Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2025:0203-1 Final 1 1 2025-01-21T13:58:41Z current 2025-01-21T13:58:41Z 2025-01-21T13:58:41Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-41087: Fix double free on error (bsc#1228466). - CVE-2024-53095: smb: client: Fix use-after-free of network namespace (bsc#1233642). - CVE-2024-53146: NFSD: Prevent a potential integer overflow (bsc#1234853). - CVE-2024-53156: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() (bsc#1234846). - CVE-2024-53173: NFSv4.0: Fix a use-after-free problem in the asynchronous open() (bsc#1234891). - CVE-2024-53179: smb: client: fix use-after-free of signing key (bsc#1234921). - CVE-2024-53214: vfio/pci: Properly hide first-in-list PCIe extended capability (bsc#1235004). - CVE-2024-53239: ALSA: 6fire: Release resources at card release (bsc#1235054). - CVE-2024-53240: xen/netfront: fix crash when removing device (bsc#1234281). - CVE-2024-53241: x86/xen: use new hypercall functions instead of hypercall page (XSA-466 bsc#1234282). - CVE-2024-56539: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() (bsc#1234963). - CVE-2024-56548: hfsplus: do not query the device logical block size multiple times (bsc#1235073). - CVE-2024-56570: ovl: Filter invalid inodes with missing lookup function (bsc#1235035). - CVE-2024-56598: jfs: array-index-out-of-bounds fix in dtReadFirst (bsc#1235220). - CVE-2024-56604: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() (bsc#1235056). - CVE-2024-56605: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() (bsc#1235061). - CVE-2024-56619: nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() (bsc#1235224). - CVE-2024-8805: Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE (bsc#1230697). The following non-security bugs were fixed: - Drop a couple of block layer git-fixes (bsc#1170891 bsc#1173139) - KVM: x86: fix sending PV IPI (git-fixes). - fixup 'rpm: support gz and zst compression methods' once more (bsc#1190428, bsc#1190358) - idpf: add support for SW triggered interrupts (bsc#1235507). - idpf: enable WB_ON_ITR (bsc#1235507). - idpf: trigger SW interrupt when exiting wb_on_itr mode (bsc#1235507). - kernel-binary: do not BuildIgnore m4. It is actually needed for regenerating zconf when it is not up-to-date due to merge. - net: mana: Increase the DEF_RX_BUFFERS_PER_QUEUE to 1024 (bsc#1235246). - rpm/kernel-binary.spec.in: Fix build regression The previous fix forgot to take over grep -c option that broke the conditional expression - scsi: storvsc: Do not flag MAINTENANCE_IN return of SRB_STATUS_DATA_OVERRUN as an error (git-fixes). - smb: client: fix TCP timers deadlock after rmmod (git-fixes) [hcarvalho: this fixes issue discussed in bsc#1233642]. - supported.conf: add bsc1185010 dependency - supported.conf: hyperv_drm (jsc#sle-19733) - usb: roles: Call try_module_get() from usb_role_switch_find_by_fwnode() (git-fixes). - usb: typec: tps6598x: Fix return value check in tps6598x_probe() (git-fixes). - x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes). - x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes). - x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes). - x86/fpu: Remove unused supervisor only offsets (git-fixes). - x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes). - x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes). - x86/mce: Allow instrumentation during task work queueing (git-fixes). - x86/mce: Mark mce_end() noinstr (git-fixes). - x86/mce: Mark mce_panic() noinstr (git-fixes). - x86/mce: Mark mce_read_aux() noinstr (git-fixes). - x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes). - x86/sgx: Free backing memory after faulting the enclave page (git-fixes). - x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes). - x86/uaccess: Move variable into switch case statement (git-fixes). - x86: Annotate call_on_stack() (git-fixes). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sle-micro-rancher/5.3:latest-2025-203,Container suse/sle-micro-rancher/5.4:latest-2025-203,Image SLES15-SP4-BYOS-2025-203,Image SLES15-SP4-BYOS-GCE-2025-203,Image SLES15-SP4-Hardened-BYOS-2025-203,Image SLES15-SP4-Hardened-BYOS-GCE-2025-203,Image SLES15-SP4-Manager-Proxy-4-3-BYOS-2025-203,Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure-2025-203,Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2-2025-203,Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE-2025-203,Image SLES15-SP4-Manager-Server-4-3-BYOS-2025-203,Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure-2025-203,Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2-2025-203,Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE-2025-203,Image SLES15-SP4-Micro-5-3-2025-203,Image SLES15-SP4-Micro-5-3-BYOS-2025-203,Image SLES15-SP4-Micro-5-3-BYOS-Azure-2025-203,Image SLES15-SP4-Micro-5-3-BYOS-EC2-2025-203,Image SLES15-SP4-Micro-5-3-BYOS-GCE-2025-203,Image SLES15-SP4-Micro-5-3-EC2-2025-203,Image SLES15-SP4-Micro-5-4-2025-203,Image SLES15-SP4-Micro-5-4-BYOS-2025-203,Image SLES15-SP4-Micro-5-4-BYOS-Azure-2025-203,Image SLES15-SP4-Micro-5-4-BYOS-EC2-2025-203,Image SLES15-SP4-Micro-5-4-BYOS-GCE-2025-203,Image SLES15-SP4-Micro-5-4-EC2-2025-203,Image SLES15-SP4-Micro-5-4-GCE-2025-203,Image SLES15-SP4-SAP-BYOS-2025-203,Image SLES15-SP4-SAP-BYOS-EC2-2025-203,Image SLES15-SP4-SAP-BYOS-GCE-2025-203,Image SLES15-SP4-SAP-Hardened-BYOS-2025-203,Image SLES15-SP4-SAP-Hardened-BYOS-EC2-2025-203,SUSE-2025-203,SUSE-SLE-Micro-5.3-2025-203,SUSE-SLE-Micro-5.4-2025-203,SUSE-SLE-Module-Live-Patching-15-SP4-2025-203,SUSE-SLE-Product-HA-15-SP4-2025-203,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-203,SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-203,SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-203,SUSE-SLE-Product-SLES_SAP-15-SP4-2025-203,SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-203,SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-203 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ Link for SUSE-SU-2025:0203-1 https://lists.suse.com/pipermail/sle-security-updates/2025-January/020183.html E-Mail link for SUSE-SU-2025:0203-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1170891 SUSE Bug 1170891 https://bugzilla.suse.com/1173139 SUSE Bug 1173139 https://bugzilla.suse.com/1185010 SUSE Bug 1185010 https://bugzilla.suse.com/1190358 SUSE Bug 1190358 https://bugzilla.suse.com/1190428 SUSE Bug 1190428 https://bugzilla.suse.com/1209798 SUSE Bug 1209798 https://bugzilla.suse.com/1215304 SUSE Bug 1215304 https://bugzilla.suse.com/1222878 SUSE Bug 1222878 https://bugzilla.suse.com/1228466 SUSE Bug 1228466 https://bugzilla.suse.com/1230697 SUSE Bug 1230697 https://bugzilla.suse.com/1232436 SUSE Bug 1232436 https://bugzilla.suse.com/1233070 SUSE Bug 1233070 https://bugzilla.suse.com/1233642 SUSE Bug 1233642 https://bugzilla.suse.com/1234281 SUSE Bug 1234281 https://bugzilla.suse.com/1234282 SUSE Bug 1234282 https://bugzilla.suse.com/1234846 SUSE Bug 1234846 https://bugzilla.suse.com/1234853 SUSE Bug 1234853 https://bugzilla.suse.com/1234891 SUSE Bug 1234891 https://bugzilla.suse.com/1234921 SUSE Bug 1234921 https://bugzilla.suse.com/1234960 SUSE Bug 1234960 https://bugzilla.suse.com/1234963 SUSE Bug 1234963 https://bugzilla.suse.com/1235004 SUSE Bug 1235004 https://bugzilla.suse.com/1235035 SUSE Bug 1235035 https://bugzilla.suse.com/1235054 SUSE Bug 1235054 https://bugzilla.suse.com/1235056 SUSE Bug 1235056 https://bugzilla.suse.com/1235061 SUSE Bug 1235061 https://bugzilla.suse.com/1235073 SUSE Bug 1235073 https://bugzilla.suse.com/1235220 SUSE Bug 1235220 https://bugzilla.suse.com/1235224 SUSE Bug 1235224 https://bugzilla.suse.com/1235246 SUSE Bug 1235246 https://bugzilla.suse.com/1235507 SUSE Bug 1235507 https://www.suse.com/security/cve/CVE-2021-47202/ SUSE CVE CVE-2021-47202 page https://www.suse.com/security/cve/CVE-2022-49035/ SUSE CVE CVE-2022-49035 page https://www.suse.com/security/cve/CVE-2024-41087/ SUSE CVE CVE-2024-41087 page https://www.suse.com/security/cve/CVE-2024-50154/ SUSE CVE CVE-2024-50154 page https://www.suse.com/security/cve/CVE-2024-53095/ SUSE CVE CVE-2024-53095 page https://www.suse.com/security/cve/CVE-2024-53142/ SUSE CVE CVE-2024-53142 page https://www.suse.com/security/cve/CVE-2024-53146/ SUSE CVE CVE-2024-53146 page https://www.suse.com/security/cve/CVE-2024-53156/ SUSE CVE CVE-2024-53156 page https://www.suse.com/security/cve/CVE-2024-53173/ SUSE CVE CVE-2024-53173 page https://www.suse.com/security/cve/CVE-2024-53179/ SUSE CVE CVE-2024-53179 page https://www.suse.com/security/cve/CVE-2024-53206/ SUSE CVE CVE-2024-53206 page https://www.suse.com/security/cve/CVE-2024-53214/ SUSE CVE CVE-2024-53214 page https://www.suse.com/security/cve/CVE-2024-53239/ SUSE CVE CVE-2024-53239 page https://www.suse.com/security/cve/CVE-2024-53240/ SUSE CVE CVE-2024-53240 page https://www.suse.com/security/cve/CVE-2024-53241/ SUSE CVE CVE-2024-53241 page https://www.suse.com/security/cve/CVE-2024-56539/ SUSE CVE CVE-2024-56539 page https://www.suse.com/security/cve/CVE-2024-56548/ SUSE CVE CVE-2024-56548 page https://www.suse.com/security/cve/CVE-2024-56570/ SUSE CVE CVE-2024-56570 page https://www.suse.com/security/cve/CVE-2024-56598/ SUSE CVE CVE-2024-56598 page https://www.suse.com/security/cve/CVE-2024-56604/ SUSE CVE CVE-2024-56604 page https://www.suse.com/security/cve/CVE-2024-56605/ SUSE CVE CVE-2024-56605 page https://www.suse.com/security/cve/CVE-2024-56619/ SUSE CVE CVE-2024-56619 page https://www.suse.com/security/cve/CVE-2024-8805/ SUSE CVE CVE-2024-8805 page Container suse/sle-micro-rancher/5.3:latest Container suse/sle-micro-rancher/5.4:latest Image SLES15-SP4-BYOS Image SLES15-SP4-BYOS-GCE Image SLES15-SP4-Hardened-BYOS Image SLES15-SP4-Hardened-BYOS-GCE Image SLES15-SP4-Manager-Proxy-4-3-BYOS Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE Image SLES15-SP4-Manager-Server-4-3-BYOS Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE Image SLES15-SP4-Micro-5-3 Image SLES15-SP4-Micro-5-3-BYOS Image SLES15-SP4-Micro-5-3-BYOS-Azure Image SLES15-SP4-Micro-5-3-BYOS-EC2 Image SLES15-SP4-Micro-5-3-BYOS-GCE Image SLES15-SP4-Micro-5-3-EC2 Image SLES15-SP4-Micro-5-4 Image SLES15-SP4-Micro-5-4-BYOS Image SLES15-SP4-Micro-5-4-BYOS-Azure Image SLES15-SP4-Micro-5-4-BYOS-EC2 Image SLES15-SP4-Micro-5-4-BYOS-GCE Image SLES15-SP4-Micro-5-4-EC2 Image SLES15-SP4-Micro-5-4-GCE Image SLES15-SP4-SAP-BYOS Image SLES15-SP4-SAP-BYOS-EC2 Image SLES15-SP4-SAP-BYOS-GCE Image SLES15-SP4-SAP-Hardened-BYOS Image SLES15-SP4-SAP-Hardened-BYOS-EC2 SUSE Linux Enterprise High Availability Extension 15 SP4 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Live Patching 15 SP4 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Manager Proxy 4.3 SUSE Manager Server 4.3 kernel-default-5.14.21-150400.24.147.1 cluster-md-kmp-default-5.14.21-150400.24.147.1 dlm-kmp-default-5.14.21-150400.24.147.1 gfs2-kmp-default-5.14.21-150400.24.147.1 ocfs2-kmp-default-5.14.21-150400.24.147.1 cluster-md-kmp-64kb-5.14.21-150400.24.147.1 dlm-kmp-64kb-5.14.21-150400.24.147.1 dtb-allwinner-5.14.21-150400.24.147.1 dtb-altera-5.14.21-150400.24.147.1 dtb-amazon-5.14.21-150400.24.147.1 dtb-amd-5.14.21-150400.24.147.1 dtb-amlogic-5.14.21-150400.24.147.1 dtb-apm-5.14.21-150400.24.147.1 dtb-apple-5.14.21-150400.24.147.1 dtb-arm-5.14.21-150400.24.147.1 dtb-broadcom-5.14.21-150400.24.147.1 dtb-cavium-5.14.21-150400.24.147.1 dtb-exynos-5.14.21-150400.24.147.1 dtb-freescale-5.14.21-150400.24.147.1 dtb-hisilicon-5.14.21-150400.24.147.1 dtb-lg-5.14.21-150400.24.147.1 dtb-marvell-5.14.21-150400.24.147.1 dtb-mediatek-5.14.21-150400.24.147.1 dtb-nvidia-5.14.21-150400.24.147.1 dtb-qcom-5.14.21-150400.24.147.1 dtb-renesas-5.14.21-150400.24.147.1 dtb-rockchip-5.14.21-150400.24.147.1 dtb-socionext-5.14.21-150400.24.147.1 dtb-sprd-5.14.21-150400.24.147.1 dtb-xilinx-5.14.21-150400.24.147.1 gfs2-kmp-64kb-5.14.21-150400.24.147.1 kernel-64kb-5.14.21-150400.24.147.1 kernel-64kb-devel-5.14.21-150400.24.147.1 kernel-64kb-extra-5.14.21-150400.24.147.1 kernel-64kb-optional-5.14.21-150400.24.147.1 kernel-debug-5.14.21-150400.24.147.1 kernel-debug-devel-5.14.21-150400.24.147.1 kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 kernel-default-base-rebuild-5.14.21-150400.24.147.1.150400.24.72.1 kernel-default-devel-5.14.21-150400.24.147.1 kernel-default-extra-5.14.21-150400.24.147.1 kernel-default-livepatch-5.14.21-150400.24.147.1 kernel-default-livepatch-devel-5.14.21-150400.24.147.1 kernel-default-optional-5.14.21-150400.24.147.1 kernel-devel-5.14.21-150400.24.147.1 kernel-docs-5.14.21-150400.24.147.1 kernel-docs-html-5.14.21-150400.24.147.1 kernel-kvmsmall-5.14.21-150400.24.147.1 kernel-kvmsmall-devel-5.14.21-150400.24.147.1 kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 kernel-macros-5.14.21-150400.24.147.1 kernel-obs-build-5.14.21-150400.24.147.1 kernel-obs-qa-5.14.21-150400.24.147.1 kernel-source-5.14.21-150400.24.147.1 kernel-source-vanilla-5.14.21-150400.24.147.1 kernel-syms-5.14.21-150400.24.147.1 kernel-zfcpdump-5.14.21-150400.24.147.1 kselftests-kmp-64kb-5.14.21-150400.24.147.1 kselftests-kmp-default-5.14.21-150400.24.147.1 ocfs2-kmp-64kb-5.14.21-150400.24.147.1 reiserfs-kmp-64kb-5.14.21-150400.24.147.1 reiserfs-kmp-default-5.14.21-150400.24.147.1 kernel-default-5.14.21-150400.24.147.1 as a component of Container suse/sle-micro-rancher/5.3:latest kernel-default-5.14.21-150400.24.147.1 as a component of Container suse/sle-micro-rancher/5.4:latest kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-BYOS kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-BYOS-GCE kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-Hardened-BYOS kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-Hardened-BYOS-GCE kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-Manager-Proxy-4-3-BYOS kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2 kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-Micro-5-3 kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS-Azure kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS-EC2 kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-Micro-5-3-BYOS-GCE kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-Micro-5-3-EC2 kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-Micro-5-4 kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS-Azure kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS-EC2 kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-Micro-5-4-BYOS-GCE kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-Micro-5-4-EC2 kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-Micro-5-4-GCE cluster-md-kmp-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-BYOS dlm-kmp-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-BYOS gfs2-kmp-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-BYOS kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-BYOS ocfs2-kmp-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-BYOS cluster-md-kmp-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-BYOS-EC2 dlm-kmp-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-BYOS-EC2 gfs2-kmp-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-BYOS-EC2 kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-BYOS-EC2 ocfs2-kmp-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-BYOS-EC2 cluster-md-kmp-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-BYOS-GCE dlm-kmp-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-BYOS-GCE gfs2-kmp-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-BYOS-GCE kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-BYOS-GCE ocfs2-kmp-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-BYOS-GCE cluster-md-kmp-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS dlm-kmp-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS gfs2-kmp-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS ocfs2-kmp-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS cluster-md-kmp-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-EC2 dlm-kmp-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-EC2 gfs2-kmp-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-EC2 kernel-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-EC2 ocfs2-kmp-default-5.14.21-150400.24.147.1 as a component of Image SLES15-SP4-SAP-Hardened-BYOS-EC2 cluster-md-kmp-default-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Availability Extension 15 SP4 dlm-kmp-default-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Availability Extension 15 SP4 gfs2-kmp-default-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Availability Extension 15 SP4 ocfs2-kmp-default-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Availability Extension 15 SP4 kernel-64kb-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-64kb-devel-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-default-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-default-devel-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-devel-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-docs-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-macros-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-obs-build-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-source-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-syms-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS reiserfs-kmp-default-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-64kb-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-64kb-devel-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default-devel-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-devel-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-docs-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-macros-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-obs-build-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-source-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-syms-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS reiserfs-kmp-default-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default-livepatch-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Live