Upstream information
Description
In the Linux kernel, the following vulnerability has been resolved: afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server AFS-3 has two data fetch RPC variants, FS.FetchData and FS.FetchData64, and Linux's afs client switches between them when talking to a non-YFS server if the read size, the file position or the sum of the two have the upper 32 bits set of the 64-bit value. This is a problem, however, since the file position and length fields of FS.FetchData are *signed* 32-bit values. Fix this by capturing the capability bits obtained from the fileserver when it's sent an FS.GetCapabilities RPC, rather than just discarding them, and then picking out the VICED_CAPABILITY_64BITFILES flag. This can then be used to decide whether to use FS.FetchData or FS.FetchData64 - and also FS.StoreData or FS.StoreData64 - rather than using upper_32_bits() to switch on the parameter values. This capabilities flag could also be used to limit the maximum size of the file, but all servers must be checked for that. Note that the issue does not exist with FS.StoreData - that uses *unsigned* 32-bit values. It's also not a problem with Auristor servers as its YFS.FetchData64 op uses unsigned 64-bit values. This can be tested by cloning a git repo through an OpenAFS client to an OpenAFS server and then doing "git status" on it from a Linux afs client[1]. Provided the clone has a pack file that's in the 2G-4G range, the git status will show errors like: error: packfile .git/objects/pack/pack-5e813c51d12b6847bbc0fcd97c2bca66da50079c.pack does not match index error: packfile .git/objects/pack/pack-5e813c51d12b6847bbc0fcd97c2bca66da50079c.pack does not match index This can be observed in the server's FileLog with something like the following appearing: Sun Aug 29 19:31:39 2021 SRXAFS_FetchData, Fid = 2303380852.491776.3263114, Host 192.168.11.201:7001, Id 1001 Sun Aug 29 19:31:39 2021 CheckRights: len=0, for host=192.168.11.201:7001 Sun Aug 29 19:31:39 2021 FetchData_RXStyle: Pos 18446744071815340032, Len 3154 Sun Aug 29 19:31:39 2021 FetchData_RXStyle: file size 2400758866 ... Sun Aug 29 19:31:40 2021 SRXAFS_FetchData returns 5 Note the file position of 18446744071815340032. This is the requested file position sign-extended.SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having moderate severity.
SUSE | |
---|---|
Base Score | 6.5 |
Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N |
Attack Vector | Network |
Attack Complexity | Low |
Privileges Required | None |
User Interaction | Required |
Scope | Unchanged |
Confidentiality Impact | None |
Integrity Impact | High |
Availability Impact | None |
CVSSv3 Version | 3.1 |
SUSE Security Advisories:
- SUSE-SU-2024:2008-1, published Wed Jun 12 12:32:06 UTC 2024
- SUSE-SU-2024:2011-1, published Wed Jun 12 20:31:16 UTC 2024
- SUSE-SU-2024:2019-1, published Thu Jun 13 12:36:27 UTC 2024
- SUSE-SU-2024:2189-1, published Tue Jun 25 08:31:08 UTC 2024
- SUSE-SU-2024:2190-1, published Tue Jun 25 12:32:30 UTC 2024
List of released packages
Product(s) | Fixed package version(s) | References |
---|---|---|
Container suse/sle-micro-rancher/5.3:latest Container suse/sle-micro-rancher/5.4:latest |
| |
Image SLES15-SP5-BYOS-GCE Image SLES15-SP5-GCE |
| |
SUSE Linux Enterprise Desktop 15 SP5 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP5-2024-2190 SUSE-SLE-Module-Development-Tools-15-SP5-2024-2190 SUSE-SLE-Product-WE-15-SP5-2024-2190 |
SUSE Linux Enterprise High Availability Extension 15 SP4 |
| Patchnames: SUSE-SLE-Product-HA-15-SP4-2024-2189 |
