Upstream information

CVE-2021-47118 at MITRE

Description

In the Linux kernel, the following vulnerability has been resolved: pid: take a reference when initializing `cad_pid` During boot, kernel_init_freeable() initializes `cad_pid` to the init task's struct pid. Later on, we may change `cad_pid` via a sysctl, and when this happens proc_do_cad_pid() will increment the refcount on the new pid via get_pid(), and will decrement the refcount on the old pid via put_pid(). As we never called get_pid() when we initialized `cad_pid`, we decrement a reference we never incremented, can therefore free the init task's struct pid early. As there can be dangling references to the struct pid, we can later encounter a use-after-free (e.g. when delivering signals). This was spotted when fuzzing v5.13-rc3 with Syzkaller, but seems to have been around since the conversion of `cad_pid` to struct pid in commit 9ec52099e4b8 ("[PATCH] replace cad_pid by a struct pid") from the pre-KASAN stone age of v2.6.19. Fix this by getting a reference to the init task's struct pid when we assign it to `cad_pid`. Full KASAN splat below. ================================================================== BUG: KASAN: use-after-free in ns_of_pid include/linux/pid.h:153 [inline] BUG: KASAN: use-after-free in task_active_pid_ns+0xc0/0xc8 kernel/pid.c:509 Read of size 4 at addr ffff23794dda0004 by task syz-executor.0/273 CPU: 1 PID: 273 Comm: syz-executor.0 Not tainted 5.12.0-00001-g9aef892b2d15 #1 Hardware name: linux,dummy-virt (DT) Call trace: ns_of_pid include/linux/pid.h:153 [inline] task_active_pid_ns+0xc0/0xc8 kernel/pid.c:509 do_notify_parent+0x308/0xe60 kernel/signal.c:1950 exit_notify kernel/exit.c:682 [inline] do_exit+0x2334/0x2bd0 kernel/exit.c:845 do_group_exit+0x108/0x2c8 kernel/exit.c:922 get_signal+0x4e4/0x2a88 kernel/signal.c:2781 do_signal arch/arm64/kernel/signal.c:882 [inline] do_notify_resume+0x300/0x970 arch/arm64/kernel/signal.c:936 work_pending+0xc/0x2dc Allocated by task 0: slab_post_alloc_hook+0x50/0x5c0 mm/slab.h:516 slab_alloc_node mm/slub.c:2907 [inline] slab_alloc mm/slub.c:2915 [inline] kmem_cache_alloc+0x1f4/0x4c0 mm/slub.c:2920 alloc_pid+0xdc/0xc00 kernel/pid.c:180 copy_process+0x2794/0x5e18 kernel/fork.c:2129 kernel_clone+0x194/0x13c8 kernel/fork.c:2500 kernel_thread+0xd4/0x110 kernel/fork.c:2552 rest_init+0x44/0x4a0 init/main.c:687 arch_call_rest_init+0x1c/0x28 start_kernel+0x520/0x554 init/main.c:1064 0x0 Freed by task 270: slab_free_hook mm/slub.c:1562 [inline] slab_free_freelist_hook+0x98/0x260 mm/slub.c:1600 slab_free mm/slub.c:3161 [inline] kmem_cache_free+0x224/0x8e0 mm/slub.c:3177 put_pid.part.4+0xe0/0x1a8 kernel/pid.c:114 put_pid+0x30/0x48 kernel/pid.c:109 proc_do_cad_pid+0x190/0x1b0 kernel/sysctl.c:1401 proc_sys_call_handler+0x338/0x4b0 fs/proc/proc_sysctl.c:591 proc_sys_write+0x34/0x48 fs/proc/proc_sysctl.c:617 call_write_iter include/linux/fs.h:1977 [inline] new_sync_write+0x3ac/0x510 fs/read_write.c:518 vfs_write fs/read_write.c:605 [inline] vfs_write+0x9c4/0x1018 fs/read_write.c:585 ksys_write+0x124/0x240 fs/read_write.c:658 __do_sys_write fs/read_write.c:670 [inline] __se_sys_write fs/read_write.c:667 [inline] __arm64_sys_write+0x78/0xb0 fs/read_write.c:667 __invoke_syscall arch/arm64/kernel/syscall.c:37 [inline] invoke_syscall arch/arm64/kernel/syscall.c:49 [inline] el0_svc_common.constprop.1+0x16c/0x388 arch/arm64/kernel/syscall.c:129 do_el0_svc+0xf8/0x150 arch/arm64/kernel/syscall.c:168 el0_svc+0x28/0x38 arch/arm64/kernel/entry-common.c:416 el0_sync_handler+0x134/0x180 arch/arm64/kernel/entry-common.c:432 el0_sync+0x154/0x180 arch/arm64/kernel/entry.S:701 The buggy address belongs to the object at ffff23794dda0000 which belongs to the cache pid of size 224 The buggy address is located 4 bytes inside of 224-byte region [ff ---truncated---

SUSE information

Overall state of this security issue: Pending

This issue is currently rated as having moderate severity.

