Upstream information

CVE-2021-47174 at MITRE

Description

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nft_set_pipapo_avx2: Add irq_fpu_usable() check, fallback to non-AVX2 version

Arturo reported this backtrace:

[709732.358791] WARNING: CPU: 3 PID: 456 at arch/x86/kernel/fpu/core.c:128 kernel_fpu_begin_mask+0xae/0xe0
[709732.358793] Modules linked in: binfmt_misc nft_nat nft_chain_nat nf_nat nft_counter nft_ct nf_tables nf_conntrack_netlink nfnetlink 8021q garp stp mrp llc vrf intel_rapl_msr intel_rapl_common skx_edac nfit libnvdimm ipmi_ssif x86_pkg_temp_thermal intel_powerclamp coretemp crc32_pclmul mgag200 ghash_clmulni_intel drm_kms_helper cec aesni_intel drm libaes crypto_simd cryptd glue_helper mei_me dell_smbios iTCO_wdt evdev intel_pmc_bxt iTCO_vendor_support dcdbas pcspkr rapl dell_wmi_descriptor wmi_bmof sg i2c_algo_bit watchdog mei acpi_ipmi ipmi_si button nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ipmi_devintf ipmi_msghandler ip_tables x_tables autofs4 ext4 crc16 mbcache jbd2 dm_mod raid10 raid456 async_raid6_recov async_memcpy async_pq async_xor async_tx xor sd_mod t10_pi crc_t10dif crct10dif_generic raid6_pq libcrc32c crc32c_generic raid1 raid0 multipath linear md_mod ahci libahci tg3 libata xhci_pci libphy xhci_hcd ptp usbcore crct10dif_pclmul crct10dif_common bnxt_en crc32c_intel scsi_mod
[709732.358941] pps_core i2c_i801 lpc_ich i2c_smbus wmi usb_common
[709732.358957] CPU: 3 PID: 456 Comm: jbd2/dm-0-8 Not tainted 5.10.0-0.bpo.5-amd64 #1 Debian 5.10.24-1~bpo10+1
[709732.358959] Hardware name: Dell Inc. PowerEdge R440/04JN2K, BIOS 2.9.3 09/23/2020
[709732.358964] RIP: 0010:kernel_fpu_begin_mask+0xae/0xe0
[709732.358969] Code: ae 54 24 04 83 e3 01 75 38 48 8b 44 24 08 65 48 33 04 25 28 00 00 00 75 33 48 83 c4 10 5b c3 65 8a 05 5e 21 5e 76 84 c0 74 92 <0f> 0b eb 8e f0 80 4f 01 40 48 81 c7 00 14 00 00 e8 dd fb ff ff eb
[709732.358972] RSP: 0018:ffffbb9700304740 EFLAGS: 00010202
[709732.358976] RAX: 0000000000000001 RBX: 0000000000000003 RCX: 0000000000000001
[709732.358979] RDX: ffffbb9700304970 RSI: ffff922fe1952e00 RDI: 0000000000000003
[709732.358981] RBP: ffffbb9700304970 R08: ffff922fc868a600 R09: ffff922fc711e462
[709732.358984] R10: 000000000000005f R11: ffff922ff0b27180 R12: ffffbb9700304960
[709732.358987] R13: ffffbb9700304b08 R14: ffff922fc664b6c8 R15: ffff922fc664b660
[709732.358990] FS: 0000000000000000(0000) GS:ffff92371fec0000(0000) knlGS:0000000000000000
[709732.358993] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[709732.358996] CR2: 0000557a6655bdd0 CR3: 000000026020a001 CR4: 00000000007706e0
[709732.358999] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[709732.359001] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[709732.359003] PKRU: 55555554
[709732.359005] Call Trace:
[709732.359009] <IRQ>
[709732.359035] nft_pipapo_avx2_lookup+0x4c/0x1cba [nf_tables]
[709732.359046] ? sched_clock+0x5/0x10
[709732.359054] ? sched_clock_cpu+0xc/0xb0
[709732.359061] ? record_times+0x16/0x80
[709732.359068] ? plist_add+0xc1/0x100
[709732.359073] ? psi_group_change+0x47/0x230
[709732.359079] ? skb_clone+0x4d/0xb0
[709732.359085] ? enqueue_task_rt+0x22b/0x310
[709732.359098] ? bnxt_start_xmit+0x1e8/0xaf0 [bnxt_en]
[709732.359102] ? packet_rcv+0x40/0x4a0
[709732.359121] nft_lookup_eval+0x59/0x160 [nf_tables]
[709732.359133] nft_do_chain+0x350/0x500 [nf_tables]
[709732.359152] ? nft_lookup_eval+0x59/0x160 [nf_tables]
[709732.359163] ? nft_do_chain+0x364/0x500 [nf_tables]
[709732.359172] ? fib4_rule_action+0x6d/0x80
[709732.359178] ? fib_rules_lookup+0x107/0x250
[709732.359184] nft_nat_do_chain+0x8a/0xf2 [nft_chain_nat]
[709732.359193] nf_nat_inet_fn+0xea/0x210 [nf_nat]
[709732.359202] nf_nat_ipv4_out+0x14/0xa0 [nf_nat]
[709732.359207] nf_hook_slow+0x44/0xc0
[709732.359214] ip_output+0xd2/0x100
[709732.359221] ? __ip_finish_output+0x210/0x210
[709732.359226] ip_forward+0x37d/0x4a0
[709732.359232] ? ip4_key_hashfn+0xb0/0xb0
[709732.359238] ip_subli
---truncated---

