | CPU: 0 PID: 8 Comm: kworker/0:1 Not tainted 6.9.0-00007-g937242013fce-dirty #18 | Hardware name: somemachine (DT) | Workqueue: events sdio_irq_work | pstate: 00000005 (nzcv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) | pc : mwifiex_get_cfp+0xd8/0x15c [mwifiex] | lr : mwifiex_get_cfp+0x34/0x15c [mwifiex] | sp : ffff8000818b3a70 | x29: ffff8000818b3a70 x28: ffff000006bfd8a5 x27: 0000000000000004 | x26: 000000000000002c x25: 0000000000001511 x24: 0000000002e86bc9 | x23: ffff000006bfd996 x22: 0000000000000004 x21: ffff000007bec000 | x20: 000000000000002c x19: 0000000000000000 x18: 0000000000000000 | x17: 000000040044ffff x16: 00500072b5503510 x15: ccc283740681e517 | x14: 0201000101006d15 x13: 0000000002e8ff43 x12: 002c01000000ffb1 | x11: 0100000000000000 x10: 02e8ff43002c0100 x9 : 0000ffb100100157 | x8 : ffff000003d20000 x7 : 00000000000002f1 x6 : 00000000ffffe124 | x5 : 0000000000000001 x4 : 0000000000000003 x3 : 0000000000000000 | x2 : 0000000000000000 x1 : 0001000000011001 x0 : 0000000000000000 | Call trace: | mwifiex_get_cfp+0xd8/0x15c [mwifiex] | mwifiex_parse_single_response_buf+0x1d0/0x504 [mwifiex] | mwifiex_handle_event_ext_scan_report+0x19c/0x2f8 [mwifiex] | mwifiex_process_sta_event+0x298/0xf0c [mwifiex] | mwifiex_process_event+0x110/0x238 [mwifiex] | mwifiex_main_process+0x428/0xa44 [mwifiex] | mwifiex_sdio_interrupt+0x64/0x12c [mwifiex_sdio] | process_sdio_pending_irqs+0x64/0x1b8 | sdio_irq_work+0x4c/0x7c | process_one_work+0x148/0x2a0 | worker_thread+0x2fc/0x40c | kthread+0x110/0x114 | ret_from_fork+0x10/0x20 | Code: a94153f3 a8c37bfd d50323bf d65f03c0 (f940a000) | ---[ end trace 0000000000000000 ]--- CVE-2024-46755 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46755.html CVE-2024-46755 https://bugzilla.suse.com/1230802 SUSE Bug 1230802 ** REJECT ** This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2024-46756 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46756.html CVE-2024-46756 https://bugzilla.suse.com/1230806 SUSE Bug 1230806 ** REJECT ** This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. CVE-2024-46758 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46758.html CVE-2024-46758 https://bugzilla.suse.com/1230812 SUSE Bug 1230812 In the Linux kernel, the following vulnerability has been resolved: hwmon: (adc128d818) Fix underflows seen when writing limit attributes DIV_ROUND_CLOSEST() after kstrtol() results in an underflow if a large negative number such as -9223372036854775808 is provided by the user. Fix it by reordering clamp_val() and DIV_ROUND_CLOSEST() operations. CVE-2024-46759 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46759.html CVE-2024-46759 https://bugzilla.suse.com/1230814 SUSE Bug 1230814 In the Linux kernel, the following vulnerability has been resolved: pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv The hotplug driver for powerpc (pci/hotplug/pnv_php.c) causes a kernel crash when we try to hot-unplug/disable the PCIe switch/bridge from the PHB. The crash occurs because although the MSI data structure has been released during disable/hot-unplug path and it has been assigned with NULL, still during unregistration the code was again trying to explicitly disable the MSI which causes the NULL pointer dereference and kernel crash. The patch fixes the check during unregistration path to prevent invoking pci_disable_msi/msix() since its data structure is already freed. CVE-2024-46761 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46761.html CVE-2024-46761 https://bugzilla.suse.com/1230761 SUSE Bug 1230761 In the Linux kernel, the following vulnerability has been resolved: can: bcm: Remove proc entry when dev is unregistered. syzkaller reported a warning in bcm_connect() below. [0] The repro calls connect() to vxcan1, removes vxcan1, and