Upstream information
Description
In the Linux kernel, the following vulnerability has been resolved:tpm: fix reference counting for struct tpm_chip
The following sequence of operations results in a refcount warning:
1. Open device /dev/tpmrm.
2. Remove module tpm_tis_spi.
3. Write a TPM command to the file descriptor opened at step 1.
------------[ cut here ]------------
WARNING: CPU: 3 PID: 1161 at lib/refcount.c:25 kobject_get+0xa0/0xa4
refcount_t: addition on 0; use-after-free.
Modules linked in: tpm_tis_spi tpm_tis_core tpm mdio_bcm_unimac brcmfmac
sha256_generic libsha256 sha256_arm hci_uart btbcm bluetooth cfg80211 vc4
brcmutil ecdh_generic ecc snd_soc_core crc32_arm_ce libaes
raspberrypi_hwmon ac97_bus snd_pcm_dmaengine bcm2711_thermal snd_pcm
snd_timer genet snd phy_generic soundcore [last unloaded: spi_bcm2835]
CPU: 3 PID: 1161 Comm: hold_open Not tainted 5.10.0ls-main-dirty #2
Hardware name: BCM2711
[<c0410c3c>] (unwind_backtrace) from [<c040b580>] (show_stack+0x10/0x14)
[<c040b580>] (show_stack) from [<c1092174>] (dump_stack+0xc4/0xd8)
[<c1092174>] (dump_stack) from [<c0445a30>] (__warn+0x104/0x108)
[<c0445a30>] (__warn) from [<c0445aa8>] (warn_slowpath_fmt+0x74/0xb8)
[<c0445aa8>] (warn_slowpath_fmt) from [<c08435d0>] (kobject_get+0xa0/0xa4)
[<c08435d0>] (kobject_get) from [<bf0a715c>] (tpm_try_get_ops+0x14/0x54 [tpm])
[<bf0a715c>] (tpm_try_get_ops [tpm]) from [<bf0a7d6c>] (tpm_common_write+0x38/0x60 [tpm])
[<bf0a7d6c>] (tpm_common_write [tpm]) from [<c05a7ac0>] (vfs_write+0xc4/0x3c0)
[<c05a7ac0>] (vfs_write) from [<c05a7ee4>] (ksys_write+0x58/0xcc)
[<c05a7ee4>] (ksys_write) from [<c04001a0>] (ret_fast_syscall+0x0/0x4c)
Exception stack(0xc226bfa8 to 0xc226bff0)
bfa0: 00000000 000105b4 00000003 beafe664 00000014 00000000
bfc0: 00000000 000105b4 000103f8 00000004 00000000 00000000 b6f9c000 beafe684
bfe0: 0000006c beafe648 0001056c b6eb6944
---[ end trace d4b8409def9b8b1f ]---
The reason for this warning is the attempt to get the chip->dev reference
in tpm_common_write() although the reference counter is already zero.
Since commit 8979b02aaf1d ("tpm: Fix reference count to main device") the
extra reference used to prevent a premature zero counter is never taken,
because the required TPM_CHIP_FLAG_TPM2 flag is never set.
Fix this by moving the TPM 2 character device handling from
tpm_chip_alloc() to tpm_add_char_device() which is called at a later point
in time when the flag has been set in case of TPM2.
Commit fdc915f7f719 ("tpm: expose spaces via a device link /dev/tpmrm<n>")
already introduced function tpm_devs_release() to release the extra
reference but did not implement the required put on chip->devs that results
in the call of this function.
Fix this by putting chip->devs in tpm_chip_unregister().
Finally move the new implementation for the TPM 2 handling into a new
function to avoid multiple checks for the TPM_CHIP_FLAG_TPM2 flag in the
good case and error cases.
SUSE information
Overall state of this security issue: Resolved
This issue is currently rated as having moderate severity.