CVSS v3 Scores
  SUSE
Base Score 5.5
Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality Impact None
Integrity Impact None
Availability Impact High
CVSSv3 Version 3.1
SUSE Bugzilla entry: 1221605 [NEW]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise High Availability Extension 15 SP2
  • cluster-md-kmp-default >= 5.3.18-150200.24.188.1
  • dlm-kmp-default >= 5.3.18-150200.24.188.1
  • gfs2-kmp-default >= 5.3.18-150200.24.188.1
  • ocfs2-kmp-default >= 5.3.18-150200.24.188.1
 Patchnames:
SUSE-SLE-Product-HA-15-SP2-2024-1454
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
  • kernel-default >= 5.3.18-150200.24.188.1
  • kernel-default-base >= 5.3.18-150200.24.188.1.150200.9.95.3
  • kernel-default-devel >= 5.3.18-150200.24.188.1
  • kernel-devel >= 5.3.18-150200.24.188.1
  • kernel-docs >= 5.3.18-150200.24.188.1
  • kernel-macros >= 5.3.18-150200.24.188.1
  • kernel-obs-build >= 5.3.18-150200.24.188.1
  • kernel-preempt >= 5.3.18-150200.24.188.1
  • kernel-preempt-devel >= 5.3.18-150200.24.188.1
  • kernel-source >= 5.3.18-150200.24.188.1
  • kernel-syms >= 5.3.18-150200.24.188.1
 Patchnames:
SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-1454
SUSE Linux Enterprise Live Patching 15 SP2
    		Patchnames:
    SUSE-SLE-Module-Live-Patching-15-SP2-2024-1454
    SUSE Linux Enterprise Server 15 SP2-LTSS
    • kernel-default >= 5.3.18-150200.24.188.1
    • kernel-default-base >= 5.3.18-150200.24.188.1.150200.9.95.3
    • kernel-default-devel >= 5.3.18-150200.24.188.1
    • kernel-devel >= 5.3.18-150200.24.188.1
    • kernel-docs >= 5.3.18-150200.24.188.1
    • kernel-macros >= 5.3.18-150200.24.188.1
    • kernel-obs-build >= 5.3.18-150200.24.188.1
    • kernel-preempt >= 5.3.18-150200.24.188.1
    • kernel-preempt-devel >= 5.3.18-150200.24.188.1
    • kernel-source >= 5.3.18-150200.24.188.1
    • kernel-syms >= 5.3.18-150200.24.188.1
    • reiserfs-kmp-default >= 5.3.18-150200.24.188.1
    		 Patchnames:
    SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-1454
    SUSE Linux Enterprise Server for SAP Applications 15 SP2
    • kernel-default >= 5.3.18-150200.24.188.1
    • kernel-default-base >= 5.3.18-150200.24.188.1.150200.9.95.3
    • kernel-default-devel >= 5.3.18-150200.24.188.1
    • kernel-devel >= 5.3.18-150200.24.188.1
    • kernel-docs >= 5.3.18-150200.24.188.1
    • kernel-macros >= 5.3.18-150200.24.188.1
    • kernel-obs-build >= 5.3.18-150200.24.188.1
    • kernel-preempt >= 5.3.18-150200.24.188.1
    • kernel-preempt-devel >= 5.3.18-150200.24.188.1
    • kernel-source >= 5.3.18-150200.24.188.1
    • kernel-syms >= 5.3.18-150200.24.188.1
    • reiserfs-kmp-default >= 5.3.18-150200.24.188.1
    		 Patchnames:
    SUSE-SLE-Product-SLES_SAP-15-SP2-2024-1454

    List of packages in QA

    Product(s) Package(s)
    SUSE Enterprise Storage 7.1
    • kernel-64kb >= 5.3.18-150300.59.158.1
    • kernel-64kb-devel >= 5.3.18-150300.59.158.1
    • kernel-default >= 5.3.18-150300.59.158.1
    • kernel-default-base >= 5.3.18-150300.59.158.1.150300.18.92.5
    • kernel-default-devel >= 5.3.18-150300.59.158.1
    • kernel-devel >= 5.3.18-150300.59.158.1
    • kernel-docs >= 5.3.18-150300.59.158.1
