Upstream information
Description
In the Linux kernel, the following vulnerability has been resolved: arm64: hibernate: Fix level3 translation fault in swsusp_save() On arm64 machines, swsusp_save() faults if it attempts to access MEMBLOCK_NOMAP memory ranges. This can be reproduced in QEMU using UEFI when booting with rodata=off debug_pagealloc=off and CONFIG_KFENCE=n: Unable to handle kernel paging request at virtual address ffffff8000000000 Mem abort info: ESR = 0x0000000096000007 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x07: level 3 translation fault Data abort info: ISV = 0, ISS = 0x00000007, ISS2 = 0x00000000 CM = 0, WnR = 0, TnD = 0, TagAccess = 0 GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 swapper pgtable: 4k pages, 39-bit VAs, pgdp=00000000eeb0b000 [ffffff8000000000] pgd=180000217fff9803, p4d=180000217fff9803, pud=180000217fff9803, pmd=180000217fff8803, pte=0000000000000000 Internal error: Oops: 0000000096000007 [#1] SMP Internal error: Oops: 0000000096000007 [#1] SMP Modules linked in: xt_multiport ipt_REJECT nf_reject_ipv4 xt_conntrack nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 libcrc32c iptable_filter bpfilter rfkill at803x snd_hda_codec_hdmi snd_hda_intel snd_intel_dspcfg dwmac_generic stmmac_platform snd_hda_codec stmmac joydev pcs_xpcs snd_hda_core phylink ppdev lp parport ramoops reed_solomon ip_tables x_tables nls_iso8859_1 vfat multipath linear amdgpu amdxcp drm_exec gpu_sched drm_buddy hid_generic usbhid hid radeon video drm_suballoc_helper drm_ttm_helper ttm i2c_algo_bit drm_display_helper cec drm_kms_helper drm CPU: 0 PID: 3663 Comm: systemd-sleep Not tainted 6.6.2+ #76 Source Version: 4e22ed63a0a48e7a7cff9b98b7806d8d4add7dc0 Hardware name: Greatwall GW-XXXXXX-XXX/GW-XXXXXX-XXX, BIOS KunLun BIOS V4.0 01/19/2021 pstate: 600003c5 (nZCv DAIF -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : swsusp_save+0x280/0x538 lr : swsusp_save+0x280/0x538 sp : ffffffa034a3fa40 x29: ffffffa034a3fa40 x28: ffffff8000001000 x27: 0000000000000000 x26: ffffff8001400000 x25: ffffffc08113e248 x24: 0000000000000000 x23: 0000000000080000 x22: ffffffc08113e280 x21: 00000000000c69f2 x20: ffffff8000000000 x19: ffffffc081ae2500 x18: 0000000000000000 x17: 6666662074736420 x16: 3030303030303030 x15: 3038666666666666 x14: 0000000000000b69 x13: ffffff9f89088530 x12: 00000000ffffffea x11: 00000000ffff7fff x10: 00000000ffff7fff x9 : ffffffc08193f0d0 x8 : 00000000000bffe8 x7 : c0000000ffff7fff x6 : 0000000000000001 x5 : ffffffa0fff09dc8 x4 : 0000000000000000 x3 : 0000000000000027 x2 : 0000000000000000 x1 : 0000000000000000 x0 : 000000000000004e Call trace: swsusp_save+0x280/0x538 swsusp_arch_suspend+0x148/0x190 hibernation_snapshot+0x240/0x39c hibernate+0xc4/0x378 state_store+0xf0/0x10c kobj_attr_store+0x14/0x24 The reason is swsusp_save() -> copy_data_pages() -> page_is_saveable() -> kernel_page_present() assuming that a page is always present when can_set_direct_map() is false (all of rodata_full, debug_pagealloc_enabled() and arm64_kfence_can_set_direct_map() false), irrespective of the MEMBLOCK_NOMAP ranges. Such MEMBLOCK_NOMAP regions should not be saved during hibernation. This problem was introduced by changes to the pfn_valid() logic in commit a7d9f306ba70 ("arm64: drop pfn_valid_within() and simplify pfn_valid()"). Similar to other architectures, drop the !can_set_direct_map() check in kernel_page_present() so that page_is_savable() skips such pages. [catalin.marinas@arm.com: rework commit message]SUSE information
Overall state of this security issue: Pending
This issue is currently rated as having moderate severity.