CNA (CISA-ADP) | SUSE | |
---|---|---|
Base Score | 7.8 | 5.5 |
Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Attack Vector | Local | Local |
Attack Complexity | Low | Low |
Privileges Required | Low | Low |
User Interaction | None | None |
Scope | Unchanged | Unchanged |
Confidentiality Impact | High | None |
Integrity Impact | High | None |
Availability Impact | High | High |
CVSSv3 Version | 3.1 | 3.1 |
Note from the SUSE Security Team on the kernel-default package
SUSE will no longer fix all CVEs in the Linux Kernel anymore, but declare some bug classes as won't fix. Please refer to TID 21496 for more details.SUSE Bugzilla entry: 1238276 [NEW]
SUSE Security Advisories:
- SUSE-SU-2025:1027-1, published 2025-03-26T12:12:07Z
- SUSE-SU-2025:1176-1, published
- SUSE-SU-2025:1183-1, published 2025-04-09T13:57:54Z
- SUSE-SU-2025:1194-1, published 2025-04-10T13:46:40Z
List of released packages
Product(s) | Fixed package version(s) | References |
---|---|---|
Container suse/sle-micro-rancher/5.3:latest Container suse/sle-micro-rancher/5.4:latest Image SLES15-SP4-BYOS Image SLES15-SP4-BYOS-EC2 Image SLES15-SP4-HPC-BYOS Image SLES15-SP4-HPC-BYOS-EC2 Image SLES15-SP4-HPC-BYOS-GCE Image SLES15-SP4-HPC-EC2 Image SLES15-SP4-HPC-GCE Image SLES15-SP4-Hardened-BYOS Image SLES15-SP4-Hardened-BYOS-EC2 Image SLES15-SP4-SAP Image SLES15-SP4-SAP-EC2 Image SLES15-SP4-SAP-GCE Image SLES15-SP4-SAPCAL Image SLES15-SP4-SAPCAL-EC2 Image SLES15-SP4-SAPCAL-GCE |
| |
Container suse/sle-micro/rt-5.5:2.0.4-4.5.352 |
| |
Image SLES15-SP4-SAP-Hardened Image SLES15-SP4-SAP-Hardened-BYOS Image SLES15-SP4-SAP-Hardened-BYOS-GCE Image SLES15-SP4-SAP-Hardened-GCE |
| |
SUSE Linux Enterprise High Availability Extension 15 SP4 |
| Patchnames: SUSE-SLE-Product-HA-15-SP4-2025-1027 |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS |
| Patchnames: SUSE-SLE-Product-HPC-15-SP4-ESPOS-2025-1027 |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS |
| Patchnames: SUSE-SLE-Product-HPC-15-SP4-LTSS-2025-1027 |
SUSE Linux Enterprise Live Patching 15 SP4 | Patchnames: SUSE-SLE-Module-Live-Patching-15-SP4-2025-1027 | |
SUSE Linux Enterprise Micro 5.1 |
| Patchnames: SUSE-SUSE-MicroOS-5.1-2025-1194 |
SUSE Linux Enterprise Micro 5.2 |
| Patchnames: SUSE-SUSE-MicroOS-5.2-2025-1194 |
SUSE Linux Enterprise Micro 5.3 |
| Patchnames: SUSE-SLE-Micro-5.3-2025-1027 SUSE-SLE-Micro-5.3-2025-1183 |
SUSE Linux Enterprise Micro 5.4 |
| Patchnames: SUSE-SLE-Micro-5.4-2025-1027 SUSE-SLE-Micro-5.4-2025-1183 |
SUSE Linux Enterprise Micro 5.5 |
| Patchnames: SUSE-SLE-Micro-5.5-2025-1176 |
SUSE Linux Enterprise Server 15 SP4-LTSS |
| Patchnames: SUSE-SLE-Product-SLES-15-SP4-LTSS-2025-1027 |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 |
| Patchnames: SUSE-SLE-Product-SLES_SAP-15-SP4-2025-1027 |
SUSE Manager Proxy 4.3 |
| Patchnames: SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2025-1027 |
SUSE Manager Retail Branch Server 4.3 |
| Patchnames: SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.3-2025-1027 |
SUSE Manager Server 4.3 |
| Patchnames: SUSE-SLE-Product-SUSE-Manager-Server-4.3-2025-1027 |
List of packages in QA
Product(s) | Package(s) |
---|---|
SUSE Enterprise Storage 7.1 |
|
SUSE Linux Enterprise High Availability Extension 15 SP3 |
|
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS |
|
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS |
|
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS |
|
SUSE Linux Enterprise Live Patching 12 SP5 |
|
SUSE Linux Enterprise Live Patching 15 SP3 |
|
SUSE Linux Enterprise Live Patching 15 SP5 |
|
SUSE Linux Enterprise Micro 5.1 |
|
SUSE Linux Enterprise Micro 5.2 |
|
SUSE Linux Enterprise Micro 5.5 |
|
SUSE Linux Enterprise Server 12 SP5-LTSS |
|
SUSE Linux Enterprise Server 15 SP3-LTSS |
|
SUSE Linux Enterprise Server 15 SP5-LTSS |
|
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 |
|
SUSE Linux Enterprise Server for SAP Applications 15 SP3 |
|
SUSE Linux Enterprise Server for SAP Applications 15 SP5 |
|
Status of this issue by product and package
Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.