calls connect() with ifindex == 0. Calling connect() for a BCM socket allocates a proc entry. Then, bcm_sk(sk)->bound is set to 1 to prevent further connect(). However, removing the bound device resets bcm_sk(sk)->bound to 0 in bcm_notify(). The 2nd connect() tries to allocate a proc entry with the same name and sets NULL to bcm_sk(sk)->bcm_proc_read, leaking the original proc entry. Since the proc entry is available only for connect()ed sockets, let's clean up the entry when the bound netdev is unregistered. [0]: proc_dir_entry 'can-bcm/2456' already registered WARNING: CPU: 1 PID: 394 at fs/proc/generic.c:376 proc_register+0x645/0x8f0 fs/proc/generic.c:375 Modules linked in: CPU: 1 PID: 394 Comm: syz-executor403 Not tainted 6.10.0-rc7-g852e42cc2dd4 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 RIP: 0010:proc_register+0x645/0x8f0 fs/proc/generic.c:375 Code: 00 00 00 00 00 48 85 ed 0f 85 97 02 00 00 4d 85 f6 0f 85 9f 02 00 00 48 c7 c7 9b cb cf 87 48 89 de 4c 89 fa e8 1c 6f eb fe 90 <0f> 0b 90 90 48 c7 c7 98 37 99 89 e8 cb 7e 22 05 bb 00 00 00 10 48 RSP: 0018:ffa0000000cd7c30 EFLAGS: 00010246 RAX: 9e129be1950f0200 RBX: ff1100011b51582c RCX: ff1100011857cd80 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 RBP: 0000000000000000 R08: ffd400000000000f R09: ff1100013e78cac0 R10: ffac800000cd7980 R11: ff1100013e12b1f0 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000000 R15: ff1100011a99a2ec FS: 00007fbd7086f740(0000) GS:ff1100013fd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000200071c0 CR3: 0000000118556004 CR4: 0000000000771ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> proc_create_net_single+0x144/0x210 fs/proc/proc_net.c:220 bcm_connect+0x472/0x840 net/can/bcm.c:1673 __sys_connect_file net/socket.c:2049 [inline] __sys_connect+0x5d2/0x690 net/socket.c:2066 __do_sys_connect net/socket.c:2076 [inline] __se_sys_connect net/socket.c:2073 [inline] __x64_sys_connect+0x8f/0x100 net/socket.c:2073 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xd9/0x1c0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x4b/0x53 RIP: 0033:0x7fbd708b0e5d Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d 73 9f 1b 00 f7 d8 64 89 01 48 RSP: 002b:00007fff8cd33f08 EFLAGS: 00000246 ORIG_RAX: 000000000000002a RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fbd708b0e5d RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000003 RBP: 0000000000000000 R08: 0000000000000040 R09: 0000000000000040 R10: 0000000000000040 R11: 0000000000000246 R12: 00007fff8cd34098 R13: 0000000000401280 R14: 0000000000406de8 R15: 00007fbd70ab9000 </TASK> remove_proc_entry: removing non-empty directory 'net/can-bcm', leaking at least '2456' CVE-2024-46771 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46771.html CVE-2024-46771 https://bugzilla.suse.com/1230766 SUSE Bug 1230766 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check denominator crb_pipes before used [WHAT & HOW] A denominator cannot be 0, and is checked before used. This fixes 2 DIVIDE_BY_ZERO issues reported by Coverity. CVE-2024-46772 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46772.html CVE-2024-46772 https://bugzilla.suse.com/1230772 SUSE Bug 1230772 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check denominator pbn_div before used [WHAT & HOW] A denominator cannot be 0, and is checked before used. This fixes 1 DIVIDE_BY_ZERO issue reported by Coverity. CVE-2024-46773 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46773.html CVE-2024-46773 https://bugzilla.suse.com/1230791 SUSE Bug 1230791 In the Linux kernel, the following vulnerability has been resolved: powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() Smatch warns: arch/powerpc/kernel/rtas.c:1932 __do_sys_rtas() warn: potential spectre issue 'args.args' [r] (local cap) The 