Upstream information

CVE-2024-26733 at MITRE

Description

In the Linux kernel, the following vulnerability has been resolved: arp: Prevent overflow in arp_req_get(). syzkaller reported an overflown write in arp_req_get(). [0] When ioctl(SIOCGARP) is issued, arp_req_get() looks up an neighbour entry and copies neigh->ha to struct arpreq.arp_ha.sa_data. The arp_ha here is struct sockaddr, not struct sockaddr_storage, so the sa_data buffer is just 14 bytes. In the splat below, 2 bytes are overflown to the next int field, arp_flags. We initialise the field just after the memcpy(), so it's not a problem. However, when dev->addr_len is greater than 22 (e.g. MAX_ADDR_LEN), arp_netmask is overwritten, which could be set as htonl(0xFFFFFFFFUL) in arp_ioctl() before calling arp_req_get(). To avoid the overflow, let's limit the max length of memcpy(). Note that commit b5f0de6df6dc ("net: dev: Convert sa_data to flexible array in struct sockaddr") just silenced syzkaller. [0]: memcpy: detected field-spanning write (size 16) of single field "r->arp_ha.sa_data" at net/ipv4/arp.c:1128 (size 14) WARNING: CPU: 0 PID: 144638 at net/ipv4/arp.c:1128 arp_req_get+0x411/0x4a0 net/ipv4/arp.c:1128 Modules linked in: CPU: 0 PID: 144638 Comm: syz-executor.4 Not tainted 6.1.74 #31 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.0-debian-1.16.0-5 04/01/2014 RIP: 0010:arp_req_get+0x411/0x4a0 net/ipv4/arp.c:1128 Code: fd ff ff e8 41 42 de fb b9 0e 00 00 00 4c 89 fe 48 c7 c2 20 6d ab 87 48 c7 c7 80 6d ab 87 c6 05 25 af 72 04 01 e8 5f 8d ad fb <0f> 0b e9 6c fd ff ff e8 13 42 de fb be 03 00 00 00 4c 89 e7 e8 a6 RSP: 0018:ffffc900050b7998 EFLAGS: 00010286 RAX: 0000000000000000 RBX: ffff88803a815000 RCX: 0000000000000000 RDX: 0000000000000000 RSI: ffffffff8641a44a RDI: 0000000000000001 RBP: ffffc900050b7a98 R08: 0000000000000001 R09: 0000000000000000 R10: 0000000000000000 R11: 203a7970636d656d R12: ffff888039c54000 R13: 1ffff92000a16f37 R14: ffff88803a815084 R15: 0000000000000010 FS: 00007f172bf306c0(0000) GS:ffff88805aa00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f172b3569f0 CR3: 0000000057f12005 CR4: 0000000000770ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 PKRU: 55555554 Call Trace: <TASK> arp_ioctl+0x33f/0x4b0 net/ipv4/arp.c:1261 inet_ioctl+0x314/0x3a0 net/ipv4/af_inet.c:981 sock_do_ioctl+0xdf/0x260 net/socket.c:1204 sock_ioctl+0x3ef/0x650 net/socket.c:1321 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:870 [inline] __se_sys_ioctl fs/ioctl.c:856 [inline] __x64_sys_ioctl+0x18e/0x220 fs/ioctl.c:856 do_syscall_x64 arch/x86/entry/common.c:51 [inline] do_syscall_64+0x37/0x90 arch/x86/entry/common.c:81 entry_SYSCALL_64_after_hwframe+0x64/0xce RIP: 0033:0x7f172b262b8d Code: 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007f172bf300b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007f172b3abf80 RCX: 00007f172b262b8d RDX: 0000000020000000 RSI: 0000000000008954 RDI: 0000000000000003 RBP: 00007f172b2d3493 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007f172b3abf80 R15: 00007f172bf10000 </TASK>

SUSE information

Overall state of this security issue: Pending

This issue is currently rated as having moderate severity.