Product(s) | Source package | State |
---|---|---|
Products under general support and receiving all security fixes. | ||
SUSE Linux Enterprise Desktop 15 SP6 | kernel-default | Not affected |
SUSE Linux Enterprise Desktop 15 SP6 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-default | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-source-azure | Not affected |
SUSE Linux Enterprise Live Patching 15 SP6 | kernel-default | Not affected |
SUSE Linux Enterprise Live Patching 15 SP6 | kernel-source | Not affected |
SUSE Linux Enterprise Micro 5.1 | kernel-default | In progress |
SUSE Linux Enterprise Micro 5.1 | kernel-default-base | In progress |
SUSE Linux Enterprise Micro 5.1 | kernel-rt | Released |
SUSE Linux Enterprise Micro 5.1 | kernel-source | Not affected |
SUSE Linux Enterprise Micro 5.1 | kernel-source-rt | Released |
SUSE Linux Enterprise Micro 5.2 | kernel-default | In progress |
SUSE Linux Enterprise Micro 5.2 | kernel-default-base | In progress |
SUSE Linux Enterprise Micro 5.2 | kernel-rt | Released |
SUSE Linux Enterprise Micro 5.2 | kernel-source | Not affected |
SUSE Linux Enterprise Micro 5.2 | kernel-source-rt | Released |
SUSE Linux Enterprise Micro 5.3 | kernel-default | Released |
SUSE Linux Enterprise Micro 5.3 | kernel-default-base | Released |
SUSE Linux Enterprise Micro 5.3 | kernel-rt | Released |
SUSE Linux Enterprise Micro 5.3 | kernel-source | Not affected |
SUSE Linux Enterprise Micro 5.3 | kernel-source-rt | Released |
SUSE Linux Enterprise Micro 5.4 | kernel-default | Released |
SUSE Linux Enterprise Micro 5.4 | kernel-default-base | Released |
SUSE Linux Enterprise Micro 5.4 | kernel-rt | Released |
SUSE Linux Enterprise Micro 5.4 | kernel-source | Not affected |
SUSE Linux Enterprise Micro 5.4 | kernel-source-rt | Released |
SUSE Linux Enterprise Micro 5.5 | kernel-default | In progress |
SUSE Linux Enterprise Micro 5.5 | kernel-default-base | In progress |
SUSE Linux Enterprise Micro 5.5 | kernel-rt | Released |
SUSE Linux Enterprise Micro 5.5 | kernel-source | In progress |
SUSE Linux Enterprise Micro 5.5 | kernel-source-rt | Released |
SUSE Linux Enterprise Micro for Rancher 5.2 | kernel-rt | Released |
SUSE Linux Enterprise Micro for Rancher 5.2 | kernel-source-rt | Released |
SUSE Linux Enterprise Micro for Rancher 5.3 | kernel-rt | Released |
SUSE Linux Enterprise Micro for Rancher 5.3 | kernel-source-rt | Released |
SUSE Linux Enterprise Micro for Rancher 5.4 | kernel-rt | Released |
SUSE Linux Enterprise Micro for Rancher 5.4 | kernel-source-rt | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP6 | kernel-default | Not affected |
SUSE Linux Enterprise Module for Basesystem 15 SP6 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Development Tools 15 SP6 | kernel-default | Not affected |
SUSE Linux Enterprise Module for Development Tools 15 SP6 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Public Cloud 15 SP6 | kernel-source-azure | Not affected |
SUSE Linux Enterprise Real Time 15 SP6 | kernel-source-rt | Not affected |
SUSE Linux Enterprise Server 15 SP6 | kernel-default | Not affected |
SUSE Linux Enterprise Server 15 SP6 | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP6 | kernel-source-azure | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-default | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-source-azure | Not affected |
SUSE Linux Enterprise Workstation Extension 15 SP6 | kernel-default | Not affected |
SUSE Linux Enterprise Workstation Extension 15 SP6 | kernel-source | Not affected |
SUSE Linux Micro 6.0 | kernel-default | Not affected |
SUSE Linux Micro 6.0 | kernel-source | Not affected |
SUSE Linux Micro 6.0 | kernel-source-rt | Not affected |
SUSE Linux Micro 6.1 | kernel-default | Not affected |
SUSE Linux Micro 6.1 | kernel-source | Not affected |
SUSE Linux Micro 6.1 | kernel-source-rt | Not affected |
SUSE Manager Proxy 4.3 | kernel-default | Released |
SUSE Manager Proxy 4.3 | kernel-default-base | Released |
SUSE Manager Proxy 4.3 | kernel-source | Released |
SUSE Manager Proxy 4.3 | kernel-syms | Released |
SUSE Manager Retail Branch Server 4.3 | kernel-default | Released |
SUSE Manager Retail Branch Server 4.3 | kernel-default-base | Released |
SUSE Manager Retail Branch Server 4.3 | kernel-source | Released |
SUSE Manager Server 4.3 | kernel-default | Released |
SUSE Manager Server 4.3 | kernel-default-base | Released |
SUSE Manager Server 4.3 | kernel-source | Released |