Patching 15 SP4 kernel-default-livepatch-devel-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Live Patching 15 SP4 kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 as a component of SUSE Linux Enterprise Live Patching 15 SP4 kernel-default-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Micro 5.3 kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 as a component of SUSE Linux Enterprise Micro 5.3 kernel-default-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Micro 5.4 kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 as a component of SUSE Linux Enterprise Micro 5.4 kernel-64kb-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-64kb-devel-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-default-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-default-devel-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-devel-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-docs-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-macros-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-obs-build-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-source-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-syms-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-zfcpdump-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS reiserfs-kmp-default-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-default-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-default-devel-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-devel-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-docs-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-macros-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-obs-build-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-source-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-syms-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 reiserfs-kmp-default-5.14.21-150400.24.147.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-default-5.14.21-150400.24.147.1 as a component of SUSE Manager Proxy 4.3 kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 as a component of SUSE Manager Proxy 4.3 kernel-default-devel-5.14.21-150400.24.147.1 as a component of SUSE Manager Proxy 4.3 kernel-devel-5.14.21-150400.24.147.1 as a component of SUSE Manager Proxy 4.3 kernel-macros-5.14.21-150400.24.147.1 as a component of SUSE Manager Proxy 4.3 kernel-source-5.14.21-150400.24.147.1 as a component of SUSE Manager Proxy 4.3 kernel-syms-5.14.21-150400.24.147.1 as a component of SUSE Manager Proxy 4.3 kernel-default-5.14.21-150400.24.147.1 as a component of SUSE Manager Server 4.3 kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 as a component of SUSE Manager Server 4.3 kernel-default-devel-5.14.21-150400.24.147.1 as a component of SUSE Manager Server 4.3 kernel-devel-5.14.21-150400.24.147.1 as a component of SUSE Manager Server 4.3 kernel-macros-5.14.21-150400.24.147.1 as a component of SUSE Manager Server 4.3 kernel-source-5.14.21-150400.24.147.1 as a component of SUSE Manager Server 4.3 kernel-syms-5.14.21-150400.24.147.1 as a component of SUSE Manager Server 4.3 kernel-zfcpdump-5.14.21-150400.24.147.1 as a component of SUSE Manager Server 4.3 In the Linux kernel, the following vulnerability has been resolved: thermal: Fix NULL pointer dereferences in of_thermal_ functions of_parse_thermal_zones() parses the thermal-zones node and registers a thermal_zone device for each subnode. However, if a thermal zone is consuming a thermal sensor and that thermal sensor device hasn't probed yet, an attempt to set trip_point_*_temp for that thermal zone device can cause a NULL pointer dereference. Fix it. console:/sys/class/thermal/thermal_zone87 # echo 120000 > trip_point_0_temp ... Unable to handle kernel NULL pointer dereference at virtual address 0000000000000020 ... Call trace: of_thermal_set_trip_temp+0x40/0xc4 trip_point_temp_store+0xc0/0x1dc dev_attr_store+0x38/0x88 sysfs_kf_write+0x64/0xc0 kernfs_fop_write_iter+0x108/0x1d0 vfs_write+0x2f4/0x368 ksys_write+0x7c/0xec __arm64_sys_write+0x20/0x30 el0_svc_common.llvm.7279915941325364641+0xbc/0x1bc do_el0_svc+0x28/0xa0 el0_svc+0x14/0x24 el0_sync_handler+0x88/0xec el0_sync+0x1c0/0x200 While at it, fix the possible NULL pointer dereference in other functions as well: of_thermal_get_temp(), of_thermal_set_emul_temp(), of_thermal_get_trend(). CVE-2021-47202 Container suse/sle-micro-rancher/5.3:latest:kernel-default-5.14.21-150400.24.147.1 Container suse/sle-micro-rancher/5.4:latest:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-md-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:dlm-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:gfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 SUSE Linux Enterprise Micro 5.3:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Micro 5.4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-zfcpdump-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Proxy 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Server 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-zfcpdump-5.14.21-150400.24.147.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ https://www.suse.com/security/cve/CVE-2021-47202.html CVE-2021-47202 https://bugzilla.suse.com/1222878 SUSE Bug 1222878 In the Linux kernel, the following vulnerability has been resolved: media: s5p_cec: limit msg.len to CEC_MAX_MSG_SIZE I expect that the hardware will have limited this to 16, but just in case it hasn't, check for this corner case. CVE-2022-49035 Container suse/sle-micro-rancher/5.3:latest:kernel-default-5.14.21-150400.24.147.1 Container suse/sle-micro-rancher/5.4:latest:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-md-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:dlm-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:gfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 SUSE Linux Enterprise Micro 5.3:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Micro 5.4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-zfcpdump-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Proxy 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Server 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-zfcpdump-5.14.21-150400.24.147.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ https://www.suse.com/security/cve/CVE-2022-49035.html CVE-2022-49035 https://bugzilla.suse.com/1215304 SUSE Bug 1215304 https://bugzilla.suse.com/1235013 SUSE Bug 1235013 In the Linux kernel, the following vulnerability has been resolved: ata: libata-core: Fix double free on error If e.g. the ata_port_alloc() call in ata_host_alloc() fails, we will jump to the err_out label, which will call devres_release_group(). devres_release_group() will trigger a call to ata_host_release(). ata_host_release() calls kfree(host), so executing the kfree(host) in ata_host_alloc() will lead to a double free: kernel BUG at mm/slub.c:553! Oops: invalid opcode: 0000 [#1] PREEMPT SMP NOPTI CPU: 11 PID: 599 Comm: (udev-worker) Not tainted 6.10.0-rc5 #47 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-2.fc40 04/01/2014 RIP: 0010:kfree+0x2cf/0x2f0 Code: 5d 41 5e 41 5f 5d e9 80 d6 ff ff 4d 89 f1 41 b8 01 00 00 00 48 89 d9 48 89 da RSP: 0018:ffffc90000f377f0 EFLAGS: 00010246 RAX: ffff888112b1f2c0 RBX: ffff888112b1f2c0 RCX: ffff888112b1f320 RDX: 000000000000400b RSI: ffffffffc02c9de5 RDI: ffff888112b1f2c0 RBP: ffffc90000f37830 R08: 0000000000000000 R09: 0000000000000000 R10: ffffc90000f37610 R11: 617461203a736b6e R12: ffffea00044ac780 R13: ffff888100046400 R14: ffffffffc02c9de5 R15: 0000000000000006 FS: 00007f2f1cabe980(0000) GS:ffff88813b380000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f2f1c3acf75 CR3: 0000000111724000 CR4: 0000000000750ef0 PKRU: 55555554 Call Trace: <TASK> ? __die_body.cold+0x19/0x27 ? die+0x2e/0x50 ? do_trap+0xca/0x110 ? do_error_trap+0x6a/0x90 ? kfree+0x2cf/0x2f0 ? exc_invalid_op+0x50/0x70 ? kfree+0x2cf/0x2f0 ? asm_exc_invalid_op+0x1a/0x20 ? ata_host_alloc+0xf5/0x120 [libata] ? ata_host_alloc+0xf5/0x120 [libata] ? kfree+0x2cf/0x2f0 ata_host_alloc+0xf5/0x120 [libata] ata_host_alloc_pinfo+0x14/0xa0 [libata] ahci_init_one+0x6c9/0xd20 [ahci] Ensure that we will not call kfree(host) twice, by performing the kfree() only if the devres_open_group() call failed. CVE-2024-41087 Container suse/sle-micro-rancher/5.3:latest:kernel-default-5.14.21-150400.24.147.1 Container suse/sle-micro-rancher/5.4:latest:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-md-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:dlm-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:gfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 SUSE Linux Enterprise Micro 5.3:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Micro 5.4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-zfcpdump-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Proxy 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Server 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-zfcpdump-5.14.21-150400.24.147.