CVSS v3 Scores
  SUSE
Base Score 5.5
Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality Impact None
Integrity Impact None
Availability Impact High
CVSSv3 Version 3.1
SUSE Bugzilla entry: 1222585 [NEW]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise High Availability Extension 15 SP2
  • cluster-md-kmp-default >= 5.3.18-150200.24.188.1
  • dlm-kmp-default >= 5.3.18-150200.24.188.1
  • gfs2-kmp-default >= 5.3.18-150200.24.188.1
  • ocfs2-kmp-default >= 5.3.18-150200.24.188.1
 Patchnames:
SUSE-SLE-Product-HA-15-SP2-2024-1454
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
  • kernel-default >= 5.3.18-150200.24.188.1
  • kernel-default-base >= 5.3.18-150200.24.188.1.150200.9.95.3
  • kernel-default-devel >= 5.3.18-150200.24.188.1
  • kernel-devel >= 5.3.18-150200.24.188.1
  • kernel-docs >= 5.3.18-150200.24.188.1
  • kernel-macros >= 5.3.18-150200.24.188.1
  • kernel-obs-build >= 5.3.18-150200.24.188.1
  • kernel-preempt >= 5.3.18-150200.24.188.1
  • kernel-preempt-devel >= 5.3.18-150200.24.188.1
  • kernel-source >= 5.3.18-150200.24.188.1
  • kernel-syms >= 5.3.18-150200.24.188.1
 Patchnames:
SUSE-SLE-Product-HPC-15-SP2-LTSS-2024-1454
SUSE Linux Enterprise Live Patching 15 SP2
    		Patchnames:
    SUSE-SLE-Module-Live-Patching-15-SP2-2024-1454
    SUSE Linux Enterprise Micro 5.1
    • kernel-rt >= 5.3.18-150300.166.1
    • kernel-source-rt >= 5.3.18-150300.166.1
    		 Patchnames:
    SUSE-SUSE-MicroOS-5.1-2024-1465
    SUSE Linux Enterprise Micro 5.2
    • kernel-rt >= 5.3.18-150300.166.1
    • kernel-source-rt >= 5.3.18-150300.166.1
    		 Patchnames:
    SUSE-SUSE-MicroOS-5.2-2024-1465
    SUSE Linux Enterprise Server 15 SP2-LTSS
    • kernel-default >= 5.3.18-150200.24.188.1
    • kernel-default-base >= 5.3.18-150200.24.188.1.150200.9.95.3
    • kernel-default-devel >= 5.3.18-150200.24.188.1
    • kernel-devel >= 5.3.18-150200.24.188.1
    • kernel-docs >= 5.3.18-150200.24.188.1
    • kernel-macros >= 5.3.18-150200.24.188.1
    • kernel-obs-build >= 5.3.18-150200.24.188.1
    • kernel-preempt >= 5.3.18-150200.24.188.1
    • kernel-preempt-devel >= 5.3.18-150200.24.188.1
    • kernel-source >= 5.3.18-150200.24.188.1
    • kernel-syms >= 5.3.18-150200.24.188.1
    • reiserfs-kmp-default >= 5.3.18-150200.24.188.1
    		 Patchnames:
    SUSE-SLE-Product-SLES-15-SP2-LTSS-2024-1454
    SUSE Linux Enterprise Server for SAP Applications 15 SP2
    • kernel-default >= 5.3.18-150200.24.188.1
    • kernel-default-base >= 5.3.18-150200.24.188.1.150200.9.95.3
    • kernel-default-devel >= 5.3.18-150200.24.188.1
    • kernel-devel >= 5.3.18-150200.24.188.1
    • kernel-docs >= 5.3.18-150200.24.188.1
    • kernel-macros >= 5.3.18-150200.24.188.1
    • kernel-obs-build >= 5.3.18-150200.24.188.1
    • kernel-preempt >= 5.3.18-150200.24.188.1
    • kernel-preempt-devel >= 5.3.18-150200.24.188.1
    • kernel-source >= 5.3.18-150200.24.188.1
    • kernel-syms >= 5.3.18-150200.24.188.1
    • reiserfs-kmp-default >= 5.3.18-150200.24.188.1
    		 Patchnames:
    SUSE-SLE-Product-SLES_SAP-15-SP2-2024-1454

    List of packages in QA

    Product(s) Package(s)
    SUSE Enterprise Storage 7.1
    • kernel-64kb >= 5.3.18-150300.59.158.1
    • kernel-64kb-devel >= 5.3.18-150300.59.158.1
    • kernel-default >= 5.3.18-150300.59.158.1
    • kernel-default-base >= 5.3.18-150300.59.158.1.150300.18.92.5
    • kernel-default-devel >= 5.3.18-150300.59.158.1
    • kernel-devel >= 5.3.18-150300.59.158.1
    • kernel-docs >= 5.3.18-150300.59.158.1
    • kernel-macros >= 5.3.18-150300.59.158.1
    • kernel-obs-build >= 5.3.18-150300.59.158.1
    • kernel-preempt >= 5.3.18-150300.59.158.1
    • kernel-preempt-devel >= 5.3.18-150300.59.158.1
    • kernel-source >= 5.3.18-150300.59.158.1
    • kernel-syms >= 5.3.18-150300.59.158.1
    • reiserfs-kmp-default >= 5.3.18-150300.59.158.1
    SUSE Linux Enterprise High Availability Extension 15 SP3
    • cluster-md-kmp-default >= 5.3.18-150300.59.158.1
    • dlm-kmp-default >= 5.3.18-150300.59.158.1