SUSE | |
---|---|
Base Score | 4.7 |
Vector | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Attack Vector | Local |
Attack Complexity | High |
Privileges Required | Low |
User Interaction | None |
Scope | Unchanged |
Confidentiality Impact | None |
Integrity Impact | None |
Availability Impact | High |
CVSSv3 Version | 3.1 |
SUSE Security Advisories:
- SUSE-SU-2024:2008-1, published Wed Jun 12 12:32:06 UTC 2024
- SUSE-SU-2024:2019-1, published Thu Jun 13 12:36:27 UTC 2024
- SUSE-SU-2024:2135-1, published Fri Jun 21 12:32:14 UTC 2024
- SUSE-SU-2024:2190-1, published Tue Jun 25 12:32:30 UTC 2024
List of released packages
Product(s) | Fixed package version(s) | References |
---|---|---|
Image SLES15-SP6-BYOS Image SLES15-SP6-BYOS-Azure Image SLES15-SP6-BYOS-EC2 Image SLES15-SP6-BYOS-GCE Image SLES15-SP6-CHOST-BYOS Image SLES15-SP6-CHOST-BYOS-Aliyun Image SLES15-SP6-CHOST-BYOS-Azure Image SLES15-SP6-CHOST-BYOS-EC2 Image SLES15-SP6-CHOST-BYOS-GCE Image SLES15-SP6-EC2 Image SLES15-SP6-EC2-ECS-HVM Image SLES15-SP6-GCE Image SLES15-SP6-HPC-BYOS Image SLES15-SP6-HPC-BYOS-Azure Image SLES15-SP6-HPC-BYOS-EC2 Image SLES15-SP6-HPC-BYOS-GCE Image SLES15-SP6-HPC-EC2 Image SLES15-SP6-HPC-GCE Image SLES15-SP6-Hardened-BYOS Image SLES15-SP6-Hardened-BYOS-Azure Image SLES15-SP6-Hardened-BYOS-EC2 Image SLES15-SP6-Hardened-BYOS-GCE Image SLES15-SP6-SAP-GCE Image SLES15-SP6-SAPCAL-GCE |
| |
Image SLES15-SP6-SAP-Azure-LI-BYOS Image SLES15-SP6-SAP-Azure-LI-BYOS-Production Image SLES15-SP6-SAP-Azure-VLI-BYOS Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production Image SLES15-SP6-SAP-BYOS Image SLES15-SP6-SAP-BYOS-Azure Image SLES15-SP6-SAP-BYOS-EC2 Image SLES15-SP6-SAP-BYOS-GCE Image SLES15-SP6-SAP-Hardened Image SLES15-SP6-SAP-Hardened-Azure Image SLES15-SP6-SAP-Hardened-BYOS Image SLES15-SP6-SAP-Hardened-BYOS-Azure Image SLES15-SP6-SAP-Hardened-BYOS-EC2 Image SLES15-SP6-SAP-Hardened-BYOS-GCE Image SLES15-SP6-SAP-Hardened-EC2 Image SLES15-SP6-SAP-Hardened-GCE |
| |
Image SLES15-SP6 Image SLES15-SP6-Azure-Basic Image SLES15-SP6-Azure-Standard Image SLES15-SP6-HPC Image SLES15-SP6-HPC-Azure |
| |
SUSE Linux Enterprise Desktop 15 SP5 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP5-2024-2190 SUSE-SLE-Module-Development-Tools-15-SP5-2024-2190 SUSE-SLE-Product-WE-15-SP5-2024-2190 |
SUSE Linux Enterprise Desktop 15 SP6 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP6-2024-2203 SUSE-SLE-Module-Development-Tools-15-SP6-2024-2203 SUSE-SLE-Product-WE-15-SP6-2024-2203 |
SUSE Linux Enterprise High Availability Extension 15 SP5 |
| Patchnames: SUSE-SLE-Product-HA-15-SP5-2024-2190 |
SUSE Linux Enterprise High Availability Extension 15 SP6 |
| Patchnames: SUSE-SLE-Product-HA-15-SP6-2024-2203 |
SUSE Linux Enterprise High Performance Computing 15 SP5 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP5-2024-2190 SUSE-SLE-Module-Development-Tools-15-SP5-2024-2190 SUSE-SLE-Module-Legacy-15-SP5-2024-2190 SUSE-SLE-Module-Public-Cloud-15-SP5-2024-2019 |