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v3 Scores
  SUSE
Base Score 5.5
Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality Impact None
Integrity Impact None
Availability Impact High
CVSSv3 Version 3.1

Note from the SUSE Security Team on the kernel-default package

SUSE will no longer fix all CVEs in the Linux Kernel anymore, but declare some bug classes as won't fix. Please refer to TID 21496 for more details.

SUSE Bugzilla entry: 1221990 [RESOLVED / FIXED]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
Container suse/sle-micro-rancher/5.2:latest
Image SLES15-SP3-BYOS-Azure
Image SLES15-SP3-BYOS-EC2-HVM
Image SLES15-SP3-BYOS-GCE
Image SLES15-SP3-CHOST-BYOS-Aliyun
Image SLES15-SP3-CHOST-BYOS-Azure
Image SLES15-SP3-CHOST-BYOS-EC2
Image SLES15-SP3-CHOST-BYOS-GCE
Image SLES15-SP3-CHOST-BYOS-SAP-CCloud
Image SLES15-SP3-HPC-BYOS-Azure
Image SLES15-SP3-HPC-BYOS-EC2-HVM
Image SLES15-SP3-HPC-BYOS-GCE
Image SLES15-SP3-Micro-5-1-BYOS-Azure
Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM
Image SLES15-SP3-Micro-5-1-BYOS-GCE
Image SLES15-SP3-Micro-5-2-BYOS-Azure
Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM
Image SLES15-SP3-Micro-5-2-BYOS-GCE
Image SLES15-SP3-SAPCAL-Azure
Image SLES15-SP3-SAPCAL-EC2-HVM
Image SLES15-SP3-SAPCAL-GCE
  • kernel-default >= 5.3.18-150300.59.158.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
Image SLES15-SP3-SAP-BYOS-Azure
Image SLES15-SP3-SAP-BYOS-EC2-HVM
Image SLES15-SP3-SAP-BYOS-GCE
  • cluster-md-kmp-default >= 5.3.18-150300.59.158.1
  • dlm-kmp-default >= 5.3.18-150300.59.158.1
  • gfs2-kmp-default >= 5.3.18-150300.59.158.1
  • kernel-default >= 5.3.18-150300.59.158.1
  • ocfs2-kmp-default >= 5.3.18-150300.59.158.1
SUSE Enterprise Storage 7.1
  • kernel-64kb >= 5.3.18-150300.59.158.1
  • kernel-64kb-devel >= 5.3.18-150300.59.158.1
  • kernel-default >= 5.3.18-150300.59.158.1
  • kernel-default-base >= 5.3.18-150300.59.158.1.150300.18.92.5
  • kernel-default-devel >= 5.3.18-150300.59.158.1
  • kernel-devel >= 5.3.18-150300.59.158.1
  • kernel-docs >= 5.3.18-150300.59.158.1
  • kernel-macros >= 5.3.18-150300.59.158.1
  • kernel-obs-build >= 5.3.18-150300.59.158.1
  • kernel-preempt >= 5.3.18-150300.59.158.1
  • kernel-preempt-devel >= 5.3.18-150300.59.158.1
  • kernel-source >= 5.3.18-150300.59.158.1
  • kernel-syms >= 5.3.18-150300.59.158.1
  • reiserfs-kmp-default >= 5.3.18-150300.59.158.1
 Patchnames:
SUSE-Storage-7.1-2024-1489
SUSE Linux Enterprise High Availability Extension 15 SP3
  • cluster-md-kmp-default >= 5.3.18-150300.59.158.1
  • dlm-kmp-default >= 5.3.18-150300.59.158.1
  • gfs2-kmp-default >= 5.3.18-150300.59.158.1
  • ocfs2-kmp-default >= 5.3.18-150300.59.158.1
 Patchnames:
SUSE-SLE-Product-HA-15-SP3-2024-1489
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
  • kernel-64kb >= 5.3.18-150300.59.158.1
  • kernel-64kb-devel >= 5.3.18-150300.59.158.1
  • kernel-default >= 5.3.18-150300.59.158.1
