Upstream information
Description
In the Linux kernel, the following vulnerability has been resolved:btrfs: get rid of warning on transaction commit when using flushoncommit
When using the flushoncommit mount option, during almost every transaction
commit we trigger a warning from __writeback_inodes_sb_nr():
$ cat fs/fs-writeback.c:
(...)
static void __writeback_inodes_sb_nr(struct super_block *sb, ...
{
(...)
WARN_ON(!rwsem_is_locked(&sb->s_umount));
(...)
}
(...)
The trace produced in dmesg looks like the following:
[947.473890] WARNING: CPU: 5 PID: 930 at fs/fs-writeback.c:2610 __writeback_inodes_sb_nr+0x7e/0xb3
[947.481623] Modules linked in: nfsd nls_cp437 cifs asn1_decoder cifs_arc4 fscache cifs_md4 ipmi_ssif
[947.489571] CPU: 5 PID: 930 Comm: btrfs-transacti Not tainted 95.16.3-srb-asrock-00001-g36437ad63879 #186
[947.497969] RIP: 0010:__writeback_inodes_sb_nr+0x7e/0xb3
[947.502097] Code: 24 10 4c 89 44 24 18 c6 (...)
[947.519760] RSP: 0018:ffffc90000777e10 EFLAGS: 00010246
[947.523818] RAX: 0000000000000000 RBX: 0000000000963300 RCX: 0000000000000000
[947.529765] RDX: 0000000000000000 RSI: 000000000000fa51 RDI: ffffc90000777e50
[947.535740] RBP: ffff888101628a90 R08: ffff888100955800 R09: ffff888100956000
[947.541701] R10: 0000000000000002 R11: 0000000000000001 R12: ffff888100963488
[947.547645] R13: ffff888100963000 R14: ffff888112fb7200 R15: ffff888100963460
[947.553621] FS: 0000000000000000(0000) GS:ffff88841fd40000(0000) knlGS:0000000000000000
[947.560537] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[947.565122] CR2: 0000000008be50c4 CR3: 000000000220c000 CR4: 00000000001006e0
[947.571072] Call Trace:
[947.572354] <TASK>
[947.573266] btrfs_commit_transaction+0x1f1/0x998
[947.576785] ? start_transaction+0x3ab/0x44e
[947.579867] ? schedule_timeout+0x8a/0xdd
[947.582716] transaction_kthread+0xe9/0x156
[947.585721] ? btrfs_cleanup_transaction.isra.0+0x407/0x407
[947.590104] kthread+0x131/0x139
[947.592168] ? set_kthread_struct+0x32/0x32
[947.595174] ret_from_fork+0x22/0x30
[947.597561] </TASK>
[947.598553] ---[ end trace 644721052755541c ]---
This is because we started using writeback_inodes_sb() to flush delalloc
when committing a transaction (when using -o flushoncommit), in order to
avoid deadlocks with filesystem freeze operations. This change was made
by commit ce8ea7cc6eb313 ("btrfs: don't call btrfs_start_delalloc_roots
in flushoncommit"). After that change we started producing that warning,
and every now and then a user reports this since the warning happens too
often, it spams dmesg/syslog, and a user is unsure if this reflects any
problem that might compromise the filesystem's reliability.
We can not just lock the sb->s_umount semaphore before calling
writeback_inodes_sb(), because that would at least deadlock with
filesystem freezing, since at fs/super.c:freeze_super() sync_filesystem()
is called while we are holding that semaphore in write mode, and that can
trigger a transaction commit, resulting in a deadlock. It would also
trigger the same type of deadlock in the unmount path. Possibly, it could
also introduce some other locking dependencies that lockdep would report.
To fix this call try_to_writeback_inodes_sb() instead of
writeback_inodes_sb(), because that will try to read lock sb->s_umount
and then will only call writeback_inodes_sb() if it was able to lock it.
This is fine because the cases where it can't read lock sb->s_umount
are during a filesystem unmount or during a filesystem freeze - in those
cases sb->s_umount is write locked and sync_filesystem() is called, which
calls writeback_inodes_sb(). In other words, in all cases where we can't
take a read lock on sb->s_umount, writeback is already being triggered
elsewhere.