    • gfs2-kmp-default >= 5.3.18-150300.59.158.1
    • ocfs2-kmp-default >= 5.3.18-150300.59.158.1
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
    • kernel-64kb >= 5.3.18-150300.59.158.1
    • kernel-64kb-devel >= 5.3.18-150300.59.158.1
    • kernel-default >= 5.3.18-150300.59.158.1
    • kernel-default-base >= 5.3.18-150300.59.158.1.150300.18.92.5
    • kernel-default-devel >= 5.3.18-150300.59.158.1
    • kernel-devel >= 5.3.18-150300.59.158.1
    • kernel-docs >= 5.3.18-150300.59.158.1
    • kernel-macros >= 5.3.18-150300.59.158.1
    • kernel-obs-build >= 5.3.18-150300.59.158.1
    • kernel-preempt >= 5.3.18-150300.59.158.1
    • kernel-preempt-devel >= 5.3.18-150300.59.158.1
    • kernel-source >= 5.3.18-150300.59.158.1
    • kernel-syms >= 5.3.18-150300.59.158.1
    • reiserfs-kmp-default >= 5.3.18-150300.59.158.1
    SUSE Linux Enterprise Live Patching 15 SP3
    • kernel-default-livepatch >= 5.3.18-150300.59.158.1
    • kernel-default-livepatch-devel >= 5.3.18-150300.59.158.1
    • kernel-livepatch-5_3_18-150300_59_158-default >= 1-150300.7.3.5
    SUSE Linux Enterprise Micro 5.1
    • kernel-default >= 5.3.18-150300.59.158.1
    • kernel-default-base >= 5.3.18-150300.59.158.1.150300.18.92.5
    SUSE Linux Enterprise Micro 5.2
    • kernel-default >= 5.3.18-150300.59.158.1
    • kernel-default-base >= 5.3.18-150300.59.158.1.150300.18.92.5
    SUSE Linux Enterprise Server 15 SP3-LTSS
    • kernel-64kb >= 5.3.18-150300.59.158.1
    • kernel-64kb-devel >= 5.3.18-150300.59.158.1
    • kernel-default >= 5.3.18-150300.59.158.1
    • kernel-default-base >= 5.3.18-150300.59.158.1.150300.18.92.5
    • kernel-default-devel >= 5.3.18-150300.59.158.1
    • kernel-devel >= 5.3.18-150300.59.158.1
    • kernel-docs >= 5.3.18-150300.59.158.1
    • kernel-macros >= 5.3.18-150300.59.158.1
    • kernel-obs-build >= 5.3.18-150300.59.158.1
    • kernel-preempt >= 5.3.18-150300.59.158.1
    • kernel-preempt-devel >= 5.3.18-150300.59.158.1
    • kernel-source >= 5.3.18-150300.59.158.1
    • kernel-syms >= 5.3.18-150300.59.158.1
    • kernel-zfcpdump >= 5.3.18-150300.59.158.1
    • reiserfs-kmp-default >= 5.3.18-150300.59.158.1
    SUSE Linux Enterprise Server for SAP Applications 15 SP3
    • kernel-default >= 5.3.18-150300.59.158.1
    • kernel-default-base >= 5.3.18-150300.59.158.1.150300.18.92.5
    • kernel-default-devel >= 5.3.18-150300.59.158.1
    • kernel-devel >= 5.3.18-150300.59.158.1
    • kernel-docs >= 5.3.18-150300.59.158.1
    • kernel-macros >= 5.3.18-150300.59.158.1
    • kernel-obs-build >= 5.3.18-150300.59.158.1
    • kernel-preempt >= 5.3.18-150300.59.158.1
    • kernel-preempt-devel >= 5.3.18-150300.59.158.1
    • kernel-source >= 5.3.18-150300.59.158.1
    • kernel-syms >= 5.3.18-150300.59.158.1
    • reiserfs-kmp-default >= 5.3.18-150300.59.158.1

    Status of this issue by product and package

    Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.

    Product(s) Source package State
    Products under general support and receiving all security fixes.
    SUSE Enterprise Storage 7.1 kernel-64kb In progress
    SUSE Enterprise Storage 7.1 kernel-default In progress
    SUSE Enterprise Storage 7.1 kernel-default-base In progress
    SUSE Enterprise Storage 7.1 kernel-docs In progress
    SUSE Enterprise Storage 7.1 kernel-obs-build In progress
    SUSE Enterprise Storage 7.1 kernel-preempt In progress
    SUSE Enterprise Storage 7.1 kernel-source In progress
    SUSE Enterprise Storage 7.1 kernel-source-azure Affected
    SUSE Enterprise Storage 7.1 kernel-syms In progress
    SUSE Linux Enterprise Desktop 15 SP5 kernel-default Affected
    SUSE Linux Enterprise Desktop 15 SP5 kernel-source Affected
    SUSE Linux Enterprise Desktop 15 SP6 kernel-default Affected
    SUSE Linux Enterprise Desktop 15 SP6 kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 12 SP5 kernel-default Affected
    SUSE Linux Enterprise High Performance Computing 12 SP5 kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 12 SP5 kernel-source-azure Affected