  • kernel-default-base >= 5.3.18-150300.59.158.1.150300.18.92.5
  • kernel-default-devel >= 5.3.18-150300.59.158.1
  • kernel-devel >= 5.3.18-150300.59.158.1
  • kernel-docs >= 5.3.18-150300.59.158.1
  • kernel-macros >= 5.3.18-150300.59.158.1
  • kernel-obs-build >= 5.3.18-150300.59.158.1
  • kernel-preempt >= 5.3.18-150300.59.158.1
  • kernel-preempt-devel >= 5.3.18-150300.59.158.1
  • kernel-source >= 5.3.18-150300.59.158.1
  • kernel-syms >= 5.3.18-150300.59.158.1
  • reiserfs-kmp-default >= 5.3.18-150300.59.158.1
 Patchnames:
SUSE-SLE-Product-HPC-15-SP3-LTSS-2024-1489
SUSE Linux Enterprise Live Patching 15 SP3
    		Patchnames:
    SUSE-SLE-Module-Live-Patching-15-SP3-2024-1489
    SUSE Linux Enterprise Micro 5.1
    • kernel-default >= 5.3.18-150300.59.158.1
    • kernel-default-base >= 5.3.18-150300.59.158.1.150300.18.92.5
    • kernel-rt >= 5.3.18-150300.166.1
    • kernel-source-rt >= 5.3.18-150300.166.1
    		 Patchnames:
    SUSE-SUSE-MicroOS-5.1-2024-1465
    SUSE-SUSE-MicroOS-5.1-2024-1489
    SUSE Linux Enterprise Micro 5.2
    • kernel-default >= 5.3.18-150300.59.158.1
    • kernel-default-base >= 5.3.18-150300.59.158.1.150300.18.92.5
    • kernel-rt >= 5.3.18-150300.166.1
    • kernel-source-rt >= 5.3.18-150300.166.1
    		 Patchnames:
    SUSE-SUSE-MicroOS-5.2-2024-1465
    SUSE-SUSE-MicroOS-5.2-2024-1489
    SUSE Linux Enterprise Server 15 SP3-LTSS
    • kernel-64kb >= 5.3.18-150300.59.158.1
    • kernel-64kb-devel >= 5.3.18-150300.59.158.1
    • kernel-default >= 5.3.18-150300.59.158.1
    • kernel-default-base >= 5.3.18-150300.59.158.1.150300.18.92.5
    • kernel-default-devel >= 5.3.18-150300.59.158.1
    • kernel-devel >= 5.3.18-150300.59.158.1
    • kernel-docs >= 5.3.18-150300.59.158.1
    • kernel-macros >= 5.3.18-150300.59.158.1
    • kernel-obs-build >= 5.3.18-150300.59.158.1
    • kernel-preempt >= 5.3.18-150300.59.158.1
    • kernel-preempt-devel >= 5.3.18-150300.59.158.1
    • kernel-source >= 5.3.18-150300.59.158.1
    • kernel-syms >= 5.3.18-150300.59.158.1
    • kernel-zfcpdump >= 5.3.18-150300.59.158.1
    • reiserfs-kmp-default >= 5.3.18-150300.59.158.1
    		 Patchnames:
    SUSE-SLE-Product-SLES-15-SP3-LTSS-2024-1489
    SUSE Linux Enterprise Server for SAP Applications 15 SP3
    • kernel-default >= 5.3.18-150300.59.158.1
    • kernel-default-base >= 5.3.18-150300.59.158.1.150300.18.92.5
    • kernel-default-devel >= 5.3.18-150300.59.158.1
    • kernel-devel >= 5.3.18-150300.59.158.1
    • kernel-docs >= 5.3.18-150300.59.158.1
    • kernel-macros >= 5.3.18-150300.59.158.1
    • kernel-obs-build >= 5.3.18-150300.59.158.1
    • kernel-preempt >= 5.3.18-150300.59.158.1
    • kernel-preempt-devel >= 5.3.18-150300.59.158.1
    • kernel-source >= 5.3.18-150300.59.158.1
    • kernel-syms >= 5.3.18-150300.59.158.1
    • reiserfs-kmp-default >= 5.3.18-150300.59.158.1
    		 Patchnames:
    SUSE-SLE-Product-SLES_SAP-15-SP3-2024-1489