SUSE Linux Enterprise High Availability Extension 15 SP5 |
| Patchnames: SUSE-SLE-Product-HA-15-SP5-2024-2190 |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS |
| Patchnames: SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2189 |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS |
| Patchnames: SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2189 |
SUSE Linux Enterprise High Performance Computing 15 SP5 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP5-2024-2190 SUSE-SLE-Module-Development-Tools-15-SP5-2024-2190 SUSE-SLE-Module-Legacy-15-SP5-2024-2190 SUSE-SLE-Module-Public-Cloud-15-SP5-2024-2019 |
SUSE Linux Enterprise Live Patching 15 SP4 | Patchnames: SUSE-SLE-Module-Live-Patching-15-SP4-2024-2189 | |
SUSE Linux Enterprise Live Patching 15 SP5 | Patchnames: SUSE-SLE-Module-Live-Patching-15-SP5-2024-2008 SUSE-SLE-Module-Live-Patching-15-SP5-2024-2190 | |
SUSE Linux Enterprise Micro 5.3 |
| Patchnames: SUSE-SLE-Micro-5.3-2024-2011 SUSE-SLE-Micro-5.3-2024-2189 |
SUSE Linux Enterprise Micro 5.4 |
| Patchnames: SUSE-SLE-Micro-5.4-2024-2011 SUSE-SLE-Micro-5.4-2024-2189 |
SUSE Linux Enterprise Micro 5.5 |
| Patchnames: SUSE-SLE-Micro-5.5-2024-2008 SUSE-SLE-Micro-5.5-2024-2190 |
SUSE Linux Enterprise Module for Basesystem 15 SP5 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP5-2024-2190 |
SUSE Linux Enterprise Module for Development Tools 15 SP5 |
| Patchnames: SUSE-SLE-Module-Development-Tools-15-SP5-2024-2190 |
SUSE Linux Enterprise Module for Legacy 15 SP5 |
| Patchnames: SUSE-SLE-Module-Legacy-15-SP5-2024-2190 |
SUSE Linux Enterprise Module for Public Cloud 15 SP5 |
| Patchnames: SUSE-SLE-Module-Public-Cloud-15-SP5-2024-2019 |
SUSE Linux Enterprise Real Time 15 SP5 SUSE Real Time Module 15 SP5 |
| Patchnames: SUSE-SLE-Module-RT-15-SP5-2024-2008 |
SUSE Linux Enterprise Server 15 SP4-LTSS |
| Patchnames: SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2189 |
SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP5-2024-2190 SUSE-SLE-Module-Development-Tools-15-SP5-2024-2190 SUSE-SLE-Module-Legacy-15-SP5-2024-2190 SUSE-SLE-Module-Public-Cloud-15-SP5-2024-2019 SUSE-SLE-Product-WE-15-SP5-2024-2190 |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 |
| Patchnames: SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2189 |
SUSE Linux Enterprise Workstation Extension 15 SP5 |
| Patchnames: SUSE-SLE-Product-WE-15-SP5-2024-2190 |
SUSE Manager Proxy 4.3 |
| Patchnames: SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2189 |
SUSE Manager Retail Branch Server 4.3 |
| Patchnames: SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.3-2024-2189 |
SUSE Manager Server 4.3 |
| Patchnames: SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2189 |
openSUSE Leap 15.5 |
| Patchnames: openSUSE-SLE-15.5-2024-2008 openSUSE-SLE-15.5-2024-2019 openSUSE-SLE-15.5-2024-2190 |
openSUSE Leap Micro 5.3 |
| Patchnames: openSUSE-Leap-Micro-5.3-2024-2011 openSUSE-Leap-Micro-5.3-2024-2189 |
openSUSE Leap Micro 5.4 |
| Patchnames: openSUSE-Leap-Micro-5.4-2024-2011 openSUSE-Leap-Micro-5.4-2024-2189 |
openSUSE Leap Micro 5.5 |
| Patchnames: openSUSE-Leap-Micro-5.5-2024-2008 openSUSE-Leap-Micro-5.5-2024-2190 |
First public cloud image revisions this CVE is fixed in:
- google/sles-15-sp5-byos-v20240628-arm64
- google/sles-15-sp5-byos-v20240628-x86-64
- google/sles-15-sp5-v20240628-arm64
- google/sles-15-sp5-v20240628-x86-64
- microsoft/suse-sle-micro-5-3-byos-v20240625-arm64
Status of this issue by product and package
Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.