An alternative would be to call btrfs_start_delalloc_roots() with a
number of pages different from LONG_MAX, for example matching the number
of delalloc bytes we currently have, in
---truncated---
SUSE information
Overall state of this security issue: Pending
This issue is currently rated as having moderate severity.
National Vulnerability Database | SUSE | |
---|---|---|
Base Score | 5.5 | 5.5 |
Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Attack Vector | Local | Local |
Attack Complexity | Low | Low |
Privileges Required | Low | Low |
User Interaction | None | None |
Scope | Unchanged | Unchanged |
Confidentiality Impact | None | None |
Integrity Impact | None | None |
Availability Impact | High | High |
CVSSv3 Version | 3.1 | 3.1 |
SUSE | |
---|---|
Base Score | 6.8 |
Vector | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
Attack Vector | Local |
Attack Complexity | Low |
Attack Requirements | None |
Privileges Required | Low |
User Interaction | None |
Vulnerable System Confidentiality Impact | None |
Vulnerable System Integrity Impact | None |
Vulnerable System Availability Impact | High |
Subsequent System Confidentiality Impact | None |
Subsequent System Integrity Impact | None |
Subsequent System Availability Impact | None |
CVSSv4 Version | 4.0 |
Note from the SUSE Security Team on the kernel-default package
SUSE will no longer fix all CVEs in the Linux Kernel anymore, but declare some bug classes as won't fix. Please refer to TID 21496 for more details. SUSE Bugzilla entry: 1229658 [NEW]SUSE Security Advisories:
- SUSE-SU-2024:3189-1, published Tue Sep 10 12:42:08 UTC 2024
- SUSE-SU-2024:3190-1, published Tue Sep 10 12:40:24 UTC 2024
- SUSE-SU-2024:3209-1, published Wed Sep 11 16:34:14 UTC 2024
- SUSE-SU-2024:3251-1, published Mon Sep 16 12:31:51 UTC 2024
- SUSE-SU-2024:3252-1, published Mon Sep 16 12:33:22 UTC 2024
- SUSE-SU-2024:3483-1, published Fri Sep 27 16:34:42 UTC 2024
List of released packages
Product(s) | Fixed package version(s) | References |
---|---|---|
Container bci/bci-sle15-kernel-module-devel:15.5.25.4 |
| |
Container suse/sle-micro/kvm-5.5:2.0.4-3.5.184 |
| |
Container suse/sle-micro/rt-5.5:2.0.4-4.5.160 |
| |
Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand |
| |
Image SLES12-SP5-GCE-BYOS |
| |
Image SLES15-SP5-Azure-Basic Image SLES15-SP5-Azure-Standard Image SLES15-SP5-HPC-Azure |
| |
Image SLES15-SP5-CHOST-BYOS-Aliyun Image SLES15-SP5-CHOST-BYOS-Azure Image SLES15-SP5-CHOST-BYOS-EC2 Image SLES15-SP5-CHOST-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-GDC Image SLES15-SP5-CHOST-BYOS-SAP-CCloud Image SLES15-SP5-Micro-5-5 Image SLES15-SP5-Micro-5-5-Azure Image SLES15-SP5-Micro-5-5-BYOS Image SLES15-SP5-Micro-5-5-BYOS-Azure |
| |
Image SLES15-SP5-SAP-Azure-LI-BYOS Image SLES15-SP5-SAP-Azure-LI-BYOS-Production Image SLES15-SP5-SAP-Azure-VLI-BYOS Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production |
| |
SUSE Linux Enterprise Desktop 15 SP5 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP5-2024-3483 SUSE-SLE-Module-Development-Tools-15-SP5-2024-3483 SUSE-SLE-Product-WE-15-SP5-2024-3483 |
SUSE Linux Enterprise High Availability Extension 12 SP5 |
| Patchnames: SUSE-SLE-HA-12-SP5-2024-3251 |