SUSE Linux Enterprise High Performance Computing 15 SP6 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP6-2024-2203 SUSE-SLE-Module-Development-Tools-15-SP6-2024-2203 SUSE-SLE-Module-Legacy-15-SP6-2024-2203 SUSE-SLE-Module-Public-Cloud-15-SP6-2024-2135 |
SUSE Linux Enterprise Live Patching 15 SP5 | Patchnames: SUSE-SLE-Module-Live-Patching-15-SP5-2024-2008 SUSE-SLE-Module-Live-Patching-15-SP5-2024-2190 | |
SUSE Linux Enterprise Live Patching 15 SP6 | Patchnames: SUSE-SLE-Module-Live-Patching-15-SP6-2024-2203 | |
SUSE Linux Enterprise Micro 5.5 |
| Patchnames: SUSE-SLE-Micro-5.5-2024-2008 SUSE-SLE-Micro-5.5-2024-2190 |
SUSE Linux Enterprise Module for Basesystem 15 SP5 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP5-2024-2190 |
SUSE Linux Enterprise Module for Basesystem 15 SP6 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP6-2024-2203 |
SUSE Linux Enterprise Module for Development Tools 15 SP5 |
| Patchnames: SUSE-SLE-Module-Development-Tools-15-SP5-2024-2190 |
SUSE Linux Enterprise Module for Development Tools 15 SP6 |
| Patchnames: SUSE-SLE-Module-Development-Tools-15-SP6-2024-2203 |
SUSE Linux Enterprise Module for Legacy 15 SP5 |
| Patchnames: SUSE-SLE-Module-Legacy-15-SP5-2024-2190 |
SUSE Linux Enterprise Module for Legacy 15 SP6 |
| Patchnames: SUSE-SLE-Module-Legacy-15-SP6-2024-2203 |
SUSE Linux Enterprise Module for Public Cloud 15 SP5 |
| Patchnames: SUSE-SLE-Module-Public-Cloud-15-SP5-2024-2019 |
SUSE Linux Enterprise Module for Public Cloud 15 SP6 |
| Patchnames: SUSE-SLE-Module-Public-Cloud-15-SP6-2024-2135 |
SUSE Linux Enterprise Real Time 15 SP5 SUSE Real Time Module 15 SP5 |
| Patchnames: SUSE-SLE-Module-RT-15-SP5-2024-2008 |
SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP5-2024-2190 SUSE-SLE-Module-Development-Tools-15-SP5-2024-2190 SUSE-SLE-Module-Legacy-15-SP5-2024-2190 SUSE-SLE-Module-Public-Cloud-15-SP5-2024-2019 SUSE-SLE-Product-WE-15-SP5-2024-2190 |
SUSE Linux Enterprise Server 15 SP6 SUSE Linux Enterprise Server for SAP Applications 15 SP6 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP6-2024-2203 SUSE-SLE-Module-Development-Tools-15-SP6-2024-2203 SUSE-SLE-Module-Legacy-15-SP6-2024-2203 SUSE-SLE-Module-Public-Cloud-15-SP6-2024-2135 SUSE-SLE-Product-WE-15-SP6-2024-2203 |
SUSE Linux Enterprise Workstation Extension 15 SP5 |
| Patchnames: SUSE-SLE-Product-WE-15-SP5-2024-2190 |
SUSE Linux Enterprise Workstation Extension 15 SP6 |
| Patchnames: SUSE-SLE-Product-WE-15-SP6-2024-2203 |
openSUSE Leap 15.5 |
| Patchnames: openSUSE-SLE-15.5-2024-2008 openSUSE-SLE-15.5-2024-2019 openSUSE-SLE-15.5-2024-2190 |
openSUSE Leap 15.6 |
| Patchnames: openSUSE-SLE-15.6-2024-2135 openSUSE-SLE-15.6-2024-2203 |
openSUSE Leap Micro 5.5 |
| Patchnames: openSUSE-Leap-Micro-5.5-2024-2008 openSUSE-Leap-Micro-5.5-2024-2190 |
Status of this issue by product and package
Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.