    • kernel-macros >= 5.3.18-150300.59.158.1
    • kernel-obs-build >= 5.3.18-150300.59.158.1
    • kernel-preempt >= 5.3.18-150300.59.158.1
    • kernel-preempt-devel >= 5.3.18-150300.59.158.1
    • kernel-source >= 5.3.18-150300.59.158.1
    • kernel-syms >= 5.3.18-150300.59.158.1
    • reiserfs-kmp-default >= 5.3.18-150300.59.158.1
    SUSE Linux Enterprise High Availability Extension 15 SP3
    • cluster-md-kmp-default >= 5.3.18-150300.59.158.1
    • dlm-kmp-default >= 5.3.18-150300.59.158.1
    • gfs2-kmp-default >= 5.3.18-150300.59.158.1
    • ocfs2-kmp-default >= 5.3.18-150300.59.158.1
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
    • kernel-64kb >= 5.3.18-150300.59.158.1
    • kernel-64kb-devel >= 5.3.18-150300.59.158.1
    • kernel-default >= 5.3.18-150300.59.158.1
    • kernel-default-base >= 5.3.18-150300.59.158.1.150300.18.92.5
    • kernel-default-devel >= 5.3.18-150300.59.158.1
    • kernel-devel >= 5.3.18-150300.59.158.1
    • kernel-docs >= 5.3.18-150300.59.158.1
    • kernel-macros >= 5.3.18-150300.59.158.1
    • kernel-obs-build >= 5.3.18-150300.59.158.1
    • kernel-preempt >= 5.3.18-150300.59.158.1
    • kernel-preempt-devel >= 5.3.18-150300.59.158.1
    • kernel-source >= 5.3.18-150300.59.158.1
    • kernel-syms >= 5.3.18-150300.59.158.1
    • reiserfs-kmp-default >= 5.3.18-150300.59.158.1
    SUSE Linux Enterprise Live Patching 15 SP3
    • kernel-default-livepatch >= 5.3.18-150300.59.158.1
    • kernel-default-livepatch-devel >= 5.3.18-150300.59.158.1
    • kernel-livepatch-5_3_18-150300_59_158-default >= 1-150300.7.3.5
    SUSE Linux Enterprise Micro 5.1
    • kernel-default >= 5.3.18-150300.59.158.1
    • kernel-default-base >= 5.3.18-150300.59.158.1.150300.18.92.5
    • kernel-rt >= 5.3.18-150300.166.1
    • kernel-source-rt >= 5.3.18-150300.166.1
    SUSE Linux Enterprise Micro 5.2
    • kernel-default >= 5.3.18-150300.59.158.1
    • kernel-default-base >= 5.3.18-150300.59.158.1.150300.18.92.5
    • kernel-rt >= 5.3.18-150300.166.1
    • kernel-source-rt >= 5.3.18-150300.166.1
    SUSE Linux Enterprise Server 15 SP3-LTSS
    • kernel-64kb >= 5.3.18-150300.59.158.1
    • kernel-64kb-devel >= 5.3.18-150300.59.158.1
    • kernel-default >= 5.3.18-150300.59.158.1
    • kernel-default-base >= 5.3.18-150300.59.158.1.150300.18.92.5
    • kernel-default-devel >= 5.3.18-150300.59.158.1
    • kernel-devel >= 5.3.18-150300.59.158.1
    • kernel-docs >= 5.3.18-150300.59.158.1
    • kernel-macros >= 5.3.18-150300.59.158.1
    • kernel-obs-build >= 5.3.18-150300.59.158.1
    • kernel-preempt >= 5.3.18-150300.59.158.1
    • kernel-preempt-devel >= 5.3.18-150300.59.158.1
    • kernel-source >= 5.3.18-150300.59.158.1
    • kernel-syms >= 5.3.18-150300.59.158.1
    • kernel-zfcpdump >= 5.3.18-150300.59.158.1
    • reiserfs-kmp-default >= 5.3.18-150300.59.158.1
    SUSE Linux Enterprise Server for SAP Applications 15 SP3
    • kernel-default >= 5.3.18-150300.59.158.1
    • kernel-default-base >= 5.3.18-150300.59.158.1.150300.18.92.5
    • kernel-default-devel >= 5.3.18-150300.59.158.1
    • kernel-devel >= 5.3.18-150300.59.158.1
    • kernel-docs >= 5.3.18-150300.59.158.1