SUSE Linux Enterprise High Availability Extension 15 SP5 |
| Patchnames: SUSE-SLE-Product-HA-15-SP5-2024-3483 |
SUSE Linux Enterprise High Performance Computing 15 SP5 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP5-2024-3483 SUSE-SLE-Module-Development-Tools-15-SP5-2024-3483 SUSE-SLE-Module-Legacy-15-SP5-2024-3483 SUSE-SLE-Module-Public-Cloud-15-SP5-2024-3190 |
SUSE Linux Enterprise Live Patching 12 SP5 |
| Patchnames: SUSE-SLE-Live-Patching-12-SP5-2024-3251 |
SUSE Linux Enterprise Live Patching 15 SP5 | Patchnames: SUSE-SLE-Module-Live-Patching-15-SP5-2024-3209 SUSE-SLE-Module-Live-Patching-15-SP5-2024-3483 | |
SUSE Linux Enterprise Micro 5.5 |
| Patchnames: SUSE-SLE-Micro-5.5-2024-3209 SUSE-SLE-Micro-5.5-2024-3483 |
SUSE Linux Enterprise Module for Basesystem 15 SP5 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP5-2024-3483 |
SUSE Linux Enterprise Module for Development Tools 15 SP5 |
| Patchnames: SUSE-SLE-Module-Development-Tools-15-SP5-2024-3483 |
SUSE Linux Enterprise Module for Legacy 15 SP5 |
| Patchnames: SUSE-SLE-Module-Legacy-15-SP5-2024-3483 |
SUSE Linux Enterprise Module for Public Cloud 15 SP5 |
| Patchnames: SUSE-SLE-Module-Public-Cloud-15-SP5-2024-3190 |
SUSE Linux Enterprise Real Time 12 SP5 |
| Patchnames: SUSE-SLE-RT-12-SP5-2024-3189 |
SUSE Linux Enterprise Real Time 15 SP5 SUSE Real Time Module 15 SP5 |
| Patchnames: SUSE-SLE-Module-RT-15-SP5-2024-3209 |
SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 |
| Patchnames: SUSE-SLE-SDK-12-SP5-2024-3251 SUSE-SLE-SERVER-12-SP5-2024-3251 SUSE-SLE-SERVER-12-SP5-2024-3252 SUSE-SLE-WE-12-SP5-2024-3251 |
SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP5-2024-3483 SUSE-SLE-Module-Development-Tools-15-SP5-2024-3483 SUSE-SLE-Module-Legacy-15-SP5-2024-3483 SUSE-SLE-Module-Public-Cloud-15-SP5-2024-3190 SUSE-SLE-Product-WE-15-SP5-2024-3483 |
SUSE Linux Enterprise Software Development Kit 12 SP5 |
| Patchnames: SUSE-SLE-SDK-12-SP5-2024-3251 |
SUSE Linux Enterprise Workstation Extension 12 SP5 |
| Patchnames: SUSE-SLE-WE-12-SP5-2024-3251 |
SUSE Linux Enterprise Workstation Extension 15 SP5 |
| Patchnames: SUSE-SLE-Product-WE-15-SP5-2024-3483 |
openSUSE Leap 15.5 |
| Patchnames: openSUSE-SLE-15.5-2024-3190 openSUSE-SLE-15.5-2024-3209 openSUSE-SLE-15.5-2024-3483 |
openSUSE Leap Micro 5.5 |
| Patchnames: openSUSE-Leap-Micro-5.5-2024-3209 openSUSE-Leap-Micro-5.5-2024-3483 |
First public cloud image revisions this CVE is fixed in:
- alibaba/sles-15-sp5-chost-byos-v20241011
- amazon/suse-sles-15-sp5-chost-byos-v20241011-hvm-ssd-arm64
- amazon/suse-sles-15-sp5-chost-byos-v20241011-hvm-ssd-x86_64
- google/sles-12-sp5-byos-v20241028-x86-64
- google/sles-12-sp5-sap-byos-v20241028-x86-64
- google/sles-12-sp5-sap-v20241028-x86-64
- google/sles-15-sp5-chost-byos-v20241011-arm64
- google/sles-15-sp5-chost-byos-v20241011-x86-64
- microsoft/suse-sle-hpc-15-sp5-v20240913-x86_64
- microsoft/suse-sles-15-sp5-basic-v20240913-x86_64
- microsoft/suse-sles-15-sp5-chost-byos-v20241011-arm64
- microsoft/suse-sles-15-sp5-chost-byos-v20241011-x86_64
- microsoft/suse-sles-15-sp5-v20240913-x86_64
Status of this issue by product and package
Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.