'nargs' and 'nret' locals come directly from a user-supplied buffer and are used as indexes into a small stack-based array and as inputs to copy_to_user() after they are subject to bounds checks. Use array_index_nospec() after the bounds checks to clamp these values for speculative execution. CVE-2024-46774 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46774.html CVE-2024-46774 https://bugzilla.suse.com/1230767 SUSE Bug 1230767 In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check UnboundedRequestEnabled's value CalculateSwathAndDETConfiguration_params_st's UnboundedRequestEnabled is a pointer (i.e. dml_bool_t *UnboundedRequestEnabled), and thus if (p->UnboundedRequestEnabled) checks its address, not bool value. This fixes 1 REVERSE_INULL issue reported by Coverity. CVE-2024-46778 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46778.html CVE-2024-46778 https://bugzilla.suse.com/1230776 SUSE Bug 1230776 In the Linux kernel, the following vulnerability has been resolved: nilfs2: protect references to superblock parameters exposed in sysfs The superblock buffers of nilfs2 can not only be overwritten at runtime for modifications/repairs, but they are also regularly swapped, replaced during resizing, and even abandoned when degrading to one side due to backing device issues. So, accessing them requires mutual exclusion using the reader/writer semaphore "nilfs->ns_sem". Some sysfs attribute show methods read this superblock buffer without the necessary mutual exclusion, which can cause problems with pointer dereferencing and memory access, so fix it. CVE-2024-46780 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46780.html CVE-2024-46780 https://bugzilla.suse.com/1230808 SUSE Bug 1230808 In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix missing cleanup on rollforward recovery error In an error injection test of a routine for mount-time recovery, KASAN found a use-after-free bug. It turned out that if data recovery was performed using partial logs created by dsync writes, but an error occurred before starting the log writer to create a recovered checkpoint, the inodes whose data had been recovered were left in the ns_dirty_files list of the nilfs object and were not freed. Fix this issue by cleaning up inodes that have read the recovery data if the recovery routine fails midway before the log writer starts. CVE-2024-46781 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46781.html CVE-2024-46781 https://bugzilla.suse.com/1230768 SUSE Bug 1230768 In the Linux kernel, the following vulnerability has been resolved: tcp_bpf: fix return value of tcp_bpf_sendmsg() When we cork messages in psock->cork, the last message triggers the flushing will result in sending a sk_msg larger than the current message size. In this case, in tcp_bpf_send_verdict(), 'copied' becomes negative at least in the following case: 468 case __SK_DROP: 469 default: 470 sk_msg_free_partial(sk, msg, tosend); 471 sk_msg_apply_bytes(psock, tosend); 472 *copied -= (tosend + delta); // <==== HERE 473 return -EACCES; Therefore, it could lead to the following BUG with a proper value of 'copied' (thanks to syzbot). We should not use negative 'copied' as a return value here. ------------[ cut here ]------------ kernel BUG at net/socket.c:733! Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP Modules linked in: CPU: 0 UID: 0 PID: 3265 Comm: syz-executor510 Not tainted 6.11.0-rc3-syzkaller-00060-gd07b43284ab3 #0 Hardware name: linux,dummy-virt (DT) pstate: 61400009 (nZCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) pc : sock_sendmsg_nosec net/socket.c:733 [inline] pc : sock_sendmsg_nosec net/socket.c:728 [inline] pc : __sock_sendmsg+0x5c/0x60 net/socket.c:745 lr : sock_sendmsg_nosec net/socket.c:730 [inline] lr : __sock_sendmsg+0x54/0x60 net/socket.c:745 sp : ffff800088ea3b30 x29: ffff800088ea3b30 x28: fbf00000062bc900 x27: 0000000000000000 x26: ffff800088ea3bc0 x25: ffff800088ea3bc0 x24: 0000000000000000 x23: f9f00000048dc000 x22: 0000000000000000 x21: ffff800088ea3d90 x20: f9f00000048dc000 x19: ffff800088ea3d90 x18: 0000000000000001 x17: 0000000000000000 x16: 0000000000000000 x15: 000000002002ffaf x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 x11: 0000000000000000 x10: ffff8000815849c0 x9 : ffff8000815b49c0 x8 : 0000000000000000 x7 : 000000000000003f x6 : 0000000000000000 x5 : 00000000000007e0 x4 : fff07ffffd239000 x3 : fbf00000062bc900 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 00000000fffffdef Call trace: sock_sendmsg_nosec net/socket.c:733 [inline] __sock_sendmsg+0x5c/0x60 net/socket.c:745 ____sys_sendmsg+0x274/0x2ac net/socket.c:2597 ___sys_sendmsg+0xac/0x100 net/socket.c:2651 __sys_sendmsg+0x84/0xe0 net/socket.c:2680 __do_sys_sendmsg net/socket.c:2689 [inline] __se_sys_sendmsg net/socket.c:2687 [inline] __arm64_sys_sendmsg+0x24/0x30 net/socket.c:2687 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline] invoke_syscall+0x48/0x110 arch/arm64/kernel/syscall.c:49 el0_svc_common.constprop.0+0x40/0xe0 arch/arm64/kernel/syscall.c:132 do_el0_svc+0x1c/0x28 arch/arm64/kernel/syscall.c:151 el0_svc+0x34/0xec arch/arm64/kernel/entry-common.c:712 el0t_64_sync_handler+0x100/0x12c arch/arm64/kernel/entry-common.c:730 el0t_64_sync+0x19c/0x1a0 arch/arm64/kernel/entry.S:598 Code: f9404463 d63f0060 3108441f 54fffe81 (d4210000) ---[ end trace 0000000000000000 ]--- CVE-2024-46783 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46783.html CVE-2024-46783 https://bugzilla.suse.com/1230810 SUSE Bug 1230810 In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup Currently napi_disable() gets called during rxq and txq cleanup, even before napi is enabled and hrtimer is initialized. It causes kernel panic. ? page_fault_oops+0x136/0x2b0 ? page_counter_cancel+0x2e/0x80 ? do_user_addr_fault+0x2f2/0x640 ? refill_obj_stock+0xc4/0x110 ? exc_page_fault+0x71/0x160 ? asm_exc_page_fault+0x27/0x30 ? __mmdrop+0x10/0x180 ? __mmdrop+0xec/0x180 ? hrtimer_active+0xd/0x50 hrtimer_try_to_cancel+0x2c/0xf0 hrtimer_cancel+0x15/0x30 napi_disable+0x65/0x90 mana_destroy_rxq+0x4c/0x2f0 mana_create_rxq.isra.0+0x56c/0x6d0 ? mana_uncfg_vport+0x50/0x50 mana_alloc_queues+0x21b/0x320 ? skb_dequeue+0x5f/0x80 CVE-2024-46784 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46784.html CVE-2024-46784 https://bugzilla.suse.com/1230771 SUSE Bug 1230771 In the Linux kernel, the following vulnerability has been resolved: fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF The fscache_cookie_lru_timer is initialized when the fscache module is inserted, but is not deleted when the fscache module is removed. If timer_reduce() is called before removing the fscache module, the fscache_cookie_lru_timer will be added to the timer list of the current cpu. Afterwards, a use-after-free will be triggered in the softIRQ after removing the fscache module, as follows: ================================================================== BUG: unable to handle page fault for address: fffffbfff803c9e9 PF: supervisor read access in kernel mode PF: error_code(0x0000) - not-present page PGD 21ffea067 P4D 21ffea067 PUD 21ffe6067 PMD 110a7c067 PTE 0 Oops: Oops: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G W 6.11.0-rc3 #855 Tainted: [W]=WARN RIP: 0010:__run_timer_base.part.0+0x254/0x8a0 Call Trace: <IRQ> tmigr_handle_remote_up+0x627/0x810 __walk_groups.isra.0+0x47/0x140 tmigr_handle_remote+0x1fa/0x2f0 handle_softirqs+0x180/0x590 irq_exit_rcu+0x84/0xb0 sysvec_apic_timer_interrupt+0x6e/0x90 </IRQ> <TASK> asm_sysvec_apic_timer_interrupt+0x1a/0x20 RIP: 0010:default_idle+0xf/0x20 