    • kernel-macros >= 5.3.18-150300.59.158.1
    • kernel-obs-build >= 5.3.18-150300.59.158.1
    • kernel-preempt >= 5.3.18-150300.59.158.1
    • kernel-preempt-devel >= 5.3.18-150300.59.158.1
    • kernel-source >= 5.3.18-150300.59.158.1
    • kernel-syms >= 5.3.18-150300.59.158.1
    • reiserfs-kmp-default >= 5.3.18-150300.59.158.1

    Status of this issue by product and package

    Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.

    Product(s) Source package State
    Products under general support and receiving all security fixes.
    SUSE Enterprise Storage 7.1 kernel-64kb In progress
    SUSE Enterprise Storage 7.1 kernel-default In progress
    SUSE Enterprise Storage 7.1 kernel-default-base In progress
    SUSE Enterprise Storage 7.1 kernel-docs In progress
    SUSE Enterprise Storage 7.1 kernel-obs-build In progress
    SUSE Enterprise Storage 7.1 kernel-preempt In progress
    SUSE Enterprise Storage 7.1 kernel-source In progress
    SUSE Enterprise Storage 7.1 kernel-source-azure Already fixed
    SUSE Enterprise Storage 7.1 kernel-syms In progress
    SUSE Linux Enterprise Desktop 15 SP5 kernel-default Already fixed
    SUSE Linux Enterprise Desktop 15 SP5 kernel-source Already fixed
    SUSE Linux Enterprise Desktop 15 SP6 kernel-default Already fixed
    SUSE Linux Enterprise Desktop 15 SP6 kernel-source Already fixed
    SUSE Linux Enterprise High Performance Computing 12 SP5 kernel-default Already fixed
    SUSE Linux Enterprise High Performance Computing 12 SP5 kernel-source Already fixed
    SUSE Linux Enterprise High Performance Computing 12 SP5 kernel-source-azure Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP5 kernel-default Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP5 kernel-source Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP5 kernel-source-azure Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-default Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-source Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-source-azure Already fixed
    SUSE Linux Enterprise Micro 5.1 kernel-default In progress
    SUSE Linux Enterprise Micro 5.1 kernel-default-base In progress
    SUSE Linux Enterprise Micro 5.1 kernel-rt In progress
    SUSE Linux Enterprise Micro 5.1 kernel-source-rt In progress
    SUSE Linux Enterprise Micro 5.2 kernel-default In progress
    SUSE Linux Enterprise Micro 5.2 kernel-default-base In progress
    SUSE Linux Enterprise Micro 5.2 kernel-rt In progress
    SUSE Linux Enterprise Micro 5.2 kernel-source-rt In progress
    SUSE Linux Enterprise Micro 5.3 kernel-default Already fixed
    SUSE Linux Enterprise Micro 5.3 kernel-rt Already fixed
    SUSE Linux Enterprise Micro 5.3 kernel-source-rt Already fixed
    SUSE Linux Enterprise Micro 5.4 kernel-default Already fixed
    SUSE Linux Enterprise Micro 5.4 kernel-rt Already fixed
    SUSE Linux Enterprise Micro 5.4 kernel-source-rt Already fixed
    SUSE Linux Enterprise Micro 5.5 kernel-source-rt Already fixed
    SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-default Already fixed
    SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-source Already fixed
    SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-default Already fixed
    SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-source Already fixed
    SUSE Linux Enterprise Module for Development Tools 15 SP5 kernel-default Already fixed
    SUSE Linux Enterprise Module for Development Tools 15 SP5 kernel-source Already fixed
    SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-default Already fixed
    SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-source Already fixed
    SUSE Linux Enterprise Module for Public Cloud 15 SP5 kernel-source-azure Already fixed
    SUSE Linux Enterprise Module for Public Cloud 15 SP6 kernel-source-azure Already fixed
    SUSE Linux Enterprise Real Time 12 SP5 kernel-source-rt Already fixed
    SUSE Linux Enterprise Real Time 15 SP3 kernel-source Already fixed
    SUSE Linux Enterprise Real Time 15 SP3 kernel-source-rt Already fixed
    SUSE Linux Enterprise Real Time 15 SP5 kernel-source-rt Already fixed
    SUSE Linux Enterprise Real Time 15 SP6 kernel-source-rt Already fixed
    SUSE Linux Enterprise Server 12 SP5 kernel-default Already fixed
    SUSE Linux Enterprise Server 12 SP5 kernel-source Already fixed
    SUSE Linux Enterprise Server 12 SP5 kernel-source-azure Already fixed
    SUSE Linux Enterprise Server 15 SP5 kernel-default Already fixed
    SUSE Linux Enterprise Server 15 SP5 kernel-source Already fixed
    SUSE Linux Enterprise Server 15 SP5 kernel-source-azure Already fixed
    SUSE Linux Enterprise Server 15 SP6 kernel-default Already fixed
    SUSE Linux Enterprise Server 15 SP6 kernel-source Already fixed
    SUSE Linux Enterprise Server 15 SP6 kernel-source-azure Already fixed
    SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-default Already fixed
    SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-source Already fixed
    SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-source-azure Already fixed
    SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-default Already fixed
    SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-source Already fixed
    SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-source-azure Already fixed
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-default Already fixed
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-source Already fixed
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-source-azure Already fixed
    SUSE Manager Proxy 4.3 kernel-default Already fixed
    SUSE Manager Proxy 4.3 kernel-source Already fixed
    SUSE Manager Proxy 4.3 kernel-source-azure Already fixed
    SUSE Manager Retail Branch Server 4.3 kernel-default Already fixed
    SUSE Manager Retail Branch Server 4.3 kernel-source Already fixed
    SUSE Manager Retail Branch Server 4.3 kernel-source-azure Already fixed
    SUSE Manager Server 4.3 kernel-default Already fixed
    SUSE Manager Server 4.3 kernel-source Already fixed
    SUSE Manager Server 4.3 kernel-source-azure Already fixed
    SUSE Real Time Module 15 SP5 kernel-source-rt Already fixed
    SUSE Real Time Module 15 SP6 kernel-source-rt Already fixed
    Products under Long Term Service Pack support and receiving important and critical security fixes.