Product(s) | Source package | State |
---|---|---|
Products under general support and receiving all security fixes. | ||
SUSE Linux Enterprise Desktop 15 SP5 | kernel-64kb | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-default-base | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-docs | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-obs-build | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-syms | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Desktop 15 SP6 | kernel-default | Already fixed |
SUSE Linux Enterprise Desktop 15 SP6 | kernel-source | Already fixed |
SUSE Linux Enterprise High Availability Extension 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise High Performance Computing 12 | kernel-default | Unsupported |
SUSE Linux Enterprise High Performance Computing 12 | kernel-source | Unsupported |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-64kb | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-azure | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-default-base | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-docs | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-obs-build | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-source-azure | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-syms | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-syms-azure | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-zfcpdump | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-default | Already fixed |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-source | Already fixed |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-source-azure | Already fixed |
SUSE Linux Enterprise Live Patching 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5-RT_Update_19 | Released |
SUSE Linux Enterprise Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_19 | Released |
SUSE Linux Enterprise Live Patching 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise Live Patching 15 SP6 | kernel-default | Already fixed |
SUSE Linux Enterprise Live Patching 15 SP6 | kernel-source | Already fixed |
SUSE Linux Enterprise Micro 5.1 | kernel-default | Affected |
SUSE Linux Enterprise Micro 5.1 | kernel-rt | Affected |
SUSE Linux Enterprise Micro 5.1 | kernel-source | Affected |
SUSE Linux Enterprise Micro 5.1 | kernel-source-rt | Affected |
SUSE Linux Enterprise Micro 5.2 | kernel-default | Affected |
SUSE Linux Enterprise Micro 5.2 | kernel-rt | Affected |
SUSE Linux Enterprise Micro 5.2 | kernel-source | Affected |
SUSE Linux Enterprise Micro 5.2 | kernel-source-rt | Affected |
SUSE Linux Enterprise Micro 5.3 | kernel-default | Affected |
SUSE Linux Enterprise Micro 5.3 | kernel-rt | Affected |
SUSE Linux Enterprise Micro 5.3 | kernel-source | Affected |
SUSE Linux Enterprise Micro 5.3 | kernel-source-rt | Affected |
SUSE Linux Enterprise Micro 5.4 | kernel-default | Affected |
SUSE Linux Enterprise Micro 5.4 | kernel-rt | Affected |
SUSE Linux Enterprise Micro 5.4 | kernel-source | Affected |
SUSE Linux Enterprise Micro 5.4 | kernel-source-rt | Affected |
SUSE Linux Enterprise Micro 5.5 | kernel-default | Released |
SUSE Linux Enterprise Micro 5.5 | kernel-default-base | Released |
SUSE Linux Enterprise Micro 5.5 | kernel-rt | Released |
SUSE Linux Enterprise Micro 5.5 | kernel-source | Released |
SUSE Linux Enterprise Micro 5.5 | kernel-source-rt | Released |
SUSE Linux Enterprise Micro 6.0 | kernel-default | Already fixed |
SUSE Linux Enterprise Micro 6.0 | kernel-source | Already fixed |
SUSE Linux Enterprise Micro 6.0 | kernel-source-rt | Already fixed |
SUSE Linux Enterprise Module for Basesystem 15 SP5 | kernel-64kb | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP5 | kernel-default-base | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP5 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP6 | kernel-default | Already fixed |
SUSE Linux Enterprise Module for Basesystem 15 SP6 | kernel-source | Already fixed |
SUSE Linux Enterprise Module for Development Tools 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP5 | kernel-docs | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP5 | kernel-obs-build | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP5 | kernel-syms | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP6 | kernel-default | Already fixed |
SUSE Linux Enterprise Module for Development Tools 15 SP6 | kernel-source | Already fixed |
SUSE Linux Enterprise Module for Legacy 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Module for Public Cloud 15 SP5 | kernel-azure | Released |
SUSE Linux Enterprise Module for Public Cloud 15 SP5 | kernel-source-azure | Released |
SUSE Linux Enterprise Module for Public Cloud 15 SP5 | kernel-syms-azure | Released |