Product(s) | Source package | State |
---|---|---|
Products under general support and receiving all security fixes. | ||
SLES15-SP5-CHOST-BYOS-Aliyun | kernel-default | In progress |
SLES15-SP5-CHOST-BYOS-Azure | kernel-default | In progress |
SLES15-SP5-CHOST-BYOS-EC2 | kernel-default | In progress |
SLES15-SP5-CHOST-BYOS-GCE | kernel-default | In progress |
SLES15-SP5-CHOST-BYOS-SAP-CCloud | kernel-default | In progress |
SUSE Enterprise Storage 7.1 | kernel-default | Not affected |
SUSE Enterprise Storage 7.1 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-64kb | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-default-base | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-docs | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-obs-build | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-syms | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Desktop 15 SP6 | kernel-default | Already fixed |
SUSE Linux Enterprise Desktop 15 SP6 | kernel-source | Already fixed |
SUSE Linux Enterprise High Availability Extension 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise High Performance Computing 12 SP5 | kernel-default | Not affected |
SUSE Linux Enterprise High Performance Computing 12 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 12 SP5 | kernel-source-azure | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-64kb | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-azure | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-default-base | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-docs | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-obs-build | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-source-azure | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-syms | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-syms-azure | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-zfcpdump | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-default | Already fixed |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-source | Already fixed |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-source-azure | Already fixed |
SUSE Linux Enterprise Live Patching 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5-RT_Update_16 | Released |
SUSE Linux Enterprise Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_15 | Released |
SUSE Linux Enterprise Micro 5.1 | kernel-default | Not affected |
SUSE Linux Enterprise Micro 5.1 | kernel-rt | Not affected |
SUSE Linux Enterprise Micro 5.1 | kernel-source-rt | Not affected |
SUSE Linux Enterprise Micro 5.2 | kernel-default | Not affected |
SUSE Linux Enterprise Micro 5.2 | kernel-rt | Not affected |
SUSE Linux Enterprise Micro 5.2 | kernel-source-rt | Not affected |
SUSE Linux Enterprise Micro 5.3 | kernel-default | Released |
SUSE Linux Enterprise Micro 5.3 | kernel-default-base | Released |
SUSE Linux Enterprise Micro 5.3 | kernel-rt | Released |
SUSE Linux Enterprise Micro 5.3 | kernel-source-rt | Released |
SUSE Linux Enterprise Micro 5.4 | kernel-default | Released |
SUSE Linux Enterprise Micro 5.4 | kernel-default-base | Released |
SUSE Linux Enterprise Micro 5.4 | kernel-rt | Released |
SUSE Linux Enterprise Micro 5.4 | kernel-source-rt | Released |
SUSE Linux Enterprise Micro 5.5 | kernel-default | Released |
SUSE Linux Enterprise Micro 5.5 | kernel-default-base | Released |
SUSE Linux Enterprise Micro 5.5 | kernel-rt | Released |
SUSE Linux Enterprise Micro 5.5 | kernel-source-rt | Released |
SUSE Linux Enterprise Micro for Rancher 5.3 | kernel-default | Released |
SUSE Linux Enterprise Micro for Rancher 5.3 | kernel-rt | Released |
SUSE Linux Enterprise Micro for Rancher 5.3 | kernel-source-rt | Released |
SUSE Linux Enterprise Micro for Rancher 5.4 | kernel-default | Released |
SUSE Linux Enterprise Micro for Rancher 5.4 | kernel-rt | Released |
SUSE Linux Enterprise Micro for Rancher 5.4 | kernel-source-rt | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP5 | kernel-64kb | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP5 | kernel-default-base | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP5 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP6 | kernel-default | Already fixed |
SUSE Linux Enterprise Module for Basesystem 15 SP6 | kernel-source | Already fixed |
SUSE Linux Enterprise Module for Development Tools 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP5 | kernel-docs | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP5 | kernel-obs-build | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP5 | kernel-syms | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP6 | kernel-default | Already fixed |
SUSE Linux Enterprise Module for Development Tools 15 SP6 | kernel-source | Already fixed |
SUSE Linux Enterprise Module for Legacy 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Module for Public Cloud 15 SP5 | kernel-azure | Released |
SUSE Linux Enterprise Module for Public Cloud 15 SP5 | kernel-source-azure | Released |
SUSE Linux Enterprise Module for Public Cloud 15 SP5 | kernel-syms-azure | Released |
SUSE Linux Enterprise Module for Public Cloud 15 SP6 | kernel-source-azure | Already fixed |
SUSE Linux Enterprise Real Time 12 SP5 | kernel-source-rt | Not affected |
SUSE Linux Enterprise Real Time 15 SP5 | kernel-rt | Released |
SUSE Linux Enterprise Real Time 15 SP5 | kernel-rt_debug | Released |
SUSE Linux Enterprise Real Time 15 SP5 | kernel-source-rt | Released |