    First public cloud image revisions this CVE is fixed in:

    Status of this issue by product and package

    Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.

    Product(s) Source package State
    Products under general support and receiving all security fixes.
    SUSE Linux Enterprise Desktop 15 SP5 kernel-default Already fixed
    SUSE Linux Enterprise Desktop 15 SP5 kernel-source Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP5 kernel-default Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP5 kernel-source Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP5 kernel-source-azure Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-source Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-source Already fixed
    SUSE Linux Enterprise Micro 5.1 kernel-default Released
    SUSE Linux Enterprise Micro 5.1 kernel-default-base Released
    SUSE Linux Enterprise Micro 5.1 kernel-rt Released
    SUSE Linux Enterprise Micro 5.1 kernel-source-rt Released
    SUSE Linux Enterprise Micro 5.2 kernel-default Released
    SUSE Linux Enterprise Micro 5.2 kernel-default-base Released
    SUSE Linux Enterprise Micro 5.2 kernel-rt Released
    SUSE Linux Enterprise Micro 5.2 kernel-source-rt Released
    SUSE Linux Enterprise Micro 5.3 kernel-default Already fixed
    SUSE Linux Enterprise Micro 5.3 kernel-rt Already fixed
    SUSE Linux Enterprise Micro 5.3 kernel-source-rt Already fixed
    SUSE Linux Enterprise Micro 5.4 kernel-default Already fixed
    SUSE Linux Enterprise Micro 5.4 kernel-rt Already fixed
    SUSE Linux Enterprise Micro 5.4 kernel-source-rt Already fixed
    SUSE Linux Enterprise Micro 5.5 kernel-source-rt Already fixed
    SUSE Linux Enterprise Micro for Rancher 5.2 kernel-default Released
    SUSE Linux Enterprise Micro for Rancher 5.2 kernel-rt Released
    SUSE Linux Enterprise Micro for Rancher 5.2 kernel-source-rt Released
    SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-default Already fixed
    SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-source Already fixed
    SUSE Linux Enterprise Module for Development Tools 15 SP5 kernel-default Already fixed
    SUSE Linux Enterprise Module for Development Tools 15 SP5 kernel-source Already fixed
    SUSE Linux Enterprise Module for Public Cloud 15 SP5 kernel-source-azure Already fixed
    SUSE Linux Enterprise Real Time 15 SP5 kernel-source-rt Already fixed
    SUSE Linux Enterprise Server 15 SP5 kernel-default Already fixed
    SUSE Linux Enterprise Server 15 SP5 kernel-source Already fixed
    SUSE Linux Enterprise Server 15 SP5 kernel-source-azure Already fixed
    SUSE Linux Enterprise Server 15 SP5-LTSS kernel-source Already fixed
    SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-default Already fixed
    SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-source Already fixed
    SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-source-azure Already fixed
    SUSE Manager Proxy 4.3 kernel-default Already fixed
    SUSE Manager Proxy 4.3 kernel-source Already fixed
    SUSE Manager Proxy 4.3 kernel-source-azure Already fixed
    SUSE Manager Retail Branch Server 4.3 kernel-default Already fixed
    SUSE Manager Retail Branch Server 4.3 kernel-source Already fixed
    SUSE Manager Retail Branch Server 4.3 kernel-source-azure Already fixed
    SUSE Manager Server 4.3 kernel-default Already fixed
    SUSE Manager Server 4.3 kernel-source Already fixed
    SUSE Manager Server 4.3 kernel-source-azure Already fixed
    SUSE Real Time Module 15 SP5 kernel-source-rt Already fixed
    openSUSE Leap 15.5 kernel-source Already fixed
    openSUSE Leap 15.5 kernel-source-azure Already fixed
    openSUSE Leap 15.5 kernel-source-rt Already fixed
    Products under Long Term Service Pack support and receiving important and critical security fixes.
    SLES15-SP3-CHOST-BYOS-Aliyun kernel-default Released
    SLES15-SP3-CHOST-BYOS-Azure kernel-default Released
    SLES15-SP3-CHOST-BYOS-EC2 kernel-default Released
    SLES15-SP3-CHOST-BYOS-GCE kernel-default Released
    SLES15-SP3-CHOST-BYOS-SAP-CCloud kernel-default Released
    SUSE Linux Enterprise Desktop 15 SP4 kernel-source Already fixed
    SUSE Linux Enterprise High Availability Extension 15 SP3 kernel-default Released
    SUSE Linux Enterprise High Performance Computing 12 SP5 kernel-default Not affected