default_idle_call+0x38/0x60 do_idle+0x2b5/0x300 cpu_startup_entry+0x54/0x60 start_secondary+0x20d/0x280 common_startup_64+0x13e/0x148 </TASK> Modules linked in: [last unloaded: netfs] ================================================================== Therefore delete fscache_cookie_lru_timer when removing the fscahe module. CVE-2024-46786 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46786.html CVE-2024-46786 https://bugzilla.suse.com/1230813 SUSE Bug 1230813 In the Linux kernel, the following vulnerability has been resolved: userfaultfd: fix checks for huge PMDs Patch series "userfaultfd: fix races around pmd_trans_huge() check", v2. The pmd_trans_huge() code in mfill_atomic() is wrong in three different ways depending on kernel version: 1. The pmd_trans_huge() check is racy and can lead to a BUG_ON() (if you hit the right two race windows) - I've tested this in a kernel build with some extra mdelay() calls. See the commit message for a description of the race scenario. On older kernels (before 6.5), I think the same bug can even theoretically lead to accessing transhuge page contents as a page table if you hit the right 5 narrow race windows (I haven't tested this case). 2. As pointed out by Qi Zheng, pmd_trans_huge() is not sufficient for detecting PMDs that don't point to page tables. On older kernels (before 6.5), you'd just have to win a single fairly wide race to hit this. I've tested this on 6.1 stable by racing migration (with a mdelay() patched into try_to_migrate()) against UFFDIO_ZEROPAGE - on my x86 VM, that causes a kernel oops in ptlock_ptr(). 3. On newer kernels (>=6.5), for shmem mappings, khugepaged is allowed to yank page tables out from under us (though I haven't tested that), so I think the BUG_ON() checks in mfill_atomic() are just wrong. I decided to write two separate fixes for these (one fix for bugs 1+2, one fix for bug 3), so that the first fix can be backported to kernels affected by bugs 1+2. This patch (of 2): This fixes two issues. I discovered that the following race can occur: mfill_atomic other thread ============ ============ <zap PMD> pmdp_get_lockless() [reads none pmd] <bail if trans_huge> <if none:> <pagefault creates transhuge zeropage> __pte_alloc [no-op] <zap PMD> <bail if pmd_trans_huge(*dst_pmd)> BUG_ON(pmd_none(*dst_pmd)) I have experimentally verified this in a kernel with extra mdelay() calls; the BUG_ON(pmd_none(*dst_pmd)) triggers. On kernels newer than commit 0d940a9b270b ("mm/pgtable: allow pte_offset_map[_lock]() to fail"), this can't lead to anything worse than a BUG_ON(), since the page table access helpers are actually designed to deal with page tables concurrently disappearing; but on older kernels (<=6.4), I think we could probably theoretically race past the two BUG_ON() checks and end up treating a hugepage as a page table. The second issue is that, as Qi Zheng pointed out, there are other types of huge PMDs that pmd_trans_huge() can't catch: devmap PMDs and swap PMDs (in particular, migration PMDs). On <=6.4, this is worse than the first issue: If mfill_atomic() runs on a PMD that contains a migration entry (which just requires winning a single, fairly wide race), it will pass the PMD to pte_offset_map_lock(), which assumes that the PMD points to a page table. Breakage follows: First, the kernel tries to take the PTE lock (which will crash or maybe worse if there is no "struct page" for the address bits in the migration entry PMD - I think at least on X86 there usually is no corresponding "struct page" thanks to the PTE inversion mitigation, amd64 looks different). If that didn't crash, the kernel would next try to write a PTE into what it wrongly thinks is a page table. As part of fixing these issues, get rid of the check for pmd_trans_huge() before __pte_alloc() - that's