SUSE Linux Enterprise Real Time 15 SP5 | kernel-syms-rt | Released |
SUSE Linux Enterprise Real Time 15 SP6 | kernel-source-rt | Already fixed |
SUSE Linux Enterprise Server 12 SP5 | kernel-default | Not affected |
SUSE Linux Enterprise Server 12 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP5 | kernel-source-azure | Not affected |
SUSE Linux Enterprise Server 15 SP5 | kernel-64kb | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-azure | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-default-base | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-docs | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-obs-build | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-source-azure | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-syms | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-syms-azure | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-default | Already fixed |
SUSE Linux Enterprise Server 15 SP6 | kernel-source | Already fixed |
SUSE Linux Enterprise Server 15 SP6 | kernel-source-azure | Already fixed |
SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-default | Not affected |
SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-source-azure | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-64kb | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-default-base | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-docs | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-obs-build | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-source-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-syms | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-syms-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-default | Already fixed |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-source | Already fixed |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-source-azure | Already fixed |
SUSE Linux Enterprise Workstation Extension 15 SP5 | kernel-default | Released |
SUSE Manager Proxy 4.3 | kernel-64kb | Affected |
SUSE Manager Proxy 4.3 | kernel-default | Released |
SUSE Manager Proxy 4.3 | kernel-default-base | Released |
SUSE Manager Proxy 4.3 | kernel-docs | Affected |
SUSE Manager Proxy 4.3 | kernel-obs-build | Affected |
SUSE Manager Proxy 4.3 | kernel-source | Released |
SUSE Manager Proxy 4.3 | kernel-syms | Released |
SUSE Manager Proxy 4.3 | kernel-zfcpdump | Affected |
SUSE Manager Retail Branch Server 4.3 | kernel-64kb | Affected |
SUSE Manager Retail Branch Server 4.3 | kernel-default | Released |
SUSE Manager Retail Branch Server 4.3 | kernel-default-base | Released |
SUSE Manager Retail Branch Server 4.3 | kernel-docs | Affected |
SUSE Manager Retail Branch Server 4.3 | kernel-obs-build | Affected |
SUSE Manager Retail Branch Server 4.3 | kernel-source | Released |
SUSE Manager Retail Branch Server 4.3 | kernel-syms | Affected |
SUSE Manager Retail Branch Server 4.3 | kernel-zfcpdump | Affected |
SUSE Manager Server 4.3 | kernel-64kb | Affected |
SUSE Manager Server 4.3 | kernel-default | Released |
SUSE Manager Server 4.3 | kernel-default-base | Released |
SUSE Manager Server 4.3 | kernel-docs | Affected |
SUSE Manager Server 4.3 | kernel-obs-build | Affected |
SUSE Manager Server 4.3 | kernel-source | Released |
SUSE Manager Server 4.3 | kernel-syms | Released |
SUSE Manager Server 4.3 | kernel-zfcpdump | Released |
SUSE Real Time Module 15 SP5 | kernel-rt | Released |
SUSE Real Time Module 15 SP5 | kernel-rt_debug | Released |
SUSE Real Time Module 15 SP5 | kernel-source-rt | Released |
SUSE Real Time Module 15 SP5 | kernel-syms-rt | Released |
SUSE Real Time Module 15 SP6 | kernel-source-rt | Already fixed |
openSUSE Leap 15.5 | dtb-aarch64 | Released |
openSUSE Leap 15.5 | dtb-armv7l | Released |
openSUSE Leap 15.5 | kernel-64kb | Released |
openSUSE Leap 15.5 | kernel-azure | Released |
openSUSE Leap 15.5 | kernel-debug | Released |
openSUSE Leap 15.5 | kernel-default | Released |
openSUSE Leap 15.5 | kernel-docs | Released |
openSUSE Leap 15.5 | kernel-kvmsmall | Released |
openSUSE Leap 15.5 | kernel-lpae | Released |
openSUSE Leap 15.5 | kernel-obs-build | Released |
openSUSE Leap 15.5 | kernel-obs-qa | Released |
openSUSE Leap 15.5 | kernel-rt | Released |
openSUSE Leap 15.5 | kernel-rt_debug | Released |
openSUSE Leap 15.5 | kernel-source | Released |
openSUSE Leap 15.5 | kernel-source-azure | Released |
openSUSE Leap 15.5 | kernel-source-rt | Released |
openSUSE Leap 15.5 | kernel-syms | Released |
openSUSE Leap 15.5 | kernel-syms-azure | Released |
openSUSE Leap 15.5 | kernel-syms-rt | Released |
openSUSE Leap 15.5 | kernel-zfcpdump | Released |
openSUSE Leap 15.6 | kernel-default | Already fixed |
openSUSE Leap 15.6 | kernel-source | Already fixed |
openSUSE Leap 15.6 | kernel-source-azure | Already fixed |
openSUSE Leap 15.6 | kernel-source-rt | Already fixed |
openSUSE Leap Micro 5.4 | kernel-default | Released |
openSUSE Leap Micro 5.4 | kernel-rt | Released |
Products under Long Term Service Pack support and receiving important and critical security fixes. | ||
SLES15-SP4-CHOST-BYOS | kernel-default | In progress |
SLES15-SP4-CHOST-BYOS-Aliyun | kernel-default | In progress |
SLES15-SP4-CHOST-BYOS-Azure | kernel-default | In progress |
SLES15-SP4-CHOST-BYOS-EC2 | kernel-default | In progress |
SLES15-SP4-CHOST-BYOS-GCE | kernel-default | In progress |
SLES15-SP4-CHOST-BYOS-SAP-CCloud | kernel-default | In progress |
SUSE Linux Enterprise Desktop 15 SP4 | kernel-64kb | Affected |