    SUSE Linux Enterprise High Performance Computing 12 SP5 kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 12 SP5 kernel-source-azure Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP2 kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP2 kernel-source-azure Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-default Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP3 kernel-64kb Affected
    SUSE Linux Enterprise High Performance Computing 15 SP3 kernel-default Affected
    SUSE Linux Enterprise High Performance Computing 15 SP3 kernel-docs Affected
    SUSE Linux Enterprise High Performance Computing 15 SP3 kernel-obs-build Affected
    SUSE Linux Enterprise High Performance Computing 15 SP3 kernel-preempt Affected
    SUSE Linux Enterprise High Performance Computing 15 SP3 kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP3 kernel-source-azure Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP3 kernel-syms Affected
    SUSE Linux Enterprise High Performance Computing 15 SP3 kernel-zfcpdump Affected
    SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kernel-64kb Affected
    SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kernel-default Affected
    SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kernel-docs Affected
    SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kernel-obs-build Affected
    SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kernel-preempt Affected
    SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kernel-source Affected
    SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kernel-syms Affected
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-64kb Released
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default Released
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default-base Released
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-docs Released
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-obs-build Released
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-preempt Released
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-source Released
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-syms Released
    SUSE Linux Enterprise High Performance Computing 15 SP4 kernel-source Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP4 kernel-source-azure Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-default Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-source Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default Already fixed
    SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-source Already fixed
    SUSE Linux Enterprise Live Patching 15 SP3 kernel-default Released
    SUSE Linux Enterprise Live Patching 15 SP3 kernel-livepatch-SLE15-SP3_Update_43 Released
    SUSE Linux Enterprise Module for Basesystem 15 SP2 kernel-source Not affected
    SUSE Linux Enterprise Module for Basesystem 15 SP3 kernel-64kb Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP3 kernel-default Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP3 kernel-preempt Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP3 kernel-source Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP3 kernel-zfcpdump Affected
    SUSE Linux Enterprise Module for Basesystem 15 SP4 kernel-source Already fixed
    SUSE Linux Enterprise Module for Development Tools 15 SP2 kernel-source Not affected
    SUSE Linux Enterprise Module for Development Tools 15 SP3 kernel-docs Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP3 kernel-obs-build Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP3 kernel-preempt Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP3 kernel-source Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP3 kernel-syms Affected
    SUSE Linux Enterprise Module for Development Tools 15 SP4 kernel-source Already fixed
    SUSE Linux Enterprise Module for Legacy 15 SP3 kernel-default Affected
    SUSE Linux Enterprise Module for Public Cloud 15 SP4 kernel-source-azure Already fixed
    SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-default Not affected
    SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP5 kernel-default Not affected
    SUSE Linux Enterprise Server 12 SP5 kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP5 kernel-source-azure Not affected
    SUSE Linux Enterprise Server 12 SP5-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP5-LTSS kernel-source-azure Not affected
    SUSE Linux Enterprise Server 15 SP2 kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP2 kernel-source-azure Not affected