Product(s) | Source package | State |
---|---|---|
Products under general support and receiving all security fixes. | ||
SLES15-SP5-CHOST-BYOS-Aliyun | kernel-default | In progress |
SLES15-SP5-CHOST-BYOS-Azure | kernel-default | In progress |
SLES15-SP5-CHOST-BYOS-EC2 | kernel-default | In progress |
SLES15-SP5-CHOST-BYOS-GCE | kernel-default | In progress |
SLES15-SP5-CHOST-BYOS-SAP-CCloud | kernel-default | In progress |
SUSE Enterprise Storage 7.1 | kernel-default | Not affected |
SUSE Enterprise Storage 7.1 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-64kb | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-default-base | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-docs | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-obs-build | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-syms | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Desktop 15 SP6 | kernel-64kb | Released |
SUSE Linux Enterprise Desktop 15 SP6 | kernel-default | Released |
SUSE Linux Enterprise Desktop 15 SP6 | kernel-default-base | Released |
SUSE Linux Enterprise Desktop 15 SP6 | kernel-docs | Released |
SUSE Linux Enterprise Desktop 15 SP6 | kernel-obs-build | Released |
SUSE Linux Enterprise Desktop 15 SP6 | kernel-source | Released |
SUSE Linux Enterprise Desktop 15 SP6 | kernel-syms | Released |
SUSE Linux Enterprise Desktop 15 SP6 | kernel-zfcpdump | Released |
SUSE Linux Enterprise High Availability Extension 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise High Availability Extension 15 SP6 | kernel-default | Released |
SUSE Linux Enterprise High Performance Computing 12 SP5 | kernel-default | Not affected |
SUSE Linux Enterprise High Performance Computing 12 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 12 SP5 | kernel-source-azure | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-64kb | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-azure | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-default-base | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-docs | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-obs-build | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-source-azure | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-syms | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-syms-azure | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-zfcpdump | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-64kb | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-azure | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-default | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-default-base | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-docs | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-obs-build | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-source | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-source-azure | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-syms | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-syms-azure | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Live Patching 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5-RT_Update_16 | Released |
SUSE Linux Enterprise Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_15 | Released |
SUSE Linux Enterprise Live Patching 15 SP6 | kernel-default | Released |
SUSE Linux Enterprise Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_1 | Released |
SUSE Linux Enterprise Micro 5.1 | kernel-default | Not affected |
SUSE Linux Enterprise Micro 5.1 | kernel-rt | Not affected |
SUSE Linux Enterprise Micro 5.1 | kernel-source-rt | Not affected |
SUSE Linux Enterprise Micro 5.2 | kernel-default | Not affected |
SUSE Linux Enterprise Micro 5.2 | kernel-rt | Not affected |
SUSE Linux Enterprise Micro 5.2 | kernel-source-rt | Not affected |
SUSE Linux Enterprise Micro 5.3 | kernel-default | Affected |
SUSE Linux Enterprise Micro 5.3 | kernel-rt | Affected |
SUSE Linux Enterprise Micro 5.3 | kernel-source-rt | Affected |
SUSE Linux Enterprise Micro 5.4 | kernel-default | Affected |
SUSE Linux Enterprise Micro 5.4 | kernel-rt | Affected |
SUSE Linux Enterprise Micro 5.4 | kernel-source-rt | Affected |
SUSE Linux Enterprise Micro 5.5 | kernel-default | Released |
SUSE Linux Enterprise Micro 5.5 | kernel-default-base | Released |
SUSE Linux Enterprise Micro 5.5 | kernel-rt | Released |