SUSE Linux Enterprise Desktop 15 SP4 | kernel-default | Affected |
SUSE Linux Enterprise Desktop 15 SP4 | kernel-docs | Affected |
SUSE Linux Enterprise Desktop 15 SP4 | kernel-obs-build | Affected |
SUSE Linux Enterprise Desktop 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise Desktop 15 SP4 | kernel-syms | Affected |
SUSE Linux Enterprise Desktop 15 SP4 | kernel-zfcpdump | Affected |
SUSE Linux Enterprise Desktop 15 SP4 LTSS | kernel-default | Released |
SUSE Linux Enterprise Desktop 15 SP4 LTSS | kernel-docs | Released |
SUSE Linux Enterprise Desktop 15 SP4 LTSS | kernel-obs-build | Released |
SUSE Linux Enterprise Desktop 15 SP4 LTSS | kernel-source | Released |
SUSE Linux Enterprise Desktop 15 SP4 LTSS | kernel-syms | Released |
SUSE Linux Enterprise High Availability Extension 15 SP4 | kernel-default | Released |
SUSE Linux Enterprise High Performance Computing 15 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP4 | kernel-64kb | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4 | kernel-default | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4 | kernel-docs | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4 | kernel-obs-build | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4 | kernel-syms | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4 | kernel-zfcpdump | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-64kb | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-default | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-default-base | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-docs | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-obs-build | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-source | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-syms | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-64kb | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-default | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-default-base | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-docs | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-obs-build | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-source | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-syms | Released |
SUSE Linux Enterprise Live Patching 15 SP4 | kernel-default | Released |
SUSE Linux Enterprise Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_27 | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Basesystem 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Basesystem 15 SP4 | kernel-64kb | Affected |
SUSE Linux Enterprise Module for Basesystem 15 SP4 | kernel-default | Affected |
SUSE Linux Enterprise Module for Basesystem 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise Module for Basesystem 15 SP4 | kernel-zfcpdump | Affected |
SUSE Linux Enterprise Module for Development Tools 15 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Development Tools 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Development Tools 15 SP4 | kernel-docs | Affected |
SUSE Linux Enterprise Module for Development Tools 15 SP4 | kernel-obs-build | Affected |
SUSE Linux Enterprise Module for Development Tools 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise Module for Development Tools 15 SP4 | kernel-syms | Affected |
SUSE Linux Enterprise Module for Legacy 15 SP4 | kernel-default | Affected |
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE | kernel-default | Not affected |
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP2-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 15 SP2-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP3-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 15 SP3-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP4 | kernel-64kb | Affected |
SUSE Linux Enterprise Server 15 SP4 | kernel-default | Affected |
SUSE Linux Enterprise Server 15 SP4 | kernel-docs | Affected |
SUSE Linux Enterprise Server 15 SP4 | kernel-obs-build | Affected |
SUSE Linux Enterprise Server 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP4 | kernel-syms | Affected |
SUSE Linux Enterprise Server 15 SP4 | kernel-zfcpdump | Affected |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-64kb | Released |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-default | Released |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-default-base | Released |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-docs | Released |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-obs-build | Released |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-source | Released |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-syms | Released |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-zfcpdump | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP2 | kernel-default | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP3 | kernel-default | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-64kb | Affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-default | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-default-base | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-docs | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-obs-build | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-source | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-syms | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-zfcpdump | Affected |
Products past their end of life and not receiving proactive updates anymore. | ||