    SUSE Linux Enterprise High Performance Computing 15 SP5 kernel-default Affected
    SUSE Linux Enterprise High Performance Computing 15 SP5 kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP5 kernel-source-azure Affected
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-default Affected
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-source-azure Affected
    SUSE Linux Enterprise Micro 5.1 kernel-default In progress
    SUSE Linux Enterprise Micro 5.1 kernel-default-base In progress
    SUSE Linux Enterprise Micro 5.1 kernel-rt Released
    SUSE Linux Enterprise Micro 5.1 kernel-source-rt Released
    SUSE Linux Enterprise Micro 5.2 kernel-default In progress
    SUSE Linux Enterprise Micro 5.2 kernel-default-base In progress
    SUSE Linux Enterprise Micro 5.2 kernel-rt Released
    SUSE Linux Enterprise Micro 5.2 kernel-source-rt Released
    SUSE Linux Enterprise Micro 5.3 kernel-default Affected
    SUSE Linux Enterprise Micro 5.3 kernel-rt Affected
    SUSE Linux Enterprise Micro 5.3 kernel-source-rt Affected
    SUSE Linux Enterprise Micro 5.4 kernel-default Affected
    SUSE Linux Enterprise Micro 5.4 kernel-rt Affected
    SUSE Linux Enterprise Micro 5.4 kernel-source-rt Affected
    SUSE Linux Enterprise Micro 5.5 kernel-source-rt Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-default Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-source Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-default Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-source Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP5 kernel-default Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP5 kernel-source Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-default Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-source Affected
    SUSE Linux Enterprise Module for Public Cloud 15 SP5 kernel-source-azure Affected
    SUSE Linux Enterprise Module for Public Cloud 15 SP6 kernel-source-azure Affected
    SUSE Linux Enterprise Real Time 12 SP5 kernel-source-rt Affected
    SUSE Linux Enterprise Real Time 15 SP5 kernel-source-rt Affected
    SUSE Linux Enterprise Real Time 15 SP6 kernel-source-rt Affected
    SUSE Linux Enterprise Server 12 SP5 kernel-default Affected
    SUSE Linux Enterprise Server 12 SP5 kernel-source Affected
    SUSE Linux Enterprise Server 12 SP5 kernel-source-azure Affected
    SUSE Linux Enterprise Server 15 SP5 kernel-default Affected
    SUSE Linux Enterprise Server 15 SP5 kernel-source Affected
    SUSE Linux Enterprise Server 15 SP5 kernel-source-azure Affected
    SUSE Linux Enterprise Server 15 SP6 kernel-default Affected
    SUSE Linux Enterprise Server 15 SP6 kernel-source Affected
    SUSE Linux Enterprise Server 15 SP6 kernel-source-azure Affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-default Affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-source Affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-source-azure Affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-default Affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-source Affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-source-azure Affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-default Affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-source Affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-source-azure Affected
    SUSE Manager Proxy 4.3 kernel-default Affected
    SUSE Manager Proxy 4.3 kernel-source Affected
    SUSE Manager Proxy 4.3 kernel-source-azure Affected
    SUSE Manager Retail Branch Server 4.3 kernel-default Affected
    SUSE Manager Retail Branch Server 4.3 kernel-source Affected
    SUSE Manager Retail Branch Server 4.3 kernel-source-azure Affected
    SUSE Manager Server 4.3 kernel-default Affected
    SUSE Manager Server 4.3 kernel-source Affected
    SUSE Manager Server 4.3 kernel-source-azure Affected
    SUSE Real Time Module 15 SP5 kernel-source-rt Affected
    SUSE Real Time Module 15 SP6 kernel-source-rt Affected