    SUSE Linux Enterprise Server 15 SP2-LTSS kernel-default Not affected
    SUSE Linux Enterprise Server 15 SP2-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP3 kernel-64kb Affected
    SUSE Linux Enterprise Server 15 SP3 kernel-default Affected
    SUSE Linux Enterprise Server 15 SP3 kernel-docs Affected
    SUSE Linux Enterprise Server 15 SP3 kernel-obs-build Affected
    SUSE Linux Enterprise Server 15 SP3 kernel-preempt Affected
    SUSE Linux Enterprise Server 15 SP3 kernel-source Affected
    SUSE Linux Enterprise Server 15 SP3 kernel-source-azure Already fixed
    SUSE Linux Enterprise Server 15 SP3 kernel-syms Affected
    SUSE Linux Enterprise Server 15 SP3 kernel-zfcpdump Affected
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-64kb Released
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-default Released
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-default-base Released
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-docs Released
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-obs-build Released
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-preempt Released
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-source Released
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-syms Released
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-zfcpdump Released
    SUSE Linux Enterprise Server 15 SP4 kernel-source Already fixed
    SUSE Linux Enterprise Server 15 SP4 kernel-source-azure Already fixed
    SUSE Linux Enterprise Server 15 SP4-LTSS kernel-default Already fixed
    SUSE Linux Enterprise Server 15 SP4-LTSS kernel-source Already fixed
    SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 kernel-source Not affected
    SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 kernel-source-azure Not affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-default Not affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-source-azure Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-default Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-source-azure Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-64kb Affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-default Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-default-base Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-docs Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-obs-build Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-preempt Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-source Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-source-azure Already fixed
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-syms Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-zfcpdump Affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-default Already fixed
    SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-source Already fixed
    SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-source-azure Already fixed
    Products past their end of life and not receiving proactive updates anymore.
    HPE Helion OpenStack 8 kernel-source Not affected
    SUSE CaaS Platform 4.0 kernel-source Not affected
    SUSE CaaS Platform Toolchain 3 kernel-source Not affected
    SUSE Enterprise Storage 6 kernel-source Not affected
    SUSE Enterprise Storage 7 kernel-source Not affected
    SUSE Enterprise Storage 7 kernel-source-azure Not affected
    SUSE Enterprise Storage 7.1 kernel-64kb Released
    SUSE Enterprise Storage 7.1 kernel-default Released
    SUSE Enterprise Storage 7.1 kernel-default-base Released
    SUSE Enterprise Storage 7.1 kernel-docs Released
    SUSE Enterprise Storage 7.1 kernel-obs-build Released
    SUSE Enterprise Storage 7.1 kernel-preempt Released
    SUSE Enterprise Storage 7.1 kernel-source Released
    SUSE Enterprise Storage 7.1 kernel-source-azure Already fixed
    SUSE Enterprise Storage 7.1 kernel-syms Released
    SUSE Enterprise Storage 7.1 kernel-zfcpdump Affected
    SUSE Linux Enterprise Desktop 11 SP4 kernel-source Not affected
    SUSE Linux Enterprise Desktop 12 SP2 kernel-source Not affected
    SUSE Linux Enterprise Desktop 12 SP3 kernel-source Not affected
    SUSE Linux Enterprise Desktop 12 SP4 kernel-source Not affected
    SUSE Linux Enterprise Desktop 15 kernel-source Not affected
    SUSE Linux Enterprise Desktop 15 SP1 kernel-source Not affected
    SUSE Linux Enterprise Desktop 15 SP2 kernel-source Not affected