SUSE Manager Server 4.3 | kernel-syms | Released |
SUSE Manager Server 4.3 | kernel-zfcpdump | Released |
SUSE Real Time Module 15 SP6 | kernel-source-rt | Not affected |
openSUSE Leap 15.6 | kernel-default | Not affected |
openSUSE Leap 15.6 | kernel-source | Not affected |
openSUSE Leap 15.6 | kernel-source-azure | Not affected |
openSUSE Leap 15.6 | kernel-source-rt | Not affected |
Products under Long Term Service Pack support and receiving important and critical security fixes. | ||
SLES15-SP2-CHOST-BYOS-Aliyun | kernel-default | In progress |
SLES15-SP2-CHOST-BYOS-Azure | kernel-default | In progress |
SLES15-SP2-CHOST-BYOS-EC2 | kernel-default | In progress |
SLES15-SP2-CHOST-BYOS-GCE | kernel-default | In progress |
SUSE Linux Enterprise High Availability Extension 12 SP5 | kernel-default | Not affected |
SUSE Linux Enterprise High Availability Extension 12 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise High Availability Extension 15 SP3 | kernel-default | In progress |
SUSE Linux Enterprise High Availability Extension 15 SP4 | kernel-default | Released |
SUSE Linux Enterprise High Performance Computing 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-64kb | In progress |
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-default | In progress |
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-default-base | In progress |
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-docs | In progress |
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-obs-build | In progress |
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-preempt | In progress |
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-source | In progress |
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-syms | In progress |
SUSE Linux Enterprise High Performance Computing 15 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-64kb | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-default | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-default-base | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-docs | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-obs-build | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-source | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-syms | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-source-azure | Unsupported |
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | kernel-64kb | In progress |
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | kernel-default | In progress |
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | kernel-default-base | In progress |
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | kernel-docs | In progress |
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | kernel-obs-build | In progress |
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | kernel-source | In progress |
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | kernel-syms | In progress |
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | kernel-64kb | In progress |
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | kernel-default | In progress |
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | kernel-default-base | In progress |
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | kernel-docs | In progress |
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | kernel-obs-build | In progress |
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | kernel-source | In progress |
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | kernel-syms | In progress |
SUSE Linux Enterprise Live Patching 12 SP5 | kernel-default | In progress |
SUSE Linux Enterprise Live Patching 12 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_67 | In progress |
SUSE Linux Enterprise Live Patching 15 SP3 | kernel-default | In progress |
SUSE Linux Enterprise Live Patching 15 SP3 | kernel-livepatch-SLE15-SP3_Update_56 | In progress |
SUSE Linux Enterprise Live Patching 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Live Patching 15 SP4 | kernel-default | Released |
SUSE Linux Enterprise Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_38 | Released |
SUSE Linux Enterprise Live Patching 15 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Live Patching 15 SP5 | kernel-default | In progress |
SUSE Linux Enterprise Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_25 | In progress |