SUSE Linux Enterprise Module for Public Cloud 15 SP6 | kernel-source-azure | Already fixed |
SUSE Linux Enterprise Real Time 15 SP5 | kernel-rt | Released |
SUSE Linux Enterprise Real Time 15 SP5 | kernel-rt_debug | Released |
SUSE Linux Enterprise Real Time 15 SP5 | kernel-source-rt | Released |
SUSE Linux Enterprise Real Time 15 SP5 | kernel-syms-rt | Released |
SUSE Linux Enterprise Real Time 15 SP6 | kernel-source-rt | Already fixed |
SUSE Linux Enterprise Server 15 SP5 | kernel-64kb | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-azure | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-default-base | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-docs | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-obs-build | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-source-azure | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-syms | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-syms-azure | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-default | Already fixed |
SUSE Linux Enterprise Server 15 SP6 | kernel-source | Already fixed |
SUSE Linux Enterprise Server 15 SP6 | kernel-source-azure | Already fixed |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-64kb | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-default-base | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-docs | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-obs-build | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-source-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-syms | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-syms-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-default | Already fixed |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-source | Already fixed |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-source-azure | Already fixed |
SUSE Linux Enterprise Workstation Extension 15 SP5 | kernel-default | Released |
SUSE Manager Proxy 4.3 | kernel-default | Affected |
SUSE Manager Proxy 4.3 | kernel-source | Affected |
SUSE Manager Retail Branch Server 4.3 | kernel-default | Affected |
SUSE Manager Retail Branch Server 4.3 | kernel-source | Affected |
SUSE Manager Server 4.3 | kernel-default | Affected |
SUSE Manager Server 4.3 | kernel-source | Affected |
SUSE Real Time Module 15 SP5 | kernel-rt | Released |
SUSE Real Time Module 15 SP5 | kernel-rt_debug | Released |
SUSE Real Time Module 15 SP5 | kernel-source-rt | Released |
SUSE Real Time Module 15 SP5 | kernel-syms-rt | Released |
SUSE Real Time Module 15 SP6 | kernel-source-rt | Already fixed |
openSUSE Leap 15.5 | kernel-default | Released |
openSUSE Leap 15.5 | kernel-source | Released |
openSUSE Leap 15.5 | kernel-source-azure | Released |
openSUSE Leap 15.5 | kernel-source-rt | Released |
openSUSE Leap 15.6 | kernel-default | Already fixed |
openSUSE Leap 15.6 | kernel-source | Already fixed |
openSUSE Leap 15.6 | kernel-source-azure | Already fixed |
openSUSE Leap 15.6 | kernel-source-rt | Already fixed |
Products under Long Term Service Pack support and receiving important and critical security fixes. | ||
SUSE Linux Enterprise Desktop 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise High Availability Extension 12 SP5 | kernel-default | Released |
SUSE Linux Enterprise High Availability Extension 12 SP5 | kernel-source | Released |
SUSE Linux Enterprise High Performance Computing 12 SP5 | kernel-default | Released |
SUSE Linux Enterprise High Performance Computing 12 SP5 | kernel-source | Released |
SUSE Linux Enterprise High Performance Computing 12 SP5 | kernel-source-azure | Released |
SUSE Linux Enterprise High Performance Computing 15 SP2 | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | kernel-default | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP3 | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-default | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-default | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-default | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-source | Affected |
SUSE Linux Enterprise Live Patching 12 SP5 | kernel-default | Released |
SUSE Linux Enterprise Live Patching 12 SP5 | kernel-source | Released |
SUSE Linux Enterprise Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_60 | Released |
SUSE Linux Enterprise Live Patching 15 SP2 | kernel-default | Affected |
SUSE Linux Enterprise Live Patching 15 SP2 | kernel-source | Affected |
SUSE Linux Enterprise Live Patching 15 SP3 | kernel-default | Affected |
SUSE Linux Enterprise Live Patching 15 SP3 | kernel-source | Affected |
SUSE Linux Enterprise Live Patching 15 SP4 | kernel-default | Affected |
SUSE Linux Enterprise Live Patching 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise Module for Basesystem 15 SP2 | kernel-source | Affected |