    SUSE Linux Enterprise Desktop 15 SP3 kernel-64kb Affected
    SUSE Linux Enterprise Desktop 15 SP3 kernel-default Affected
    SUSE Linux Enterprise Desktop 15 SP3 kernel-docs Affected
    SUSE Linux Enterprise Desktop 15 SP3 kernel-obs-build Affected
    SUSE Linux Enterprise Desktop 15 SP3 kernel-preempt Affected
    SUSE Linux Enterprise Desktop 15 SP3 kernel-source Affected
    SUSE Linux Enterprise Desktop 15 SP3 kernel-syms Affected
    SUSE Linux Enterprise Desktop 15 SP3 kernel-zfcpdump Affected
    SUSE Linux Enterprise High Performance Computing 15 kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP1 kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15-ESPOS kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15-LTSS kernel-source Not affected
    SUSE Linux Enterprise Micro 5.0 kernel-default Not affected
    SUSE Linux Enterprise Module for Basesystem 15 kernel-source Not affected
    SUSE Linux Enterprise Module for Basesystem 15 SP1 kernel-source Not affected
    SUSE Linux Enterprise Module for Development Tools 15 kernel-source Not affected
    SUSE Linux Enterprise Module for Development Tools 15 SP1 kernel-source Not affected
    SUSE Linux Enterprise Module for Public Cloud 15 SP2 kernel-source-azure Not affected
    SUSE Linux Enterprise Module for Public Cloud 15 SP3 kernel-source-azure Already fixed
    SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT kernel-source Not affected
    SUSE Linux Enterprise Real Time 12 SP5 kernel-source-rt Not affected
    SUSE Linux Enterprise Real Time 15 SP2 kernel-source Not affected
    SUSE Linux Enterprise Real Time 15 SP3 kernel-default Affected
    SUSE Linux Enterprise Real Time 15 SP3 kernel-docs Affected
    SUSE Linux Enterprise Real Time 15 SP3 kernel-obs-build Affected
    SUSE Linux Enterprise Real Time 15 SP3 kernel-preempt Affected
    SUSE Linux Enterprise Real Time 15 SP3 kernel-rt Affected
    SUSE Linux Enterprise Real Time 15 SP3 kernel-rt_debug Affected
    SUSE Linux Enterprise Real Time 15 SP3 kernel-source Affected
    SUSE Linux Enterprise Real Time 15 SP3 kernel-source-rt Affected
    SUSE Linux Enterprise Real Time 15 SP3 kernel-syms Affected
    SUSE Linux Enterprise Real Time 15 SP3 kernel-syms-rt Affected
    SUSE Linux Enterprise Real Time 15 SP4 kernel-source Already fixed
    SUSE Linux Enterprise Real Time 15 SP4 kernel-source-rt Already fixed
    SUSE Linux Enterprise Server 11 SP4 kernel-source Not affected
    SUSE Linux Enterprise Server 11 SP4 LTSS kernel-default Not affected
    SUSE Linux Enterprise Server 11 SP4 LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 11 SP4-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP2 kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP2-BCL kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP2-ESPOS kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default Not affected
    SUSE Linux Enterprise Server 12 SP2-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP3 kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP3-BCL kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP3-ESPOS kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP3-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP4 kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP4-ESPOS kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default Not affected
    SUSE Linux Enterprise Server 12 SP4-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 15 kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP1 kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP1-BCL kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default Not affected
    SUSE Linux Enterprise Server 15 SP1-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP2-BCL kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP3-BCL kernel-default Affected
    SUSE Linux Enterprise Server 15 SP3-BCL kernel-docs Affected
    SUSE Linux Enterprise Server 15 SP3-BCL kernel-obs-build Affected
    SUSE Linux Enterprise Server 15 SP3-BCL kernel-preempt Affected
    SUSE Linux Enterprise Server 15 SP3-BCL kernel-source Affected
    SUSE Linux Enterprise Server 15 SP3-BCL kernel-syms Affected
    SUSE Linux Enterprise Server 15-LTSS kernel-default Not affected
    SUSE Linux Enterprise Server 15-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-default Not affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP2 kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP3 kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-default Not affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP1 kernel-source Not affected