SUSE Linux Enterprise Live Patching 15 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Basesystem 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Basesystem 15 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Basesystem 15 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Development Tools 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Development Tools 15 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Development Tools 15 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Public Cloud 15 SP5 | kernel-source-azure | Unsupported |
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE | kernel-default | Not affected |
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP5 | kernel-source-azure | Not affected |
SUSE Linux Enterprise Server 12 SP5-LTSS | kernel-default | In progress |
SUSE Linux Enterprise Server 12 SP5-LTSS | kernel-source | In progress |
SUSE Linux Enterprise Server 12 SP5-LTSS | kernel-source-azure | Not affected |
SUSE Linux Enterprise Server 12 SP5-LTSS | kernel-syms | In progress |
SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security | kernel-default | Not affected |
SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP3-LTSS | kernel-64kb | In progress |
SUSE Linux Enterprise Server 15 SP3-LTSS | kernel-default | In progress |
SUSE Linux Enterprise Server 15 SP3-LTSS | kernel-default-base | In progress |
SUSE Linux Enterprise Server 15 SP3-LTSS | kernel-docs | In progress |
SUSE Linux Enterprise Server 15 SP3-LTSS | kernel-obs-build | In progress |
SUSE Linux Enterprise Server 15 SP3-LTSS | kernel-preempt | In progress |
SUSE Linux Enterprise Server 15 SP3-LTSS | kernel-source | In progress |
SUSE Linux Enterprise Server 15 SP3-LTSS | kernel-syms | In progress |
SUSE Linux Enterprise Server 15 SP3-LTSS | kernel-zfcpdump | In progress |
SUSE Linux Enterprise Server 15 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-64kb | Released |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-default | Released |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-default-base | Released |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-docs | Released |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-obs-build | Released |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-source | Released |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-syms | Released |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-zfcpdump | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP5 | kernel-source-azure | Unsupported |
SUSE Linux Enterprise Server 15 SP5-LTSS | kernel-64kb | In progress |
SUSE Linux Enterprise Server 15 SP5-LTSS | kernel-default | In progress |
SUSE Linux Enterprise Server 15 SP5-LTSS | kernel-default-base | In progress |
SUSE Linux Enterprise Server 15 SP5-LTSS | kernel-docs | In progress |
SUSE Linux Enterprise Server 15 SP5-LTSS | kernel-obs-build | In progress |
SUSE Linux Enterprise Server 15 SP5-LTSS | kernel-source | In progress |
SUSE Linux Enterprise Server 15 SP5-LTSS | kernel-syms | In progress |
SUSE Linux Enterprise Server 15 SP5-LTSS | kernel-zfcpdump | In progress |
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | kernel-default | In progress |
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | kernel-source | In progress |
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | kernel-source-azure | Not affected |
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5 | kernel-syms | In progress |
SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-default | Not affected |
SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP3 | kernel-default | In progress |
SUSE Linux Enterprise Server for SAP Applications 15 SP3 | kernel-default-base | In progress |
SUSE Linux Enterprise Server for SAP Applications 15 SP3 | kernel-docs | In progress |
SUSE Linux Enterprise Server for SAP Applications 15 SP3 | kernel-obs-build | In progress |
SUSE Linux Enterprise Server for SAP Applications 15 SP3 | kernel-preempt | In progress |
SUSE Linux Enterprise Server for SAP Applications 15 SP3 | kernel-source | In progress |