SUSE Linux Enterprise Module for Basesystem 15 SP3 | kernel-source | Affected |
SUSE Linux Enterprise Module for Basesystem 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise Module for Development Tools 15 SP2 | kernel-source | Affected |
SUSE Linux Enterprise Module for Development Tools 15 SP3 | kernel-source | Affected |
SUSE Linux Enterprise Module for Development Tools 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE | kernel-default | Not affected |
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP5 | kernel-azure | Released |
SUSE Linux Enterprise Server 12 SP5 | kernel-default | Released |
SUSE Linux Enterprise Server 12 SP5 | kernel-docs | Released |
SUSE Linux Enterprise Server 12 SP5 | kernel-obs-build | Released |
SUSE Linux Enterprise Server 12 SP5 | kernel-source | Released |
SUSE Linux Enterprise Server 12 SP5 | kernel-source-azure | Released |
SUSE Linux Enterprise Server 12 SP5 | kernel-syms | Released |
SUSE Linux Enterprise Server 12 SP5 | kernel-syms-azure | Released |
SUSE Linux Enterprise Server 12 SP5-LTSS | kernel-source | Affected |
SUSE Linux Enterprise Server 12 SP5-LTSS | kernel-source-azure | Affected |
SUSE Linux Enterprise Server 15 SP2 | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP2-LTSS | kernel-default | Affected |
SUSE Linux Enterprise Server 15 SP2-LTSS | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP3 | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP3-LTSS | kernel-default | Affected |
SUSE Linux Enterprise Server 15 SP3-LTSS | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-default | Affected |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-source | Affected |
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | kernel-source | Affected |
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | kernel-source-azure | Affected |
SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-default | Released |
SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-docs | Released |
SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-obs-build | Released |
SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-source | Released |
SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-source-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-syms | Released |
SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-syms-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP2 | kernel-default | Affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP2 | kernel-source | Affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP3 | kernel-default | Affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP3 | kernel-source | Affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-default | Affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-source | Affected |
Products past their end of life and not receiving proactive updates anymore. | ||
HPE Helion OpenStack 8 | kernel-source | Not affected |
SUSE CaaS Platform 4.0 | kernel-source | Affected |
SUSE CaaS Platform Toolchain 3 | kernel-source | Not affected |
SUSE Enterprise Storage 6 | kernel-source | Affected |
SUSE Enterprise Storage 7 | kernel-source | Affected |
SUSE Enterprise Storage 7.1 | kernel-source | Affected |
SUSE Linux Enterprise Desktop 11 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 12 SP1 | kernel-source | Unsupported |
SUSE Linux Enterprise Desktop 12 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 12 SP4 | kernel-source | Affected |
SUSE Linux Enterprise Desktop 15 | kernel-source | Affected |
SUSE Linux Enterprise Desktop 15 SP1 | kernel-source | Affected |
SUSE Linux Enterprise Desktop 15 SP2 | kernel-source | Affected |
SUSE Linux Enterprise Desktop 15 SP3 | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP1 | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15-ESPOS | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15-LTSS | kernel-source | Affected |
SUSE Linux Enterprise Micro 5.0 | kernel-default | Affected |
SUSE Linux Enterprise Micro 5.0 | kernel-rt | Unsupported |
SUSE Linux Enterprise Module for Basesystem 15 | kernel-source | Affected |
SUSE Linux Enterprise Module for Basesystem 15 SP1 | kernel-source | Affected |
SUSE Linux Enterprise Module for Development Tools 15 | kernel-source | Affected |
SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-source | Affected |
SUSE Linux Enterprise Module for Public Cloud 12 | kernel-default | Unsupported |
SUSE Linux Enterprise Module for Public Cloud 12 | kernel-source | Unsupported |
SUSE Linux Enterprise Real Time 12 SP5 | kernel-rt | Released |
SUSE Linux Enterprise Real Time 12 SP5 | kernel-rt_debug | Released |
SUSE Linux Enterprise Real Time 12 SP5 | kernel-source-rt | Released |