    SLES15-SP2-CHOST-BYOS-Aliyun kernel-default In progress
    SLES15-SP2-CHOST-BYOS-Azure kernel-default In progress
    SLES15-SP2-CHOST-BYOS-EC2 kernel-default In progress
    SLES15-SP2-CHOST-BYOS-GCE kernel-default In progress
    SUSE Linux Enterprise Desktop 15 SP4 kernel-source Already fixed
    SUSE Linux Enterprise High Availability Extension 15 SP2 kernel-default Released
    SUSE Linux Enterprise High Availability Extension 15 SP3 kernel-default In progress
    SUSE Linux Enterprise High Performance Computing 15 kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP1 kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2 kernel-default Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2 kernel-docs Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2 kernel-obs-build Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2 kernel-preempt Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2 kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2 kernel-source-azure Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP2 kernel-syms Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS kernel-default Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS kernel-docs Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS kernel-obs-build Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS kernel-preempt Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS kernel-syms Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-default Released
    SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-default-base Released
    SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-docs Released
    SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-obs-build Released
    SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-preempt Released
    SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-source Released
    SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-syms Released
    SUSE Linux Enterprise High Performance Computing 15 SP3 kernel-source Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP3 kernel-source-azure Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kernel-source Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-64kb In progress
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default In progress
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default-base In progress
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-docs In progress
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-obs-build In progress
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-preempt In progress
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-source In progress
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-syms In progress
    SUSE Linux Enterprise High Performance Computing 15 SP4 kernel-source Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP4 kernel-source-azure Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-default Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-source Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-source Already fixed
    SUSE Linux Enterprise High Performance Computing 15-ESPOS kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15-LTSS kernel-source Affected
    SUSE Linux Enterprise Live Patching 15 SP2 kernel-default Released
    SUSE Linux Enterprise Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_47 Released
    SUSE Linux Enterprise Live Patching 15 SP3 kernel-default In progress
    SUSE Linux Enterprise Live Patching 15 SP3 kernel-livepatch-SLE15-SP3_Update_43 In progress
    SUSE Linux Enterprise Module for Basesystem 15 SP2 kernel-default Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP2 kernel-preempt Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP2 kernel-source Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP3 kernel-source Already fixed
    SUSE Linux Enterprise Module for Basesystem 15 SP4 kernel-source Already fixed
    SUSE Linux Enterprise Module for Development Tools 15 SP2 kernel-docs Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP2 kernel-obs-build Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP2 kernel-preempt Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP2 kernel-source Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP2 kernel-syms Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP3 kernel-source Already fixed
    SUSE Linux Enterprise Module for Development Tools 15 SP4 kernel-source Already fixed
    SUSE Linux Enterprise Module for Legacy 15 SP2 kernel-default Affected
    SUSE Linux Enterprise Module for Public Cloud 15 SP4 kernel-source-azure Already fixed
    SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-default Affected
    SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-source Affected
    SUSE Linux Enterprise Server 15 SP2 kernel-default Affected
    SUSE Linux Enterprise Server 15 SP2 kernel-docs Affected
    SUSE Linux Enterprise Server 15 SP2 kernel-obs-build Affected
    SUSE Linux Enterprise Server 15 SP2 kernel-preempt Affected
    SUSE Linux Enterprise Server 15 SP2 kernel-source Affected
    SUSE Linux Enterprise Server 15 SP2 kernel-source-azure Already fixed
    SUSE Linux Enterprise Server 15 SP2 kernel-syms Affected
    SUSE Linux Enterprise Server 15 SP2-LTSS kernel-default Released
    SUSE Linux Enterprise Server 15 SP2-LTSS kernel-default-base Released
    SUSE Linux Enterprise Server 15 SP2-LTSS kernel-docs Released
    SUSE Linux Enterprise Server 15 SP2-LTSS kernel-obs-build Released
    SUSE Linux Enterprise Server 15 SP2-LTSS kernel-preempt Released
    SUSE Linux Enterprise Server 15 SP2-LTSS kernel-source Released
    SUSE Linux Enterprise Server 15 SP2-LTSS kernel-syms Released
    SUSE Linux Enterprise Server 15 SP3 kernel-source Already fixed
    SUSE Linux Enterprise Server 15 SP3 kernel-source-azure Already fixed
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-64kb In progress
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-default In progress
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-default-base In progress
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-docs In progress
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-obs-build In progress
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-preempt In progress
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-source In progress
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-syms In progress
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-zfcpdump In progress
    SUSE Linux Enterprise Server 15 SP4 kernel-source Already fixed
    SUSE Linux Enterprise Server 15 SP4 kernel-source-azure Already fixed
    SUSE Linux Enterprise Server 15 SP4-LTSS kernel-default Already fixed
    SUSE Linux Enterprise Server 15 SP4-LTSS kernel-source Already fixed
    SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-default Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-default-base Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-docs Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-obs-build Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-preempt Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-source Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-source-azure Already fixed
    SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-syms Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-default In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-default-base In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-docs In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-obs-build In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-preempt In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-source In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-source-azure Already fixed
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-syms In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-default Already fixed
    SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-source Already fixed
    SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-source-azure Already fixed
    SUSE OpenStack Cloud 8 kernel-source Affected
    SUSE OpenStack Cloud 9 kernel-default Affected
    SUSE OpenStack Cloud 9 kernel-source Affected
    Products past their end of life and not receiving proactive updates anymore.