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ https://www.suse.com/security/cve/CVE-2024-41087.html CVE-2024-41087 https://bugzilla.suse.com/1228466 SUSE Bug 1228466 https://bugzilla.suse.com/1228740 SUSE Bug 1228740 In the Linux kernel, the following vulnerability has been resolved: tcp/dccp: Don't use timer_pending() in reqsk_queue_unlink(). Martin KaFai Lau reported use-after-free [0] in reqsk_timer_handler(). """ We are seeing a use-after-free from a bpf prog attached to trace_tcp_retransmit_synack. The program passes the req->sk to the bpf_sk_storage_get_tracing kernel helper which does check for null before using it. """ The commit 83fccfc3940c ("inet: fix potential deadlock in reqsk_queue_unlink()") added timer_pending() in reqsk_queue_unlink() not to call del_timer_sync() from reqsk_timer_handler(), but it introduced a small race window. Before the timer is called, expire_timers() calls detach_timer(timer, true) to clear timer->entry.pprev and marks it as not pending. If reqsk_queue_unlink() checks timer_pending() just after expire_timers() calls detach_timer(), TCP will miss del_timer_sync(); the reqsk timer will continue running and send multiple SYN+ACKs until it expires. The reported UAF could happen if req->sk is close()d earlier than the timer expiration, which is 63s by default. The scenario would be 1. inet_csk_complete_hashdance() calls inet_csk_reqsk_queue_drop(), but del_timer_sync() is missed 2. reqsk timer is executed and scheduled again 3. req->sk is accept()ed and reqsk_put() decrements rsk_refcnt, but reqsk timer still has another one, and inet_csk_accept() does not clear req->sk for non-TFO sockets 4. sk is close()d 5. reqsk timer is executed again, and BPF touches req->sk Let's not use timer_pending() by passing the caller context to __inet_csk_reqsk_queue_drop(). Note that reqsk timer is pinned, so the issue does not happen in most use cases. [1] [0] BUG: KFENCE: use-after-free read in bpf_sk_storage_get_tracing+0x2e/0x1b0 Use-after-free read at 0x00000000a891fb3a (in kfence-#1): bpf_sk_storage_get_tracing+0x2e/0x1b0 bpf_prog_5ea3e95db6da0438_tcp_retransmit_synack+0x1d20/0x1dda bpf_trace_run2+0x4c/0xc0 tcp_rtx_synack+0xf9/0x100 reqsk_timer_handler+0xda/0x3d0 run_timer_softirq+0x292/0x8a0 irq_exit_rcu+0xf5/0x320 sysvec_apic_timer_interrupt+0x6d/0x80 asm_sysvec_apic_timer_interrupt+0x16/0x20 intel_idle_irq+0x5a/0xa0 cpuidle_enter_state+0x94/0x273 cpu_startup_entry+0x15e/0x260 start_secondary+0x8a/0x90 secondary_startup_64_no_verify+0xfa/0xfb kfence-#1: 0x00000000a72cc7b6-0x00000000d97616d9, size=2376, cache=TCPv6 allocated by task 0 on cpu 9 at 260507.901592s: sk_prot_alloc+0x35/0x140 sk_clone_lock+0x1f/0x3f0 inet_csk_clone_lock+0x15/0x160 tcp_create_openreq_child+0x1f/0x410 tcp_v6_syn_recv_sock+0x1da/0x700 tcp_check_req+0x1fb/0x510 tcp_v6_rcv+0x98b/0x1420 ipv6_list_rcv+0x2258/0x26e0 napi_complete_done+0x5b1/0x2990 mlx5e_napi_poll+0x2ae/0x8d0 net_rx_action+0x13e/0x590 irq_exit_rcu+0xf5/0x320 common_interrupt+0x80/0x90 asm_common_interrupt+0x22/0x40 cpuidle_enter_state+0xfb/0x273 cpu_startup_entry+0x15e/0x260 start_secondary+0x8a/0x90 secondary_startup_64_no_verify+0xfa/0xfb freed by task 0 on cpu 9 at 260507.927527s: rcu_core_si+0x4ff/0xf10 irq_exit_rcu+0xf5/0x320 sysvec_apic_timer_interrupt+0x6d/0x80 asm_sysvec_apic_timer_interrupt+0x16/0x20 cpuidle_enter_state+0xfb/0x273 cpu_startup_entry+0x15e/0x260 start_secondary+0x8a/0x90 secondary_startup_64_no_verify+0xfa/0xfb CVE-2024-50154 Container suse/sle-micro-rancher/5.3:latest:kernel-default-5.14.21-150400.24.147.1 Container suse/sle-micro-rancher/5.4:latest:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-md-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:dlm-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:gfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 SUSE Linux Enterprise Micro 5.3:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Micro 5.4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-zfcpdump-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Proxy 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Server 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-zfcpdump-5.14.21-150400.24.147.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ https://www.suse.com/security/cve/CVE-2024-50154.html CVE-2024-50154 https://bugzilla.suse.com/1233070 SUSE Bug 1233070 https://bugzilla.suse.com/1233072 SUSE Bug 1233072 In the Linux kernel, the following vulnerability has been resolved: smb: client: Fix use-after-free of network namespace. Recently, we got a customer report that CIFS triggers oops while reconnecting to a server. [0] The workload runs on Kubernetes, and some pods mount CIFS servers in non-root network namespaces. The problem rarely happened, but it was always while the pod was dying. The root cause is wrong reference counting for network namespace. CIFS uses kernel sockets, which do not hold refcnt of the netns that the socket belongs to. That means CIFS must ensure the socket is always freed before its netns; otherwise, use-after-free happens. The repro steps are roughly: 1. mount CIFS in a non-root netns 2. drop packets from the netns 3. destroy the netns 4. unmount CIFS We can reproduce the issue quickly with the script [1] below and see the splat [2] if CONFIG_NET_NS_REFCNT_TRACKER is enabled. When the socket is TCP, it is hard to guarantee the netns lifetime without holding refcnt due to async timers. Let's hold netns refcnt for each socket as done for SMC in commit 9744d2bf1976 ("smc: Fix use-after-free in tcp_write_timer_handler()."). Note that we need to move put_net() from cifs_put_tcp_session() to clean_demultiplex_info(); otherwise, __sock_create() still could touch a freed netns while cifsd tries to reconnect from cifs_demultiplex_thread(). Also, maybe_get_net() cannot be put just before __sock_create() because the code is not under RCU and there is a small chance that the same address happened to be reallocated to another netns. [0]: CIFS: VFS: \\XXXXXXXXXXX has not responded in 15 seconds. Reconnecting... CIFS: Serverclose failed 4 times, giving up Unable to handle kernel paging request at virtual address 14de99e461f84a07 Mem abort info: ESR = 0x0000000096000004 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x04: level 0 translation fault Data abort info: ISV = 0, ISS = 0x00000004 CM = 0, WnR = 0 [14de99e461f84a07] address between user and kernel address ranges Internal error: Oops: 0000000096000004 [#1] SMP Modules linked in: cls_bpf sch_ingress nls_utf8 cifs cifs_arc4 cifs_md4 dns_resolver tcp_diag inet_diag veth xt_state xt_connmark nf_conntrack_netlink xt_nat xt_statistic xt_MASQUERADE xt_mark xt_addrtype ipt_REJECT nf_reject_ipv4 nft_chain_nat nf_nat xt_conntrack nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xt_comment nft_compat nf_tables nfnetlink overlay nls_ascii nls_cp437 sunrpc vfat fat aes_ce_blk aes_ce_cipher ghash_ce sm4_ce_cipher sm4 sm3_ce sm3 sha3_ce sha512_ce sha512_arm64 sha1_ce ena button sch_fq_codel loop fuse configfs dmi_sysfs sha2_ce sha256_arm64 dm_mirror dm_region_hash dm_log dm_mod dax efivarfs CPU: 5 PID: 2690970 Comm: cifsd Not tainted 6.1.103-109.184.amzn2023.aarch64 #1 Hardware name: Amazon EC2 r7g.4xlarge/, BIOS 1.0 11/1/2018 pstate: 00400005 (nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : fib_rules_lookup+0x44/0x238 lr : __fib_lookup+0x64/0xbc sp : ffff8000265db790 x29: ffff8000265db790 x28: 0000000000000000 x27: 000000000000bd01 x26: 0000000000000000 x25: ffff000b4baf8000 x24: ffff00047b5e4580 x23: ffff8000265db7e0 x22: 0000000000000000 x21: ffff00047b5e4500 x20: ffff0010e3f694f8 x19: 14de99e461f849f7 x18: 0000000000000000 x17: 0000000000000000 x16: 0000000000000000 x15: 0000000000000000 x14: 0000000000000000 x13: 0000000000000000 x12: 3f92800abd010002 x11: 0000000000000001 x10: ffff0010e3f69420 x9 : ffff800008a6f294 x8 : 0000000000000000 x7 : 0000000000000006 x6 : 0000000000000000 x5 : 0000000000000001 x4 : ffff001924354280 x3 : ffff8000265db7e0 x2 : 0000000000000000 x1 : ffff0010e3f694f8 x0 : ffff00047b5e4500 Call trace: fib_rules_lookup+0x44/0x238 __fib_lookup+0x64/0xbc ip_route_output_key_hash_rcu+0x2c4/0x398 ip_route_output_key_hash+0x60/0x8c tcp_v4_connect+0x290/0x488 __inet_stream_connect+0x108/0x3d0 inet_stream_connect+0x50/0x78 kernel_connect+0x6c/0xac generic_ip_conne ---truncated--- CVE-2024-53095 Container suse/sle-micro-rancher/5.3:latest:kernel-default-5.14.21-150400.24.147.1 Container suse/sle-micro-rancher/5.4:latest:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-md-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:dlm-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:gfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 SUSE Linux Enterprise Micro 5.3:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Micro 5.4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-zfcpdump-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Proxy 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Server 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-zfcpdump-5.14.21-150400.24.147.