redundant, we're going to have to check for that after the __pte_alloc() anyway. Backport note: pmdp_get_lockless() is pmd_read_atomic() in older kernels. CVE-2024-46787 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46787.html CVE-2024-46787 https://bugzilla.suse.com/1230815 SUSE Bug 1230815 In the Linux kernel, the following vulnerability has been resolved: can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open The mcp251x_hw_wake() function is called with the mpc_lock mutex held and disables the interrupt handler so that no interrupts can be processed while waking the device. If an interrupt has already occurred then waiting for the interrupt handler to complete will deadlock because it will be trying to acquire the same mutex. CPU0 CPU1 ---- ---- mcp251x_open() mutex_lock(&priv->mcp_lock) request_threaded_irq() <interrupt> mcp251x_can_ist() mutex_lock(&priv->mcp_lock) mcp251x_hw_wake() disable_irq() <-- deadlock Use disable_irq_nosync() instead because the interrupt handler does everything while holding the mutex so it doesn't matter if it's still running. CVE-2024-46791 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46791.html CVE-2024-46791 https://bugzilla.suse.com/1230821 SUSE Bug 1230821 In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix data leak in mmio_read() The mmio_read() function makes a TDVMCALL to retrieve MMIO data for an address from the VMM. Sean noticed that mmio_read() unintentionally exposes the value of an initialized variable (val) on the stack to the VMM. This variable is only needed as an output value. It did not need to be passed to the VMM in the first place. Do not send the original value of *val to the VMM. [ dhansen: clarify what 'val' is used for. ] CVE-2024-46794 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46794.html CVE-2024-46794 https://bugzilla.suse.com/1230825 SUSE Bug 1230825 In the Linux kernel, the following vulnerability has been resolved: ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object When using kernel with the following extra config, - CONFIG_KASAN=y - CONFIG_KASAN_GENERIC=y - CONFIG_KASAN_INLINE=y - CONFIG_KASAN_VMALLOC=y - CONFIG_FRAME_WARN=4096 kernel detects that snd_pcm_suspend_all() access a freed 'snd_soc_pcm_runtime' object when the system is suspended, which leads to a use-after-free bug: [ 52.047746] BUG: KASAN: use-after-free in snd_pcm_suspend_all+0x1a8/0x270 [ 52.047765] Read of size 1 at addr ffff0000b9434d50 by task systemd-sleep/2330 [ 52.047785] Call trace: [ 52.047787] dump_backtrace+0x0/0x3c0 [ 52.047794] show_stack+0x34/0x50 [ 52.047797] dump_stack_lvl+0x68/0x8c [ 52.047802] print_address_description.constprop.0+0x74/0x2c0 [ 52.047809] kasan_report+0x210/0x230 [ 52.047815] __asan_report_load1_noabort+0x3c/0x50 [ 52.047820] snd_pcm_suspend_all+0x1a8/0x270 [ 52.047824] snd_soc_suspend+0x19c/0x4e0 The snd_pcm_sync_stop() has a NULL check on 'substream->runtime' before making any access. So we need to always set 'substream->runtime' to NULL everytime we kfree() it. CVE-2024-46798 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46798.html CVE-2024-46798 https://bugzilla.suse.com/1230830 SUSE Bug 1230830 In the Linux kernel, the following vulnerability has been resolved: arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry In a review discussion of the changes to support vCPU hotplug where a check was added on the GICC being enabled if was online, it was noted that there is need to map back to the cpu and use that to index into a cpumask. As such, a valid ID is needed. If an MPIDR check fails in acpi_map_gic_cpu_interface() it is possible for the entry in cpu_madt_gicc[cpu] == NULL. This function would then cause a NULL pointer dereference. Whilst a path to trigger this has not been established, harden this