    Products under Long Term Service Pack support and receiving important and critical security fixes.
    SLES15-SP2-CHOST-BYOS-Aliyun kernel-default In progress
    SLES15-SP2-CHOST-BYOS-Azure kernel-default In progress
    SLES15-SP2-CHOST-BYOS-EC2 kernel-default In progress
    SLES15-SP2-CHOST-BYOS-GCE kernel-default In progress
    SUSE Linux Enterprise Desktop 15 SP4 kernel-source Affected
    SUSE Linux Enterprise High Availability Extension 15 SP2 kernel-default Released
    SUSE Linux Enterprise High Availability Extension 15 SP3 kernel-default In progress
    SUSE Linux Enterprise High Performance Computing 15 SP2 kernel-default Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2 kernel-docs Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2 kernel-obs-build Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2 kernel-preempt Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2 kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2 kernel-source-azure Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2 kernel-syms Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS kernel-default Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS kernel-docs Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS kernel-obs-build Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS kernel-preempt Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS kernel-syms Affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-default Released
    SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-default-base Released
    SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-docs Released
    SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-obs-build Released
    SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-preempt Released
    SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-source Released
    SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-syms Released
    SUSE Linux Enterprise High Performance Computing 15 SP3 kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP3 kernel-source-azure Affected
    SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-64kb In progress
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default In progress
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default-base In progress
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-docs In progress
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-obs-build In progress
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-preempt In progress
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-source In progress
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-syms In progress
    SUSE Linux Enterprise High Performance Computing 15 SP4 kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP4 kernel-source-azure Affected
    SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-default Affected
    SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default Affected
    SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-source Affected
    SUSE Linux Enterprise Live Patching 15 SP2 kernel-default Released
    SUSE Linux Enterprise Live Patching 15 SP2 kernel-livepatch-SLE15-SP2_Update_47 Released
    SUSE Linux Enterprise Live Patching 15 SP3 kernel-default In progress
    SUSE Linux Enterprise Live Patching 15 SP3 kernel-livepatch-SLE15-SP3_Update_43 In progress
    SUSE Linux Enterprise Module for Basesystem 15 SP2 kernel-default Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP2 kernel-preempt Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP2 kernel-source Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP3 kernel-source Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP4 kernel-source Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP2 kernel-docs Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP2 kernel-obs-build Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP2 kernel-preempt Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP2 kernel-source Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP2 kernel-syms Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP3 kernel-source Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP4 kernel-source Affected