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ https://www.suse.com/security/cve/CVE-2024-53095.html CVE-2024-53095 https://bugzilla.suse.com/1233642 SUSE Bug 1233642 In the Linux kernel, the following vulnerability has been resolved: initramfs: avoid filename buffer overrun The initramfs filename field is defined in Documentation/driver-api/early-userspace/buffer-format.rst as: 37 cpio_file := ALGN(4) + cpio_header + filename + "\0" + ALGN(4) + data ... 55 ============= ================== ========================= 56 Field name Field size Meaning 57 ============= ================== ========================= ... 70 c_namesize 8 bytes Length of filename, including final \0 When extracting an initramfs cpio archive, the kernel's do_name() path handler assumes a zero-terminated path at @collected, passing it directly to filp_open() / init_mkdir() / init_mknod(). If a specially crafted cpio entry carries a non-zero-terminated filename and is followed by uninitialized memory, then a file may be created with trailing characters that represent the uninitialized memory. The ability to create an initramfs entry would imply already having full control of the system, so the buffer overrun shouldn't be considered a security vulnerability. Append the output of the following bash script to an existing initramfs and observe any created /initramfs_test_fname_overrunAA* path. E.g. ./reproducer.sh | gzip >> /myinitramfs It's easiest to observe non-zero uninitialized memory when the output is gzipped, as it'll overflow the heap allocated @out_buf in __gunzip(), rather than the initrd_start+initrd_size block. ---- reproducer.sh ---- nilchar="A" # change to "\0" to properly zero terminate / pad magic="070701" ino=1 mode=$(( 0100777 )) uid=0 gid=0 nlink=1 mtime=1 filesize=0 devmajor=0 devminor=1 rdevmajor=0 rdevminor=0 csum=0 fname="initramfs_test_fname_overrun" namelen=$(( ${#fname} + 1 )) # plus one to account for terminator printf "%s%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%08x%s" \ $magic $ino $mode $uid $gid $nlink $mtime $filesize \ $devmajor $devminor $rdevmajor $rdevminor $namelen $csum $fname termpadlen=$(( 1 + ((4 - ((110 + $namelen) & 3)) % 4) )) printf "%.s${nilchar}" $(seq 1 $termpadlen) ---- reproducer.sh ---- Symlink filename fields handled in do_symlink() won't overrun past the data segment, due to the explicit zero-termination of the symlink target. Fix filename buffer overrun by aborting the initramfs FSM if any cpio entry doesn't carry a zero-terminator at the expected (name_len - 1) offset. CVE-2024-53142 Container suse/sle-micro-rancher/5.3:latest:kernel-default-5.14.21-150400.24.147.1 Container suse/sle-micro-rancher/5.4:latest:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-md-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:dlm-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:gfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 SUSE Linux Enterprise Micro 5.3:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Micro 5.4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-zfcpdump-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Proxy 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Server 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-zfcpdump-5.14.21-150400.24.147.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ https://www.suse.com/security/cve/CVE-2024-53142.html CVE-2024-53142 https://bugzilla.suse.com/1232436 SUSE Bug 1232436 In the Linux kernel, the following vulnerability has been resolved: NFSD: Prevent a potential integer overflow If the tag length is >= U32_MAX - 3 then the "length + 4" addition can result in an integer overflow. Address this by splitting the decoding into several steps so that decode_cb_compound4res() does not have to perform arithmetic on the unsafe length value. CVE-2024-53146 Container suse/sle-micro-rancher/5.3:latest:kernel-default-5.14.21-150400.24.147.1 Container suse/sle-micro-rancher/5.4:latest:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-md-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:dlm-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:gfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 SUSE Linux Enterprise Micro 5.3:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Micro 5.4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-zfcpdump-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Proxy 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Server 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-zfcpdump-5.14.21-150400.24.147.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ https://www.suse.com/security/cve/CVE-2024-53146.html CVE-2024-53146 https://bugzilla.suse.com/1234853 SUSE Bug 1234853 https://bugzilla.suse.com/1234854 SUSE Bug 1234854 In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service() I found the following bug in my fuzzer: UBSAN: array-index-out-of-bounds in drivers/net/wireless/ath/ath9k/htc_hst.c:26:51 index 255 is out of range for type 'htc_endpoint [22]' CPU: 0 UID: 0 PID: 8 Comm: kworker/0:0 Not tainted 6.11.0-rc6-dirty #14 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 Workqueue: events request_firmware_work_func Call Trace: <TASK> dump_stack_lvl+0x180/0x1b0 __ubsan_handle_out_of_bounds+0xd4/0x130 htc_issue_send.constprop.0+0x20c/0x230 ? _raw_spin_unlock_irqrestore+0x3c/0x70 ath9k_wmi_cmd+0x41d/0x610 ? mark_held_locks+0x9f/0xe0 ... Since this bug has been confirmed to be caused by insufficient verification of conn_rsp_epid, I think it would be appropriate to add a range check for conn_rsp_epid to htc_connect_service() to prevent the bug from occurring. CVE-2024-53156 Container suse/sle-micro-rancher/5.3:latest:kernel-default-5.14.21-150400.24.147.1 Container suse/sle-micro-rancher/5.4:latest:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-md-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:dlm-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:gfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 SUSE Linux Enterprise Micro 5.3:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Micro 5.4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-zfcpdump-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Proxy 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Server 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-zfcpdump-5.14.21-150400.24.147.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ https://www.suse.com/security/cve/CVE-2024-53156.html CVE-2024-53156 https://bugzilla.suse.com/1234846 SUSE Bug 1234846 https://bugzilla.suse.com/1234847 SUSE Bug 1234847 https://bugzilla.suse.com/1234853 SUSE Bug 1234853 In the Linux kernel, the following vulnerability has been resolved: NFSv4.0: Fix a use-after-free problem in the asynchronous open() Yang Erkun reports that when two threads are opening files at the same time, and are forced to abort before a reply is seen, then the call to nfs_release_seqid() in nfs4_opendata_free() can result in a use-after-free of the pointer to the defunct rpc task of the other thread. The fix is to ensure that if the RPC call is aborted before the call to nfs_wait_on_sequence() is complete, then we must call nfs_release_seqid() in nfs4_open_release() before the rpc_task is freed. CVE-2024-53173 Container suse/sle-micro-rancher/5.3:latest:kernel-default-5.14.21-150400.24.147.1 Container suse/sle-micro-rancher/5.4:latest:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-md-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:dlm-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:gfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 SUSE Linux Enterprise Micro 5.3:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Micro 5.4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-zfcpdump-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Proxy 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Server 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-zfcpdump-5.14.21-150400.24.147.