SUSE Linux Enterprise Real Time 12 SP5 | kernel-syms-rt | Released |
SUSE Linux Enterprise Real Time 15 SP1 | kernel-source-rt | Unsupported |
SUSE Linux Enterprise Real Time 15 SP2 | kernel-source | Affected |
SUSE Linux Enterprise Real Time 15 SP3 | kernel-source | Affected |
SUSE Linux Enterprise Real Time 15 SP3 | kernel-source-rt | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-source-rt | Affected |
SUSE Linux Enterprise Server 11 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Server 11 SP4 LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 11 SP4 LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 11 SP4-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 | kernel-default | Unsupported |
SUSE Linux Enterprise Server 12 | kernel-source | Unsupported |
SUSE Linux Enterprise Server 12 SP1 | kernel-source | Unsupported |
SUSE Linux Enterprise Server 12 SP1-LTSS | kernel-source | Unsupported |
SUSE Linux Enterprise Server 12 SP3 | kernel-default | Unsupported |
SUSE Linux Enterprise Server 12 SP3 | kernel-source | Unsupported |
SUSE Linux Enterprise Server 12 SP3-BCL | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP3-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP3-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP4 | kernel-default | Unsupported |
SUSE Linux Enterprise Server 12 SP4 | kernel-source | Unsupported |
SUSE Linux Enterprise Server 12 SP4-ESPOS | kernel-source | Affected |
SUSE Linux Enterprise Server 12 SP4-LTSS | kernel-default | Affected |
SUSE Linux Enterprise Server 12 SP4-LTSS | kernel-source | Affected |
SUSE Linux Enterprise Server 15 | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP1 | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP1-BCL | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP1-LTSS | kernel-default | Affected |
SUSE Linux Enterprise Server 15 SP1-LTSS | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP2-BCL | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP3-BCL | kernel-source | Affected |
SUSE Linux Enterprise Server 15-LTSS | kernel-default | Affected |
SUSE Linux Enterprise Server 15-LTSS | kernel-source | Affected |
SUSE Linux Enterprise Server for SAP Applications 12 | kernel-default | Unsupported |
SUSE Linux Enterprise Server for SAP Applications 12 | kernel-source | Unsupported |
SUSE Linux Enterprise Server for SAP Applications 12 SP1 | kernel-source | Unsupported |
SUSE Linux Enterprise Server for SAP Applications 12 SP3 | kernel-default | Unsupported |
SUSE Linux Enterprise Server for SAP Applications 12 SP3 | kernel-source | Unsupported |
SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-default | Unsupported |
SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-source | Unsupported |
SUSE Linux Enterprise Server for SAP Applications 15 | kernel-source | Affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP1 | kernel-source | Affected |
SUSE Linux Enterprise Software Development Kit 12 SP5 | kernel-default | Released |
SUSE Linux Enterprise Software Development Kit 12 SP5 | kernel-docs | Released |
SUSE Linux Enterprise Software Development Kit 12 SP5 | kernel-obs-build | Released |
SUSE Linux Enterprise Software Development Kit 12 SP5 | kernel-source | Released |
SUSE Linux Enterprise Workstation Extension 12 SP5 | kernel-default | Released |
SUSE Linux Enterprise Workstation Extension 12 SP5 | kernel-source | Released |
SUSE Manager Proxy 4.0 | kernel-source | Affected |
SUSE Manager Proxy 4.1 | kernel-source | Affected |
SUSE Manager Proxy 4.2 | kernel-source | Affected |
SUSE Manager Retail Branch Server 4.0 | kernel-source | Affected |
SUSE Manager Retail Branch Server 4.1 | kernel-source | Affected |
SUSE Manager Retail Branch Server 4.2 | kernel-source | Affected |
SUSE Manager Server 4.0 | kernel-source | Affected |
SUSE Manager Server 4.1 | kernel-source | Affected |
SUSE Manager Server 4.2 | kernel-source | Affected |
SUSE OpenStack Cloud 8 | kernel-source | Not affected |
SUSE OpenStack Cloud 9 | kernel-source | Affected |
SUSE OpenStack Cloud Crowbar 8 | kernel-source | Not affected |
SUSE OpenStack Cloud Crowbar 9 | kernel-source | Affected |
SUSE Real Time Module 15 SP1 | kernel-source-rt | Unsupported |
SUSE Real Time Module 15 SP3 | kernel-source-rt | Affected |
SUSE Real Time Module 15 SP4 | kernel-source-rt | Affected |
openSUSE Leap 15.3 | kernel-source | Affected |
openSUSE Leap 15.3 | kernel-source-rt | Affected |
openSUSE Leap 15.4 | kernel-source | Affected |
openSUSE Leap 15.4 | kernel-source-azure | Unsupported |
openSUSE Leap 15.4 | kernel-source-rt | Affected |
SUSE Timeline for this CVE
CVE page created: Thu Aug 22 06:00:19 2024CVE page last modified: Thu Nov 14 20:02:04 2024