    SUSE Linux Enterprise Module for Legacy 15 SP2 kernel-default Affected
    SUSE Linux Enterprise Module for Public Cloud 15 SP4 kernel-source-azure Affected
    SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-default Affected
    SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-source Affected
    SUSE Linux Enterprise Server 15 SP2 kernel-default Affected
    SUSE Linux Enterprise Server 15 SP2 kernel-docs Affected
    SUSE Linux Enterprise Server 15 SP2 kernel-obs-build Affected
    SUSE Linux Enterprise Server 15 SP2 kernel-preempt Affected
    SUSE Linux Enterprise Server 15 SP2 kernel-source Affected
    SUSE Linux Enterprise Server 15 SP2 kernel-source-azure Affected
    SUSE Linux Enterprise Server 15 SP2 kernel-syms Affected
    SUSE Linux Enterprise Server 15 SP2-LTSS kernel-default Released
    SUSE Linux Enterprise Server 15 SP2-LTSS kernel-default-base Released
    SUSE Linux Enterprise Server 15 SP2-LTSS kernel-docs Released
    SUSE Linux Enterprise Server 15 SP2-LTSS kernel-obs-build Released
    SUSE Linux Enterprise Server 15 SP2-LTSS kernel-preempt Released
    SUSE Linux Enterprise Server 15 SP2-LTSS kernel-source Released
    SUSE Linux Enterprise Server 15 SP2-LTSS kernel-syms Released
    SUSE Linux Enterprise Server 15 SP3 kernel-source Affected
    SUSE Linux Enterprise Server 15 SP3 kernel-source-azure Affected
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-64kb In progress
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-default In progress
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-default-base In progress
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-docs In progress
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-obs-build In progress
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-preempt In progress
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-source In progress
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-syms In progress
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-zfcpdump In progress
    SUSE Linux Enterprise Server 15 SP4 kernel-source Affected
    SUSE Linux Enterprise Server 15 SP4 kernel-source-azure Affected
    SUSE Linux Enterprise Server 15 SP4-LTSS kernel-default Affected
    SUSE Linux Enterprise Server 15 SP4-LTSS kernel-source Affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-default Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-default-base Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-docs Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-obs-build Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-preempt Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-source Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-source-azure Affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-syms Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-default In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-default-base In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-docs In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-obs-build In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-preempt In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-source In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-source-azure Affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-syms In progress
    SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-default Affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-source Affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-source-azure Affected
    SUSE OpenStack Cloud 8 kernel-source Affected
    SUSE OpenStack Cloud 9 kernel-default Affected
    SUSE OpenStack Cloud 9 kernel-source Affected
    Products past their end of life and not receiving proactive updates anymore.