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ https://www.suse.com/security/cve/CVE-2024-53173.html CVE-2024-53173 https://bugzilla.suse.com/1234853 SUSE Bug 1234853 https://bugzilla.suse.com/1234891 SUSE Bug 1234891 https://bugzilla.suse.com/1234892 SUSE Bug 1234892 In the Linux kernel, the following vulnerability has been resolved: smb: client: fix use-after-free of signing key Customers have reported use-after-free in @ses->auth_key.response with SMB2.1 + sign mounts which occurs due to following race: task A task B cifs_mount() dfs_mount_share() get_session() cifs_mount_get_session() cifs_send_recv() cifs_get_smb_ses() compound_send_recv() cifs_setup_session() smb2_setup_request() kfree_sensitive() smb2_calc_signature() crypto_shash_setkey() *UAF* Fix this by ensuring that we have a valid @ses->auth_key.response by checking whether @ses->ses_status is SES_GOOD or SES_EXITING with @ses->ses_lock held. After commit 24a9799aa8ef ("smb: client: fix UAF in smb2_reconnect_server()"), we made sure to call ->logoff() only when @ses was known to be good (e.g. valid ->auth_key.response), so it's safe to access signing key when @ses->ses_status == SES_EXITING. CVE-2024-53179 Container suse/sle-micro-rancher/5.3:latest:kernel-default-5.14.21-150400.24.147.1 Container suse/sle-micro-rancher/5.4:latest:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-md-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:dlm-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:gfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 SUSE Linux Enterprise Micro 5.3:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Micro 5.4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-zfcpdump-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Proxy 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Server 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-zfcpdump-5.14.21-150400.24.147.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ https://www.suse.com/security/cve/CVE-2024-53179.html CVE-2024-53179 https://bugzilla.suse.com/1234921 SUSE Bug 1234921 https://bugzilla.suse.com/1234927 SUSE Bug 1234927 In the Linux kernel, the following vulnerability has been resolved: tcp: Fix use-after-free of nreq in reqsk_timer_handler(). The cited commit replaced inet_csk_reqsk_queue_drop_and_put() with __inet_csk_reqsk_queue_drop() and reqsk_put() in reqsk_timer_handler(). Then, oreq should be passed to reqsk_put() instead of req; otherwise use-after-free of nreq could happen when reqsk is migrated but the retry attempt failed (e.g. due to timeout). Let's pass oreq to reqsk_put(). CVE-2024-53206 Container suse/sle-micro-rancher/5.3:latest:kernel-default-5.14.21-150400.24.147.1 Container suse/sle-micro-rancher/5.4:latest:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-md-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:dlm-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:gfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 SUSE Linux Enterprise Micro 5.3:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Micro 5.4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-zfcpdump-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Proxy 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Server 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-zfcpdump-5.14.21-150400.24.147.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ https://www.suse.com/security/cve/CVE-2024-53206.html CVE-2024-53206 https://bugzilla.suse.com/1234960 SUSE Bug 1234960 In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Properly hide first-in-list PCIe extended capability There are cases where a PCIe extended capability should be hidden from the user. For example, an unknown capability (i.e., capability with ID greater than PCI_EXT_CAP_ID_MAX) or a capability that is intentionally chosen to be hidden from the user. Hiding a capability is done by virtualizing and modifying the 'Next Capability Offset' field of the previous capability so it points to the capability after the one that should be hidden. The special case where the first capability in the list should be hidden is handled differently because there is no previous capability that can be modified. In this case, the capability ID and version are zeroed while leaving the next pointer intact. This hides the capability and leaves an anchor for the rest of the capability list. However, today, hiding the first capability in the list is not done properly if the capability is unknown, as struct vfio_pci_core_device->pci_config_map is set to the capability ID during initialization but the capability ID is not properly checked later when used in vfio_config_do_rw(). This leads to the following warning [1] and to an out-of-bounds access to ecap_perms array. Fix it by checking cap_id in vfio_config_do_rw(), and if it is greater than PCI_EXT_CAP_ID_MAX, use an alternative struct perm_bits for direct read only access instead of the ecap_perms array. Note that this is safe since the above is the only case where cap_id can exceed PCI_EXT_CAP_ID_MAX (except for the special capabilities, which are already checked before). [1] WARNING: CPU: 118 PID: 5329 at drivers/vfio/pci/vfio_pci_config.c:1900 vfio_pci_config_rw+0x395/0x430 [vfio_pci_core] CPU: 118 UID: 0 PID: 5329 Comm: simx-qemu-syste Not tainted 6.12.0+ #1 (snip) Call Trace: <TASK> ? show_regs+0x69/0x80 ? __warn+0x8d/0x140 ? vfio_pci_config_rw+0x395/0x430 [vfio_pci_core] ? report_bug+0x18f/0x1a0 ? handle_bug+0x63/0xa0 ? exc_invalid_op+0x19/0x70 ? asm_exc_invalid_op+0x1b/0x20 ? vfio_pci_config_rw+0x395/0x430 [vfio_pci_core] ? vfio_pci_config_rw+0x244/0x430 [vfio_pci_core] vfio_pci_rw+0x101/0x1b0 [vfio_pci_core] vfio_pci_core_read+0x1d/0x30 [vfio_pci_core] vfio_device_fops_read+0x27/0x40 [vfio] vfs_read+0xbd/0x340 ? vfio_device_fops_unl_ioctl+0xbb/0x740 [vfio] ? __rseq_handle_notify_resume+0xa4/0x4b0 __x64_sys_pread64+0x96/0xc0 x64_sys_call+0x1c3d/0x20d0 do_syscall_64+0x4d/0x120 entry_SYSCALL_64_after_hwframe+0x76/0x7e CVE-2024-53214 Container suse/sle-micro-rancher/5.3:latest:kernel-default-5.14.21-150400.24.147.1 Container suse/sle-micro-rancher/5.4:latest:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-md-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:dlm-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:gfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 SUSE Linux Enterprise Micro 5.3:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Micro 5.4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-zfcpdump-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Proxy 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Server 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-zfcpdump-5.14.21-150400.24.147.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ https://www.suse.com/security/cve/CVE-2024-53214.html CVE-2024-53214 https://bugzilla.suse.com/1235004 SUSE Bug 1235004 https://bugzilla.suse.com/1235005 SUSE Bug 1235005 In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: Release resources at card release The current 6fire code tries to release the resources right after the call of usb6fire_chip_abort(). But at this moment, the card object might be still in use (as we're calling snd_card_free_when_closed()). For avoid potential UAFs, move the release of resources to the card's private_free instead of the manual call of usb6fire_chip_destroy() at the USB disconnect callback. CVE-2024-53239 Container suse/sle-micro-rancher/5.3:latest:kernel-default-5.14.21-150400.24.147.1 Container suse/sle-micro-rancher/5.4:latest:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-md-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:dlm-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:gfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 SUSE Linux Enterprise Micro 5.3:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Micro 5.4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-zfcpdump-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Proxy 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Server 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-zfcpdump-5.14.21-150400.24.147.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ https://www.suse.com/security/cve/CVE-2024-53239.html CVE-2024-53239 https://bugzilla.suse.com/1234853 SUSE Bug 1234853 https://bugzilla.suse.com/1235054 SUSE Bug 1235054 https://bugzilla.suse.com/1235055 SUSE Bug 1235055 In the Linux kernel, the following vulnerability has been resolved: xen/netfront: fix crash when removing device When removing a netfront device directly after a suspend/resume cycle it might happen that the queues have not been setup again, causing a crash during the attempt to stop the queues another time. Fix that by checking the queues are existing before trying to stop them. This is XSA-465 / CVE-2024-53240. CVE-2024-53240 Container suse/sle-micro-rancher/5.3:latest:kernel-default-5.14.21-150400.24.147.1 Container suse/sle-micro-rancher/5.4:latest:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-md-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:dlm-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:gfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 SUSE Linux Enterprise Micro 5.3:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Micro 5.4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-zfcpdump-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Proxy 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Server 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-zfcpdump-5.14.21-150400.24.147.