SUSE Linux Enterprise Server for SAP Applications 15 SP3 | kernel-syms | In progress |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-default | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-default-base | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-docs | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-obs-build | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-source | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-syms | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-default | In progress |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-default-base | In progress |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-docs | In progress |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-obs-build | In progress |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-source | In progress |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-source-azure | Unsupported |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-syms | In progress |
Products past their end of life and not receiving proactive updates anymore. | ||
SUSE CaaS Platform 4.0 | kernel-source | Not affected |
SUSE Enterprise Storage 6 | kernel-source | Not affected |
SUSE Enterprise Storage 7 | kernel-default | Affected |
SUSE Enterprise Storage 7 | kernel-docs | Affected |
SUSE Enterprise Storage 7 | kernel-obs-build | Affected |
SUSE Enterprise Storage 7 | kernel-preempt | Affected |
SUSE Enterprise Storage 7 | kernel-source | Affected |
SUSE Enterprise Storage 7 | kernel-syms | Affected |
SUSE Enterprise Storage 7.1 | kernel-64kb | In progress |
SUSE Enterprise Storage 7.1 | kernel-default | In progress |
SUSE Enterprise Storage 7.1 | kernel-default-base | In progress |
SUSE Enterprise Storage 7.1 | kernel-docs | In progress |
SUSE Enterprise Storage 7.1 | kernel-obs-build | In progress |
SUSE Enterprise Storage 7.1 | kernel-preempt | In progress |
SUSE Enterprise Storage 7.1 | kernel-source | In progress |
SUSE Enterprise Storage 7.1 | kernel-syms | In progress |
SUSE Linux Enterprise Desktop 11 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 12 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 12 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 15 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 15 SP1 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 15 SP2 | kernel-default | Affected |
SUSE Linux Enterprise Desktop 15 SP2 | kernel-docs | Affected |
SUSE Linux Enterprise Desktop 15 SP2 | kernel-obs-build | Affected |
SUSE Linux Enterprise Desktop 15 SP2 | kernel-preempt | Affected |
SUSE Linux Enterprise Desktop 15 SP2 | kernel-source | Affected |
SUSE Linux Enterprise Desktop 15 SP2 | kernel-syms | Affected |
SUSE Linux Enterprise Desktop 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 15 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise High Availability Extension 15 SP2 | kernel-default | Affected |
SUSE Linux Enterprise High Performance Computing 15 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP1 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP2 | kernel-default | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2 | kernel-docs | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2 | kernel-obs-build | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2 | kernel-preempt | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2 | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2 | kernel-syms | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | kernel-default | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | kernel-docs | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | kernel-obs-build | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | kernel-preempt | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | kernel-syms | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | kernel-default | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | kernel-docs | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | kernel-obs-build | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | kernel-preempt | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | kernel-syms | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-64kb | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-default | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-default-base | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-docs | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-obs-build | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-source | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-syms | Released |
SUSE Linux Enterprise High Performance Computing 15-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Live Patching 15 SP2 | kernel-default | Affected |
SUSE Linux Enterprise Micro 5.0 | kernel-default | Not affected |