    SUSE Linux Enterprise Workstation Extension 15 SP3 kernel-default Affected
    SUSE Linux Enterprise Workstation Extension 15 SP3 kernel-preempt Affected
    SUSE Manager Proxy 4.0 kernel-source Not affected
    SUSE Manager Proxy 4.1 kernel-source Not affected
    SUSE Manager Proxy 4.1 kernel-source-azure Not affected
    SUSE Manager Proxy 4.2 kernel-64kb Affected
    SUSE Manager Proxy 4.2 kernel-default Affected
    SUSE Manager Proxy 4.2 kernel-docs Affected
    SUSE Manager Proxy 4.2 kernel-obs-build Affected
    SUSE Manager Proxy 4.2 kernel-preempt Affected
    SUSE Manager Proxy 4.2 kernel-source Affected
    SUSE Manager Proxy 4.2 kernel-source-azure Already fixed
    SUSE Manager Proxy 4.2 kernel-syms Affected
    SUSE Manager Proxy 4.2 kernel-zfcpdump Affected
    SUSE Manager Retail Branch Server 4.0 kernel-source Not affected
    SUSE Manager Retail Branch Server 4.1 kernel-source Not affected
    SUSE Manager Retail Branch Server 4.1 kernel-source-azure Not affected
    SUSE Manager Retail Branch Server 4.2 kernel-64kb Affected
    SUSE Manager Retail Branch Server 4.2 kernel-default Affected
    SUSE Manager Retail Branch Server 4.2 kernel-docs Affected
    SUSE Manager Retail Branch Server 4.2 kernel-obs-build Affected
    SUSE Manager Retail Branch Server 4.2 kernel-preempt Affected
    SUSE Manager Retail Branch Server 4.2 kernel-source Affected
    SUSE Manager Retail Branch Server 4.2 kernel-source-azure Already fixed
    SUSE Manager Retail Branch Server 4.2 kernel-syms Affected
    SUSE Manager Retail Branch Server 4.2 kernel-zfcpdump Affected
    SUSE Manager Server 4.0 kernel-source Not affected
    SUSE Manager Server 4.1 kernel-source Not affected
    SUSE Manager Server 4.1 kernel-source-azure Not affected
    SUSE Manager Server 4.2 kernel-64kb Affected
    SUSE Manager Server 4.2 kernel-default Affected
    SUSE Manager Server 4.2 kernel-docs Affected
    SUSE Manager Server 4.2 kernel-obs-build Affected
    SUSE Manager Server 4.2 kernel-preempt Affected
    SUSE Manager Server 4.2 kernel-source Affected
    SUSE Manager Server 4.2 kernel-source-azure Already fixed
    SUSE Manager Server 4.2 kernel-syms Affected
    SUSE Manager Server 4.2 kernel-zfcpdump Affected
    SUSE OpenStack Cloud 7 kernel-source Not affected
    SUSE OpenStack Cloud 8 kernel-source Not affected
    SUSE OpenStack Cloud 9 kernel-default Not affected
    SUSE OpenStack Cloud 9 kernel-source Not affected
    SUSE OpenStack Cloud Crowbar 8 kernel-source Not affected
    SUSE OpenStack Cloud Crowbar 9 kernel-default Not affected
    SUSE OpenStack Cloud Crowbar 9 kernel-source Not affected
    SUSE Real Time Module 15 SP3 kernel-rt Affected
    SUSE Real Time Module 15 SP3 kernel-rt_debug Affected
    SUSE Real Time Module 15 SP3 kernel-source-rt Affected
    SUSE Real Time Module 15 SP3 kernel-syms-rt Affected
    SUSE Real Time Module 15 SP4 kernel-source-rt Already fixed
    openSUSE Leap 15.3 dtb-aarch64 Released
    openSUSE Leap 15.3 kernel-64kb Released
    openSUSE Leap 15.3 kernel-debug Released
    openSUSE Leap 15.3 kernel-default Released
    openSUSE Leap 15.3 kernel-docs Released
    openSUSE Leap 15.3 kernel-kvmsmall Released
    openSUSE Leap 15.3 kernel-lpae Released
    openSUSE Leap 15.3 kernel-obs-build Released
    openSUSE Leap 15.3 kernel-obs-qa Released
    openSUSE Leap 15.3 kernel-preempt Released
    openSUSE Leap 15.3 kernel-rt Affected
    openSUSE Leap 15.3 kernel-rt_debug Affected
    openSUSE Leap 15.3 kernel-source Released
    openSUSE Leap 15.3 kernel-source-azure Already fixed
    openSUSE Leap 15.3 kernel-source-rt Affected
    openSUSE Leap 15.3 kernel-syms Released
    openSUSE Leap 15.3 kernel-syms-rt Affected
    openSUSE Leap 15.3 kernel-zfcpdump Released
    openSUSE Leap 15.4 kernel-source Already fixed
    openSUSE Leap 15.4 kernel-source-azure Already fixed
    openSUSE Leap 15.4 kernel-source-rt Already fixed
    openSUSE Leap Micro 5.2 kernel-default Affected
    openSUSE Leap Micro 5.2 kernel-rt Affected
    Container Status
    suse/sle-micro-rancher/5.2 kernel-defaultReleased
    suse/sles/15.3/libguestfs-tools:0.45.0 kernel-kvmsmallIn progress

    SUSE Timeline for this CVE

    CVE page created: Mon Mar 25 13:01:22 2024
    CVE page last modified: Fri Dec 20 23:45:56 2024