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ https://www.suse.com/security/cve/CVE-2024-53240.html CVE-2024-53240 https://bugzilla.suse.com/1234281 SUSE Bug 1234281 In the Linux kernel, the following vulnerability has been resolved: x86/xen: don't do PV iret hypercall through hypercall page Instead of jumping to the Xen hypercall page for doing the iret hypercall, directly code the required sequence in xen-asm.S. This is done in preparation of no longer using hypercall page at all, as it has shown to cause problems with speculation mitigations. This is part of XSA-466 / CVE-2024-53241. CVE-2024-53241 Container suse/sle-micro-rancher/5.3:latest:kernel-default-5.14.21-150400.24.147.1 Container suse/sle-micro-rancher/5.4:latest:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-md-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:dlm-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:gfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 SUSE Linux Enterprise Micro 5.3:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Micro 5.4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-zfcpdump-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Proxy 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Server 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-zfcpdump-5.14.21-150400.24.147.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ https://www.suse.com/security/cve/CVE-2024-53241.html CVE-2024-53241 https://bugzilla.suse.com/1234282 SUSE Bug 1234282 In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan() Replace one-element array with a flexible-array member in `struct mwifiex_ie_types_wildcard_ssid_params` to fix the following warning on a MT8173 Chromebook (mt8173-elm-hana): [ 356.775250] ------------[ cut here ]------------ [ 356.784543] memcpy: detected field-spanning write (size 6) of single field "wildcard_ssid_tlv->ssid" at drivers/net/wireless/marvell/mwifiex/scan.c:904 (size 1) [ 356.813403] WARNING: CPU: 3 PID: 742 at drivers/net/wireless/marvell/mwifiex/scan.c:904 mwifiex_scan_networks+0x4fc/0xf28 [mwifiex] The "(size 6)" above is exactly the length of the SSID of the network this device was connected to. The source of the warning looks like: ssid_len = user_scan_in->ssid_list[i].ssid_len; [...] memcpy(wildcard_ssid_tlv->ssid, user_scan_in->ssid_list[i].ssid, ssid_len); There is a #define WILDCARD_SSID_TLV_MAX_SIZE that uses sizeof() on this struct, but it already didn't account for the size of the one-element array, so it doesn't need to be changed. CVE-2024-56539 Container suse/sle-micro-rancher/5.3:latest:kernel-default-5.14.21-150400.24.147.1 Container suse/sle-micro-rancher/5.4:latest:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-md-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:dlm-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:gfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 SUSE Linux Enterprise Micro 5.3:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Micro 5.4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-zfcpdump-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Proxy 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Server 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-zfcpdump-5.14.21-150400.24.147.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ https://www.suse.com/security/cve/CVE-2024-56539.html CVE-2024-56539 https://bugzilla.suse.com/1234853 SUSE Bug 1234853 https://bugzilla.suse.com/1234963 SUSE Bug 1234963 https://bugzilla.suse.com/1234964 SUSE Bug 1234964 In the Linux kernel, the following vulnerability has been resolved: hfsplus: don't query the device logical block size multiple times Devices block sizes may change. One of these cases is a loop device by using ioctl LOOP_SET_BLOCK_SIZE. While this may cause other issues like IO being rejected, in the case of hfsplus, it will allocate a block by using that size and potentially write out-of-bounds when hfsplus_read_wrapper calls hfsplus_submit_bio and the latter function reads a different io_size. Using a new min_io_size initally set to sb_min_blocksize works for the purposes of the original fix, since it will be set to the max between HFSPLUS_SECTOR_SIZE and the first seen logical block size. We still use the max between HFSPLUS_SECTOR_SIZE and min_io_size in case the latter is not initialized. Tested by mounting an hfsplus filesystem with loop block sizes 512, 1024 and 4096. The produced KASAN report before the fix looks like this: [ 419.944641] ================================================================== [ 419.945655] BUG: KASAN: slab-use-after-free in hfsplus_read_wrapper+0x659/0xa0a [ 419.946703] Read of size 2 at addr ffff88800721fc00 by task repro/10678 [ 419.947612] [ 419.947846] CPU: 0 UID: 0 PID: 10678 Comm: repro Not tainted 6.12.0-rc5-00008-gdf56e0f2f3ca #84 [ 419.949007] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15.0-1 04/01/2014 [ 419.950035] Call Trace: [ 419.950384] <TASK> [ 419.950676] dump_stack_lvl+0x57/0x78 [ 419.951212] ? hfsplus_read_wrapper+0x659/0xa0a [ 419.951830] print_report+0x14c/0x49e [ 419.952361] ? __virt_addr_valid+0x267/0x278 [ 419.952979] ? kmem_cache_debug_flags+0xc/0x1d [ 419.953561] ? hfsplus_read_wrapper+0x659/0xa0a [ 419.954231] kasan_report+0x89/0xb0 [ 419.954748] ? hfsplus_read_wrapper+0x659/0xa0a [ 419.955367] hfsplus_read_wrapper+0x659/0xa0a [ 419.955948] ? __pfx_hfsplus_read_wrapper+0x10/0x10 [ 419.956618] ? do_raw_spin_unlock+0x59/0x1a9 [ 419.957214] ? _raw_spin_unlock+0x1a/0x2e [ 419.957772] hfsplus_fill_super+0x348/0x1590 [ 419.958355] ? hlock_class+0x4c/0x109 [ 419.958867] ? __pfx_hfsplus_fill_super+0x10/0x10 [ 419.959499] ? __pfx_string+0x10/0x10 [ 419.960006] ? lock_acquire+0x3e2/0x454 [ 419.960532] ? bdev_name.constprop.0+0xce/0x243 [ 419.961129] ? __pfx_bdev_name.constprop.0+0x10/0x10 [ 419.961799] ? pointer+0x3f0/0x62f [ 419.962277] ? __pfx_pointer+0x10/0x10 [ 419.962761] ? vsnprintf+0x6c4/0xfba [ 419.963178] ? __pfx_vsnprintf+0x10/0x10 [ 419.963621] ? setup_bdev_super+0x376/0x3b3 [ 419.964029] ? snprintf+0x9d/0xd2 [ 419.964344] ? __pfx_snprintf+0x10/0x10 [ 419.964675] ? lock_acquired+0x45c/0x5e9 [ 419.965016] ? set_blocksize+0x139/0x1c1 [ 419.965381] ? sb_set_blocksize+0x6d/0xae [ 419.965742] ? __pfx_hfsplus_fill_super+0x10/0x10 [ 419.966179] mount_bdev+0x12f/0x1bf [ 419.966512] ? __pfx_mount_bdev+0x10/0x10 [ 419.966886] ? vfs_parse_fs_string+0xce/0x111 [ 419.967293] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 419.967702] ? __pfx_hfsplus_mount+0x10/0x10 [ 419.968073] legacy_get_tree+0x104/0x178 [ 419.968414] vfs_get_tree+0x86/0x296 [ 419.968751] path_mount+0xba3/0xd0b [ 419.969157] ? __pfx_path_mount+0x10/0x10 [ 419.969594] ? kmem_cache_free+0x1e2/0x260 [ 419.970311] do_mount+0x99/0xe0 [ 419.970630] ? __pfx_do_mount+0x10/0x10 [ 419.971008] __do_sys_mount+0x199/0x1c9 [ 419.971397] do_syscall_64+0xd0/0x135 [ 419.971761] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 419.972233] RIP: 0033:0x7c3cb812972e [ 419.972564] Code: 48 8b 0d f5 46 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 90 f3 0f 1e fa 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d c2 46 0d 00 f7 d8 64 89 01 48 [ 419.974371] RSP: 002b:00007ffe30632548 EFLAGS: 00000286 ORIG_RAX: 00000000000000a5 [ 419.975048] RAX: ffffffffffffffda RBX: 00007ffe306328d8 RCX: 00007c3cb812972e [ 419.975701] RDX: 0000000020000000 RSI: 0000000020000c80 RDI: ---truncated--- CVE-2024-56548 Container suse/sle-micro-rancher/5.3:latest:kernel-default-5.14.21-150400.24.147.1 Container suse/sle-micro-rancher/5.4:latest:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-md-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:dlm-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:gfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 SUSE Linux Enterprise Micro 5.3:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Micro 5.4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-zfcpdump-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Proxy 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Server 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-zfcpdump-5.14.21-150400.24.147.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ https://www.suse.com/security/cve/CVE-2024-56548.html CVE-2024-56548 https://bugzilla.suse.com/1234853 SUSE Bug 1234853 https://bugzilla.suse.com/1235073 SUSE Bug 1235073 https://bugzilla.suse.com/1235074 SUSE Bug 1235074 In the Linux kernel, the following vulnerability has been resolved: ovl: Filter invalid inodes with missing lookup function Add a check to the ovl_dentry_weird() function to prevent the processing of directory inodes that lack the lookup function. This is important because such inodes can cause errors in overlayfs when passed to the lowerstack. CVE-2024-56570 Container suse/sle-micro-rancher/5.3:latest:kernel-default-5.14.21-150400.24.147.1 Container suse/sle-micro-rancher/5.4:latest:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-md-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:dlm-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:gfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 SUSE Linux Enterprise Micro 5.3:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Micro 5.4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-zfcpdump-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Proxy 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Server 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-zfcpdump-5.14.21-150400.24.147.