HPE Helion OpenStack 8 | kernel-source | Not affected |
SUSE CaaS Platform 4.0 | kernel-source | Not affected |
SUSE Enterprise Storage 6 | kernel-source | Not affected |
SUSE Enterprise Storage 7 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 12 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 12 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 15 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 15 SP1 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 15 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP1 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Micro 5.0 | kernel-default | Not affected |
SUSE Linux Enterprise Module for Basesystem 15 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Basesystem 15 SP1 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Development Tools 15 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-source | Not affected |
SUSE Linux Enterprise Real Time 15 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Real Time 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Real Time 15 SP3 | kernel-source-rt | Not affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-default | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-docs | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-obs-build | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-rt | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-rt_debug | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-source-rt | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-syms | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-syms-rt | Affected |
SUSE Linux Enterprise Server 11 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Server 11 SP4 LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 11 SP4 LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 11 SP4-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP3-BCL | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP3-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP3-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP4-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP4-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 12 SP4-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP1 | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP1-BCL | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP1-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 15 SP1-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP2-BCL | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP3-BCL | kernel-source | Not affected |
SUSE Linux Enterprise Server 15-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 15-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 12 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-default | Not affected |
SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP1 | kernel-source | Not affected |
SUSE Linux Enterprise Workstation Extension 15 SP4 | kernel-default | Affected |
SUSE Manager Proxy 4.0 | kernel-source | Not affected |
SUSE Manager Proxy 4.1 | kernel-source | Not affected |
SUSE Manager Proxy 4.2 | kernel-source | Not affected |
SUSE Manager Retail Branch Server 4.0 | kernel-source | Not affected |
SUSE Manager Retail Branch Server 4.1 | kernel-source | Not affected |
SUSE Manager Retail Branch Server 4.2 | kernel-source | Not affected |
SUSE Manager Server 4.0 | kernel-source | Not affected |
SUSE Manager Server 4.1 | kernel-source | Not affected |
SUSE Manager Server 4.2 | kernel-source | Not affected |
SUSE OpenStack Cloud 8 | kernel-source | Not affected |
SUSE OpenStack Cloud 9 | kernel-default | Not affected |
SUSE OpenStack Cloud 9 | kernel-source | Not affected |
SUSE OpenStack Cloud Crowbar 8 | kernel-source | Not affected |
SUSE OpenStack Cloud Crowbar 9 | kernel-default | Not affected |
SUSE OpenStack Cloud Crowbar 9 | kernel-source | Not affected |
SUSE Real Time Module 15 SP3 | kernel-source-rt | Not affected |
SUSE Real Time Module 15 SP4 | kernel-rt | Affected |
SUSE Real Time Module 15 SP4 | kernel-rt_debug | Affected |
SUSE Real Time Module 15 SP4 | kernel-source-rt | Affected |
SUSE Real Time Module 15 SP4 | kernel-syms-rt | Affected |
openSUSE Leap 15.4 | dtb-aarch64 | Released |
openSUSE Leap 15.4 | dtb-armv7l | Released |
openSUSE Leap 15.4 | kernel-64kb | Released |
openSUSE Leap 15.4 | kernel-debug | Released |
openSUSE Leap 15.4 | kernel-default | Released |
openSUSE Leap 15.4 | kernel-docs | Released |
openSUSE Leap 15.4 | kernel-kvmsmall | Released |
openSUSE Leap 15.4 | kernel-lpae | Released |
openSUSE Leap 15.4 | kernel-obs-build | Released |
openSUSE Leap 15.4 | kernel-obs-qa | Released |
openSUSE Leap 15.4 | kernel-source | Released |
openSUSE Leap 15.4 | kernel-syms | Released |
openSUSE Leap 15.4 | kernel-zfcpdump | Released |
openSUSE Leap Micro 5.3 | kernel-default | Released |
openSUSE Leap Micro 5.3 | kernel-rt | Released |
Container Status | ||
suse/sle-micro-rancher/5.3 suse/sle-micro-rancher/5.4 | kernel-default | Released |
suse/hpc/warewulf4-x86_64/sle-hpc-node | kernel-default | In progress |
suse/sles/15.4/libguestfs-tools:0.49.0 suse/sles/15.5/libguestfs-tools:0.58.0 | kernel-kvmsmall | In progress |
rancher/elemental-teal-rt/5.3 rancher/elemental-teal-rt/5.4 suse/sle-micro/rt-5.5 | kernel-rt | In progress |
bci/bci-sle15-kernel-module-devel | kernel-syms | In progress |
SUSE Timeline for this CVE
CVE page created: Tue May 21 18:00:22 2024CVE page last modified: Sat Jun 29 00:35:46 2024