caller against the possibility. CVE-2024-46822 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46822.html CVE-2024-46822 https://bugzilla.suse.com/1231120 SUSE Bug 1231120 In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS Grab kvm->srcu when processing KVM_SET_VCPU_EVENTS, as KVM will forcibly leave nested VMX/SVM if SMM mode is being toggled, and leaving nested VMX reads guest memory. Note, kvm_vcpu_ioctl_x86_set_vcpu_events() can also be called from KVM_RUN via sync_regs(), which already holds SRCU. I.e. trying to precisely use kvm_vcpu_srcu_read_lock() around the problematic SMM code would cause problems. Acquiring SRCU isn't all that expensive, so for simplicity, grab it unconditionally for KVM_SET_VCPU_EVENTS. ============================= WARNING: suspicious RCU usage 6.10.0-rc7-332d2c1d713e-next-vm #552 Not tainted ----------------------------- include/linux/kvm_host.h:1027 suspicious rcu_dereference_check() usage! other info that might help us debug this: rcu_scheduler_active = 2, debug_locks = 1 1 lock held by repro/1071: #0: ffff88811e424430 (&vcpu->mutex){+.+.}-{3:3}, at: kvm_vcpu_ioctl+0x7d/0x970 [kvm] stack backtrace: CPU: 15 PID: 1071 Comm: repro Not tainted 6.10.0-rc7-332d2c1d713e-next-vm #552 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 0.0.0 02/06/2015 Call Trace: <TASK> dump_stack_lvl+0x7f/0x90 lockdep_rcu_suspicious+0x13f/0x1a0 kvm_vcpu_gfn_to_memslot+0x168/0x190 [kvm] kvm_vcpu_read_guest+0x3e/0x90 [kvm] nested_vmx_load_msr+0x6b/0x1d0 [kvm_intel] load_vmcs12_host_state+0x432/0xb40 [kvm_intel] vmx_leave_nested+0x30/0x40 [kvm_intel] kvm_vcpu_ioctl_x86_set_vcpu_events+0x15d/0x2b0 [kvm] kvm_arch_vcpu_ioctl+0x1107/0x1750 [kvm] ? mark_held_locks+0x49/0x70 ? kvm_vcpu_ioctl+0x7d/0x970 [kvm] ? kvm_vcpu_ioctl+0x497/0x970 [kvm] kvm_vcpu_ioctl+0x497/0x970 [kvm] ? lock_acquire+0xba/0x2d0 ? find_held_lock+0x2b/0x80 ? do_user_addr_fault+0x40c/0x6f0 ? lock_release+0xb7/0x270 __x64_sys_ioctl+0x82/0xb0 do_syscall_64+0x6c/0x170 entry_SYSCALL_64_after_hwframe+0x4b/0x53 RIP: 0033:0x7ff11eb1b539 </TASK> CVE-2024-46830 Container suse/sle-micro/rt-5.5:latest:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Live Patching 15 SP5:kernel-livepatch-5_14_21-150500_13_73-rt-1-150500.11.3.1 SUSE Linux Enterprise Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 SUSE Linux Enterprise Micro 5.5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:dlm-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:gfs2-kmp-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-devel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-source-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:kernel-syms-rt-5.14.21-150500.13.73.1 SUSE Real Time Module 15 SP5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:cluster-md-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:dlm-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:gfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-devel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-extra-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-optional-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-livepatch-devel-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-rt_debug-vdso-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-source-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kernel-syms-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:kselftests-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:ocfs2-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap 15.5:reiserfs-kmp-rt-5.14.21-150500.13.73.1 openSUSE Leap Micro 5.5:kernel-rt-5.14.21-150500.13.73.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20243592-1/ https://www.suse.com/security/cve/CVE-2024-46830.html CVE-2024-46830 https://bugzilla.suse.com/1231116 SUSE Bug 1231116