    HPE Helion OpenStack 8 kernel-source Affected
    SUSE CaaS Platform 4.0 kernel-source Affected
    SUSE Enterprise Storage 6 kernel-source Affected
    SUSE Enterprise Storage 7 kernel-default Affected
    SUSE Enterprise Storage 7 kernel-docs Affected
    SUSE Enterprise Storage 7 kernel-obs-build Affected
    SUSE Enterprise Storage 7 kernel-preempt Affected
    SUSE Enterprise Storage 7 kernel-source Affected
    SUSE Enterprise Storage 7 kernel-source-azure Already fixed
    SUSE Enterprise Storage 7 kernel-syms Affected
    SUSE Linux Enterprise Desktop 12 SP2 kernel-source Affected
    SUSE Linux Enterprise Desktop 12 SP3 kernel-source Affected
    SUSE Linux Enterprise Desktop 12 SP4 kernel-source Affected
    SUSE Linux Enterprise Desktop 15 kernel-source Affected
    SUSE Linux Enterprise Desktop 15 SP1 kernel-source Affected
    SUSE Linux Enterprise Desktop 15 SP2 kernel-default Affected
    SUSE Linux Enterprise Desktop 15 SP2 kernel-docs Affected
    SUSE Linux Enterprise Desktop 15 SP2 kernel-obs-build Affected
    SUSE Linux Enterprise Desktop 15 SP2 kernel-preempt Affected
    SUSE Linux Enterprise Desktop 15 SP2 kernel-source Affected
    SUSE Linux Enterprise Desktop 15 SP2 kernel-syms Affected
    SUSE Linux Enterprise Desktop 15 SP3 kernel-source Already fixed
    SUSE Linux Enterprise Micro 5.0 kernel-default Affected
    SUSE Linux Enterprise Module for Basesystem 15 kernel-source Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP1 kernel-source Affected
    SUSE Linux Enterprise Module for Development Tools 15 kernel-source Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP1 kernel-source Affected
    SUSE Linux Enterprise Module for Public Cloud 15 SP2 kernel-source-azure Already fixed
    SUSE Linux Enterprise Module for Public Cloud 15 SP3 kernel-source-azure Already fixed
    SUSE Linux Enterprise Real Time 15 SP2 kernel-default Affected
    SUSE Linux Enterprise Real Time 15 SP2 kernel-docs Affected
    SUSE Linux Enterprise Real Time 15 SP2 kernel-obs-build Affected
    SUSE Linux Enterprise Real Time 15 SP2 kernel-preempt Affected
    SUSE Linux Enterprise Real Time 15 SP2 kernel-source Affected
    SUSE Linux Enterprise Real Time 15 SP2 kernel-syms Affected
    SUSE Linux Enterprise Real Time 15 SP4 kernel-source Already fixed
    SUSE Linux Enterprise Real Time 15 SP4 kernel-source-rt Already fixed
    SUSE Linux Enterprise Server 11 SP4 kernel-source Affected
    SUSE Linux Enterprise Server 11 SP4 LTSS kernel-default Affected
    SUSE Linux Enterprise Server 11 SP4 LTSS kernel-source Affected
    SUSE Linux Enterprise Server 11 SP4-LTSS kernel-source Affected
    SUSE Linux Enterprise Server 12 SP2 kernel-source Affected
    SUSE Linux Enterprise Server 12 SP2-BCL kernel-source Affected
    SUSE Linux Enterprise Server 12 SP2-ESPOS kernel-source Affected
    SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default Affected
    SUSE Linux Enterprise Server 12 SP2-LTSS kernel-source Affected
    SUSE Linux Enterprise Server 12 SP3 kernel-source Affected
    SUSE Linux Enterprise Server 12 SP3-BCL kernel-source Affected
    SUSE Linux Enterprise Server 12 SP3-ESPOS kernel-source Affected
    SUSE Linux Enterprise Server 12 SP3-LTSS kernel-source Affected
    SUSE Linux Enterprise Server 12 SP4 kernel-source Affected
    SUSE Linux Enterprise Server 12 SP4-ESPOS kernel-source Affected
    SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default Affected
    SUSE Linux Enterprise Server 12 SP4-LTSS kernel-source Affected
    SUSE Linux Enterprise Server 15 kernel-source Affected
    SUSE Linux Enterprise Server 15 SP1 kernel-source Affected
    SUSE Linux Enterprise Server 15 SP1-BCL kernel-source Affected
    SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default Affected
    SUSE Linux Enterprise Server 15 SP1-LTSS kernel-source Affected
    SUSE Linux Enterprise Server 15 SP2-BCL kernel-default Affected
    SUSE Linux Enterprise Server 15 SP2-BCL kernel-docs Affected
    SUSE Linux Enterprise Server 15 SP2-BCL kernel-obs-build Affected
    SUSE Linux Enterprise Server 15 SP2-BCL kernel-preempt Affected
    SUSE Linux Enterprise Server 15 SP2-BCL kernel-source Affected
    SUSE Linux Enterprise Server 15 SP2-BCL kernel-syms Affected
    SUSE Linux Enterprise Server 15 SP3-BCL kernel-source Already fixed
    SUSE Linux Enterprise Server 15-LTSS kernel-default Affected
    SUSE Linux Enterprise Server 15-LTSS kernel-source Affected
    SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 kernel-source Affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-default Affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-source Affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP3 kernel-source Affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-default Affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-source Affected
    SUSE Linux Enterprise Server for SAP Applications 15 kernel-source Affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP1 kernel-source Affected
    SUSE Linux Enterprise Workstation Extension 15 SP2 kernel-default Affected
    SUSE Linux Enterprise Workstation Extension 15 SP2 kernel-preempt Affected
    SUSE Manager Proxy 4.0 kernel-source Affected
    SUSE Manager Proxy 4.1 kernel-default Affected
    SUSE Manager Proxy 4.1 kernel-docs Affected
    SUSE Manager Proxy 4.1 kernel-obs-build Affected
    SUSE Manager Proxy 4.1 kernel-preempt Affected
    SUSE Manager Proxy 4.1 kernel-source Affected
    SUSE Manager Proxy 4.1 kernel-source-azure Already fixed
    SUSE Manager Proxy 4.1 kernel-syms Affected
    SUSE Manager Proxy 4.2 kernel-source Already fixed
    SUSE Manager Proxy 4.2 kernel-source-azure Already fixed
    SUSE Manager Retail Branch Server 4.0 kernel-source Affected
    SUSE Manager Retail Branch Server 4.1 kernel-default Affected
    SUSE Manager Retail Branch Server 4.1 kernel-docs Affected
    SUSE Manager Retail Branch Server 4.1 kernel-obs-build Affected
    SUSE Manager Retail Branch Server 4.1 kernel-preempt Affected
    SUSE Manager Retail Branch Server 4.1 kernel-source Affected
    SUSE Manager Retail Branch Server 4.1 kernel-source-azure Already fixed
    SUSE Manager Retail Branch Server 4.1 kernel-syms Affected
    SUSE Manager Retail Branch Server 4.2 kernel-source Already fixed
    SUSE Manager Retail Branch Server 4.2 kernel-source-azure Already fixed
    SUSE Manager Server 4.0 kernel-source Affected
    SUSE Manager Server 4.1 kernel-default Affected
    SUSE Manager Server 4.1 kernel-docs Affected
    SUSE Manager Server 4.1 kernel-obs-build Affected
    SUSE Manager Server 4.1 kernel-preempt Affected
    SUSE Manager Server 4.1 kernel-source Affected
    SUSE Manager Server 4.1 kernel-source-azure Already fixed
    SUSE Manager Server 4.1 kernel-syms Affected
    SUSE Manager Server 4.2 kernel-source Already fixed
    SUSE Manager Server 4.2 kernel-source-azure Already fixed
    SUSE OpenStack Cloud 7 kernel-source Affected
    SUSE OpenStack Cloud Crowbar 8 kernel-source Affected
    SUSE OpenStack Cloud Crowbar 9 kernel-default Affected
    SUSE OpenStack Cloud Crowbar 9 kernel-source Affected
    SUSE Real Time Module 15 SP3 kernel-source-rt Already fixed
    SUSE Real Time Module 15 SP4 kernel-source-rt Already fixed

    SUSE Timeline for this CVE

    CVE page created: Fri Mar 15 23:00:17 2024
    CVE page last modified: Fri Apr 26 21:33:04 2024