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ https://www.suse.com/security/cve/CVE-2024-56570.html CVE-2024-56570 https://bugzilla.suse.com/1235035 SUSE Bug 1235035 In the Linux kernel, the following vulnerability has been resolved: jfs: array-index-out-of-bounds fix in dtReadFirst The value of stbl can be sometimes out of bounds due to a bad filesystem. Added a check with appopriate return of error code in that case. CVE-2024-56598 Container suse/sle-micro-rancher/5.3:latest:kernel-default-5.14.21-150400.24.147.1 Container suse/sle-micro-rancher/5.4:latest:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-md-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:dlm-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:gfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 SUSE Linux Enterprise Micro 5.3:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Micro 5.4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-zfcpdump-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Proxy 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Server 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-zfcpdump-5.14.21-150400.24.147.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ https://www.suse.com/security/cve/CVE-2024-56598.html CVE-2024-56598 https://bugzilla.suse.com/1235220 SUSE Bug 1235220 https://bugzilla.suse.com/1235221 SUSE Bug 1235221 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: avoid leaving dangling sk pointer in rfcomm_sock_alloc() bt_sock_alloc() attaches allocated sk object to the provided sock object. If rfcomm_dlc_alloc() fails, we release the sk object, but leave the dangling pointer in the sock object, which may cause use-after-free. Fix this by swapping calls to bt_sock_alloc() and rfcomm_dlc_alloc(). CVE-2024-56604 Container suse/sle-micro-rancher/5.3:latest:kernel-default-5.14.21-150400.24.147.1 Container suse/sle-micro-rancher/5.4:latest:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-md-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:dlm-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:gfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 SUSE Linux Enterprise Micro 5.3:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Micro 5.4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-zfcpdump-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Proxy 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Server 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-zfcpdump-5.14.21-150400.24.147.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ https://www.suse.com/security/cve/CVE-2024-56604.html CVE-2024-56604 https://bugzilla.suse.com/1235056 SUSE Bug 1235056 https://bugzilla.suse.com/1235058 SUSE Bug 1235058 In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: do not leave dangling sk pointer on error in l2cap_sock_create() bt_sock_alloc() allocates the sk object and attaches it to the provided sock object. On error l2cap_sock_alloc() frees the sk object, but the dangling pointer is still attached to the sock object, which may create use-after-free in other code. CVE-2024-56605 Container suse/sle-micro-rancher/5.3:latest:kernel-default-5.14.21-150400.24.147.1 Container suse/sle-micro-rancher/5.4:latest:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-md-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:dlm-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:gfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 SUSE Linux Enterprise Micro 5.3:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Micro 5.4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-zfcpdump-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Proxy 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Server 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-zfcpdump-5.14.21-150400.24.147.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ https://www.suse.com/security/cve/CVE-2024-56605.html CVE-2024-56605 https://bugzilla.suse.com/1234853 SUSE Bug 1234853 https://bugzilla.suse.com/1235061 SUSE Bug 1235061 https://bugzilla.suse.com/1235062 SUSE Bug 1235062 In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry() Syzbot reported that when searching for records in a directory where the inode's i_size is corrupted and has a large value, memory access outside the folio/page range may occur, or a use-after-free bug may be detected if KASAN is enabled. This is because nilfs_last_byte(), which is called by nilfs_find_entry() and others to calculate the number of valid bytes of directory data in a page from i_size and the page index, loses the upper 32 bits of the 64-bit size information due to an inappropriate type of local variable to which the i_size value is assigned. This caused a large byte offset value due to underflow in the end address calculation in the calling nilfs_find_entry(), resulting in memory access that exceeds the folio/page size. Fix this issue by changing the type of the local variable causing the bit loss from "unsigned int" to "u64". The return value of nilfs_last_byte() is also of type "unsigned int", but it is truncated so as not to exceed PAGE_SIZE and no bit loss occurs, so no change is required. CVE-2024-56619 Container suse/sle-micro-rancher/5.3:latest:kernel-default-5.14.21-150400.24.147.1 Container suse/sle-micro-rancher/5.4:latest:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-md-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:dlm-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:gfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 SUSE Linux Enterprise Micro 5.3:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Micro 5.4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-zfcpdump-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Proxy 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Server 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-zfcpdump-5.14.21-150400.24.147.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ https://www.suse.com/security/cve/CVE-2024-56619.html CVE-2024-56619 https://bugzilla.suse.com/1235224 SUSE Bug 1235224 https://bugzilla.suse.com/1235225 SUSE Bug 1235225 BlueZ HID over GATT Profile Improper Access Control Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of BlueZ. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the HID over GATT Profile. The issue results from the lack of authorization prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of the current user. Was ZDI-CAN-25177. CVE-2024-8805 Container suse/sle-micro-rancher/5.3:latest:kernel-default-5.14.21-150400.24.147.1 Container suse/sle-micro-rancher/5.4:latest:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-3:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-Azure:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-Micro-5-4:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS-GCE:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS-EC2:ocfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:cluster-md-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:dlm-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:gfs2-kmp-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:kernel-default-5.14.21-150400.24.147.1 Image SLES15-SP4-SAP-Hardened-BYOS:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:cluster-md-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:dlm-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:gfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Availability Extension 15 SP4:ocfs2-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Live Patching 15 SP4:kernel-livepatch-5_14_21-150400_24_147-default-1-150400.9.3.1 SUSE Linux Enterprise Micro 5.3:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Micro 5.4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Micro 5.4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-64kb-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-zfcpdump-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-docs-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-obs-build-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-syms-5.14.21-150400.24.147.1 SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Proxy 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Proxy 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-default-base-5.14.21-150400.24.147.1.150400.24.72.1 SUSE Manager Server 4.3:kernel-default-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-devel-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-macros-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-source-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-syms-5.14.21-150400.24.147.1 SUSE Manager Server 4.3:kernel-zfcpdump-5.14.21-150400.24.147.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2025/suse-su-20250203-1/ https://www.suse.com/security/cve/CVE-2024-8805.html CVE-2024-8805 https://bugzilla.suse.com/1230697 SUSE Bug 1230697