SUSE Linux Enterprise Module for Basesystem 15 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Basesystem 15 SP1 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Basesystem 15 SP2 | kernel-default | Affected |
SUSE Linux Enterprise Module for Basesystem 15 SP2 | kernel-preempt | Affected |
SUSE Linux Enterprise Module for Basesystem 15 SP2 | kernel-source | Affected |
SUSE Linux Enterprise Module for Development Tools 15 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Development Tools 15 SP2 | kernel-docs | Affected |
SUSE Linux Enterprise Module for Development Tools 15 SP2 | kernel-obs-build | Affected |
SUSE Linux Enterprise Module for Development Tools 15 SP2 | kernel-preempt | Affected |
SUSE Linux Enterprise Module for Development Tools 15 SP2 | kernel-source | Affected |
SUSE Linux Enterprise Module for Development Tools 15 SP2 | kernel-syms | Affected |
SUSE Linux Enterprise Module for Legacy 15 SP2 | kernel-default | Affected |
SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT | kernel-source | Not affected |
SUSE Linux Enterprise Real Time 15 SP2 | kernel-default | Affected |
SUSE Linux Enterprise Real Time 15 SP2 | kernel-docs | Affected |
SUSE Linux Enterprise Real Time 15 SP2 | kernel-obs-build | Affected |
SUSE Linux Enterprise Real Time 15 SP2 | kernel-preempt | Affected |
SUSE Linux Enterprise Real Time 15 SP2 | kernel-source | Affected |
SUSE Linux Enterprise Real Time 15 SP2 | kernel-syms | Affected |
SUSE Linux Enterprise Real Time 15 SP3 | kernel-rt | Affected |
SUSE Linux Enterprise Real Time 15 SP3 | kernel-rt_debug | Affected |
SUSE Linux Enterprise Real Time 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Real Time 15 SP3 | kernel-source-rt | Affected |
SUSE Linux Enterprise Real Time 15 SP3 | kernel-syms-rt | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-rt | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-rt_debug | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-source-rt | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-syms-rt | Affected |
SUSE Linux Enterprise Real Time 15 SP5 | kernel-rt | Affected |
SUSE Linux Enterprise Real Time 15 SP5 | kernel-rt_debug | Affected |
SUSE Linux Enterprise Real Time 15 SP5 | kernel-source-rt | Affected |
SUSE Linux Enterprise Real Time 15 SP5 | kernel-syms-rt | Affected |
SUSE Linux Enterprise Server 11 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Server 11 SP4 LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 11 SP4 LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 11 SP4-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP2-BCL | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP2-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP2-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 12 SP2-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP4-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP4-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 12 SP4-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP1 | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP1-BCL | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP1-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 15 SP1-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP2 | kernel-default | Affected |
SUSE Linux Enterprise Server 15 SP2 | kernel-docs | Affected |
SUSE Linux Enterprise Server 15 SP2 | kernel-obs-build | Affected |
SUSE Linux Enterprise Server 15 SP2 | kernel-preempt | Affected |
SUSE Linux Enterprise Server 15 SP2 | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP2 | kernel-syms | Affected |
SUSE Linux Enterprise Server 15 SP2-BCL | kernel-default | Affected |
SUSE Linux Enterprise Server 15 SP2-BCL | kernel-docs | Affected |
SUSE Linux Enterprise Server 15 SP2-BCL | kernel-obs-build | Affected |
SUSE Linux Enterprise Server 15 SP2-BCL | kernel-preempt | Affected |
SUSE Linux Enterprise Server 15 SP2-BCL | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP2-BCL | kernel-syms | Affected |
SUSE Linux Enterprise Server 15 SP2-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 15 SP2-LTSS | kernel-docs | Affected |
SUSE Linux Enterprise Server 15 SP2-LTSS | kernel-obs-build | Affected |
SUSE Linux Enterprise Server 15 SP2-LTSS | kernel-preempt | Affected |
SUSE Linux Enterprise Server 15 SP2-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP2-LTSS | kernel-syms | Affected |
SUSE Linux Enterprise Server 15 SP3-BCL | kernel-source | Not affected |