    HPE Helion OpenStack 8 kernel-source Affected
    SUSE CaaS Platform 4.0 kernel-source Affected
    SUSE Enterprise Storage 6 kernel-source Affected
    SUSE Enterprise Storage 7 kernel-default Affected
    SUSE Enterprise Storage 7 kernel-docs Affected
    SUSE Enterprise Storage 7 kernel-obs-build Affected
    SUSE Enterprise Storage 7 kernel-preempt Affected
    SUSE Enterprise Storage 7 kernel-source Affected
    SUSE Enterprise Storage 7 kernel-source-azure Affected
    SUSE Enterprise Storage 7 kernel-syms Affected
    SUSE Linux Enterprise Desktop 12 SP2 kernel-source Affected
    SUSE Linux Enterprise Desktop 12 SP3 kernel-source Affected
    SUSE Linux Enterprise Desktop 12 SP4 kernel-source Affected
    SUSE Linux Enterprise Desktop 15 kernel-source Affected
    SUSE Linux Enterprise Desktop 15 SP1 kernel-source Affected
    SUSE Linux Enterprise Desktop 15 SP2 kernel-default Affected
    SUSE Linux Enterprise Desktop 15 SP2 kernel-docs Affected
    SUSE Linux Enterprise Desktop 15 SP2 kernel-obs-build Affected
    SUSE Linux Enterprise Desktop 15 SP2 kernel-preempt Affected
    SUSE Linux Enterprise Desktop 15 SP2 kernel-source Affected
    SUSE Linux Enterprise Desktop 15 SP2 kernel-syms Affected
    SUSE Linux Enterprise Desktop 15 SP3 kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP1 kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15-ESPOS kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15-LTSS kernel-source Affected
    SUSE Linux Enterprise Micro 5.0 kernel-default Affected
    SUSE Linux Enterprise Module for Basesystem 15 kernel-source Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP1 kernel-source Affected
    SUSE Linux Enterprise Module for Development Tools 15 kernel-source Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP1 kernel-source Affected
    SUSE Linux Enterprise Module for Public Cloud 15 SP2 kernel-source-azure Affected
    SUSE Linux Enterprise Module for Public Cloud 15 SP3 kernel-source-azure Affected
    SUSE Linux Enterprise Real Time 15 SP2 kernel-default Affected
    SUSE Linux Enterprise Real Time 15 SP2 kernel-docs Affected
    SUSE Linux Enterprise Real Time 15 SP2 kernel-obs-build Affected
    SUSE Linux Enterprise Real Time 15 SP2 kernel-preempt Affected
    SUSE Linux Enterprise Real Time 15 SP2 kernel-source Affected
    SUSE Linux Enterprise Real Time 15 SP2 kernel-syms Affected
    SUSE Linux Enterprise Real Time 15 SP3 kernel-source Affected
    SUSE Linux Enterprise Real Time 15 SP3 kernel-source-rt Affected
    SUSE Linux Enterprise Real Time 15 SP4 kernel-source Affected
    SUSE Linux Enterprise Real Time 15 SP4 kernel-source-rt Affected
    SUSE Linux Enterprise Server 11 SP4 kernel-source Affected
    SUSE Linux Enterprise Server 11 SP4 LTSS kernel-default Affected
    SUSE Linux Enterprise Server 11 SP4 LTSS kernel-source Affected
    SUSE Linux Enterprise Server 11 SP4-LTSS kernel-source Affected
    SUSE Linux Enterprise Server 12 SP2 kernel-source Affected
    SUSE Linux Enterprise Server 12 SP2-BCL kernel-source Affected
    SUSE Linux Enterprise Server 12 SP2-ESPOS kernel-source Affected
    SUSE Linux Enterprise Server 12 SP2-LTSS kernel-source Affected
    SUSE Linux Enterprise Server 12 SP3 kernel-source Affected
    SUSE Linux Enterprise Server 12 SP3-BCL kernel-source Affected
    SUSE Linux Enterprise Server 12 SP3-ESPOS kernel-source Affected
    SUSE Linux Enterprise Server 12 SP3-LTSS kernel-source Affected
    SUSE Linux Enterprise Server 12 SP4 kernel-source Affected
    SUSE Linux Enterprise Server 12 SP4-ESPOS kernel-source Affected
    SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default Affected
    SUSE Linux Enterprise Server 12 SP4-LTSS kernel-source Affected