SUSE Linux Enterprise Server 15-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 15-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 12 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP1 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP2 | kernel-default | Affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP2 | kernel-docs | Affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP2 | kernel-obs-build | Affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP2 | kernel-preempt | Affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP2 | kernel-source | Affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP2 | kernel-syms | Affected |
SUSE Linux Enterprise Workstation Extension 15 SP2 | kernel-default | Affected |
SUSE Linux Enterprise Workstation Extension 15 SP2 | kernel-preempt | Affected |
SUSE Manager Proxy 4.0 | kernel-source | Not affected |
SUSE Manager Proxy 4.1 | kernel-default | Affected |
SUSE Manager Proxy 4.1 | kernel-docs | Affected |
SUSE Manager Proxy 4.1 | kernel-obs-build | Affected |
SUSE Manager Proxy 4.1 | kernel-preempt | Affected |
SUSE Manager Proxy 4.1 | kernel-source | Affected |
SUSE Manager Proxy 4.1 | kernel-syms | Affected |
SUSE Manager Proxy 4.2 | kernel-source | Not affected |
SUSE Manager Retail Branch Server 4.0 | kernel-source | Not affected |
SUSE Manager Retail Branch Server 4.1 | kernel-default | Affected |
SUSE Manager Retail Branch Server 4.1 | kernel-docs | Affected |
SUSE Manager Retail Branch Server 4.1 | kernel-obs-build | Affected |
SUSE Manager Retail Branch Server 4.1 | kernel-preempt | Affected |
SUSE Manager Retail Branch Server 4.1 | kernel-source | Affected |
SUSE Manager Retail Branch Server 4.1 | kernel-syms | Affected |
SUSE Manager Retail Branch Server 4.2 | kernel-source | Not affected |
SUSE Manager Server 4.0 | kernel-source | Not affected |
SUSE Manager Server 4.1 | kernel-default | Affected |
SUSE Manager Server 4.1 | kernel-docs | Affected |
SUSE Manager Server 4.1 | kernel-obs-build | Affected |
SUSE Manager Server 4.1 | kernel-preempt | Affected |
SUSE Manager Server 4.1 | kernel-source | Affected |
SUSE Manager Server 4.1 | kernel-syms | Affected |
SUSE Manager Server 4.2 | kernel-source | Not affected |
SUSE OpenStack Cloud 7 | kernel-source | Not affected |
SUSE OpenStack Cloud 9 | kernel-source | Not affected |
SUSE OpenStack Cloud Crowbar 9 | kernel-source | Not affected |
SUSE Real Time Module 15 SP3 | kernel-rt | Affected |
SUSE Real Time Module 15 SP3 | kernel-rt_debug | Affected |
SUSE Real Time Module 15 SP3 | kernel-source-rt | Affected |
SUSE Real Time Module 15 SP3 | kernel-syms-rt | Affected |
SUSE Real Time Module 15 SP4 | kernel-rt | Affected |
SUSE Real Time Module 15 SP4 | kernel-rt_debug | Affected |
SUSE Real Time Module 15 SP4 | kernel-source-rt | Affected |
SUSE Real Time Module 15 SP4 | kernel-syms-rt | Affected |
SUSE Real Time Module 15 SP5 | kernel-rt | Affected |
SUSE Real Time Module 15 SP5 | kernel-rt_debug | Affected |
SUSE Real Time Module 15 SP5 | kernel-source-rt | Affected |
SUSE Real Time Module 15 SP5 | kernel-syms-rt | Affected |
openSUSE Leap 15.3 | kernel-rt | Affected |
openSUSE Leap 15.3 | kernel-rt_debug | Affected |
openSUSE Leap 15.3 | kernel-source | Not affected |
openSUSE Leap 15.3 | kernel-source-rt | Affected |
openSUSE Leap 15.3 | kernel-syms-rt | Affected |
openSUSE Leap 15.4 | kernel-rt | Affected |
openSUSE Leap 15.4 | kernel-rt_debug | Affected |
openSUSE Leap 15.4 | kernel-source | Not affected |
openSUSE Leap 15.4 | kernel-source-azure | Unsupported |
openSUSE Leap 15.4 | kernel-source-rt | Affected |
openSUSE Leap 15.4 | kernel-syms-rt | Affected |
openSUSE Leap 15.5 | kernel-rt | Released |
openSUSE Leap 15.5 | kernel-rt_debug | Released |
openSUSE Leap 15.5 | kernel-source | Not affected |
openSUSE Leap 15.5 | kernel-source-azure | Unsupported |
openSUSE Leap 15.5 | kernel-source-rt | Released |
openSUSE Leap 15.5 | kernel-syms-rt | Released |
openSUSE Leap Micro 5.2 | kernel-rt | Affected |
openSUSE Leap Micro 5.3 | kernel-rt | Affected |
openSUSE Leap Micro 5.4 | kernel-rt | Affected |
openSUSE Leap Micro 5.5 | kernel-rt | Affected |
Container Status | ||
suse/sle-micro/rt-5.5 | kernel-rt | Released |
rancher/elemental-teal-rt/5.3 rancher/elemental-teal-rt/5.4 | kernel-rt | In progress |
SUSE Timeline for this CVE
CVE page created: Wed Feb 26 04:14:04 2025CVE page last modified: Fri Apr 11 11:56:41 2025