    SUSE Linux Enterprise Server 15 kernel-source Affected
    SUSE Linux Enterprise Server 15 SP1 kernel-source Affected
    SUSE Linux Enterprise Server 15 SP1-BCL kernel-source Affected
    SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default Affected
    SUSE Linux Enterprise Server 15 SP1-LTSS kernel-source Affected
    SUSE Linux Enterprise Server 15 SP2-BCL kernel-default Affected
    SUSE Linux Enterprise Server 15 SP2-BCL kernel-docs Affected
    SUSE Linux Enterprise Server 15 SP2-BCL kernel-obs-build Affected
    SUSE Linux Enterprise Server 15 SP2-BCL kernel-preempt Affected
    SUSE Linux Enterprise Server 15 SP2-BCL kernel-source Affected
    SUSE Linux Enterprise Server 15 SP2-BCL kernel-syms Affected
    SUSE Linux Enterprise Server 15 SP3-BCL kernel-source Affected
    SUSE Linux Enterprise Server 15-LTSS kernel-default Affected
    SUSE Linux Enterprise Server 15-LTSS kernel-source Affected
    SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 kernel-source Affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-source Affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP3 kernel-source Affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-default Affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-source Affected
    SUSE Linux Enterprise Server for SAP Applications 15 kernel-source Affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP1 kernel-source Affected
    SUSE Linux Enterprise Workstation Extension 15 SP2 kernel-default Affected
    SUSE Linux Enterprise Workstation Extension 15 SP2 kernel-preempt Affected
    SUSE Manager Proxy 4.0 kernel-source Affected
    SUSE Manager Proxy 4.1 kernel-default Affected
    SUSE Manager Proxy 4.1 kernel-docs Affected
    SUSE Manager Proxy 4.1 kernel-obs-build Affected
    SUSE Manager Proxy 4.1 kernel-preempt Affected
    SUSE Manager Proxy 4.1 kernel-source Affected
    SUSE Manager Proxy 4.1 kernel-source-azure Affected
    SUSE Manager Proxy 4.1 kernel-syms Affected
    SUSE Manager Proxy 4.2 kernel-source Affected
    SUSE Manager Proxy 4.2 kernel-source-azure Affected
    SUSE Manager Retail Branch Server 4.0 kernel-source Affected
    SUSE Manager Retail Branch Server 4.1 kernel-default Affected
    SUSE Manager Retail Branch Server 4.1 kernel-docs Affected
    SUSE Manager Retail Branch Server 4.1 kernel-obs-build Affected
    SUSE Manager Retail Branch Server 4.1 kernel-preempt Affected
    SUSE Manager Retail Branch Server 4.1 kernel-source Affected
    SUSE Manager Retail Branch Server 4.1 kernel-source-azure Affected
    SUSE Manager Retail Branch Server 4.1 kernel-syms Affected
    SUSE Manager Retail Branch Server 4.2 kernel-source Affected
    SUSE Manager Retail Branch Server 4.2 kernel-source-azure Affected
    SUSE Manager Server 4.0 kernel-source Affected
    SUSE Manager Server 4.1 kernel-default Affected
    SUSE Manager Server 4.1 kernel-docs Affected
    SUSE Manager Server 4.1 kernel-obs-build Affected
    SUSE Manager Server 4.1 kernel-preempt Affected
    SUSE Manager Server 4.1 kernel-source Affected
    SUSE Manager Server 4.1 kernel-source-azure Affected
    SUSE Manager Server 4.1 kernel-syms Affected
    SUSE Manager Server 4.2 kernel-source Affected
    SUSE Manager Server 4.2 kernel-source-azure Affected
    SUSE OpenStack Cloud 7 kernel-source Affected
    SUSE OpenStack Cloud Crowbar 8 kernel-source Affected
    SUSE OpenStack Cloud Crowbar 9 kernel-default Affected
    SUSE OpenStack Cloud Crowbar 9 kernel-source Affected
    SUSE Real Time Module 15 SP3 kernel-source-rt Affected
    SUSE Real Time Module 15 SP4 kernel-source-rt Affected

    SUSE Timeline for this CVE

    CVE page created: Wed Apr 3 20:00:56 2024
    CVE page last modified: Mon Apr 29 20:25:56 2024