SUSE Linux Enterprise Micro 5.5 | kernel-source-rt | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP5 | kernel-64kb | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP5 | kernel-default-base | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP5 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP6 | kernel-64kb | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP6 | kernel-default | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP6 | kernel-default-base | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP6 | kernel-source | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP6 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP5 | kernel-docs | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP5 | kernel-obs-build | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP5 | kernel-syms | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP6 | kernel-default | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP6 | kernel-docs | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP6 | kernel-obs-build | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP6 | kernel-source | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP6 | kernel-syms | Released |
SUSE Linux Enterprise Module for Legacy 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Module for Legacy 15 SP6 | kernel-default | Released |
SUSE Linux Enterprise Module for Public Cloud 15 SP5 | kernel-azure | Released |
SUSE Linux Enterprise Module for Public Cloud 15 SP5 | kernel-source-azure | Released |
SUSE Linux Enterprise Module for Public Cloud 15 SP5 | kernel-syms-azure | Released |
SUSE Linux Enterprise Module for Public Cloud 15 SP6 | kernel-azure | Released |
SUSE Linux Enterprise Module for Public Cloud 15 SP6 | kernel-source-azure | Released |
SUSE Linux Enterprise Module for Public Cloud 15 SP6 | kernel-syms-azure | Released |
SUSE Linux Enterprise Real Time 12 SP5 | kernel-source-rt | Not affected |
SUSE Linux Enterprise Real Time 15 SP5 | kernel-rt | Released |
SUSE Linux Enterprise Real Time 15 SP5 | kernel-rt_debug | Released |
SUSE Linux Enterprise Real Time 15 SP5 | kernel-source-rt | Released |
SUSE Linux Enterprise Real Time 15 SP5 | kernel-syms-rt | Released |
SUSE Linux Enterprise Real Time 15 SP6 | kernel-source-rt | Affected |
SUSE Linux Enterprise Server 12 SP5 | kernel-default | Not affected |
SUSE Linux Enterprise Server 12 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP5 | kernel-source-azure | Not affected |
SUSE Linux Enterprise Server 15 SP5 | kernel-64kb | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-azure | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-default-base | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-docs | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-obs-build | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-source-azure | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-syms | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-syms-azure | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-64kb | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-azure | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-default | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-default-base | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-docs | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-obs-build | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-source | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-source-azure | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-syms | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-syms-azure | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-default | Not affected |
SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-source-azure | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-64kb | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-default-base | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-docs | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-obs-build | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-source-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-syms | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-syms-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-64kb | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-default | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-default-base | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-docs | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-obs-build | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-source | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-source-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-syms | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-syms-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Workstation Extension 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Workstation Extension 15 SP6 | kernel-default | Released |
SUSE Manager Proxy 4.3 | kernel-default | Affected |
SUSE Manager Proxy 4.3 | kernel-source | Affected |
SUSE Manager Retail Branch Server 4.3 | kernel-default | Affected |
SUSE Manager Retail Branch Server 4.3 | kernel-source | Affected |
SUSE Manager Server 4.3 | kernel-default | Affected |
SUSE Manager Server 4.3 | kernel-source | Affected |
SUSE Real Time Module 15 SP5 | kernel-rt | Released |
SUSE Real Time Module 15 SP5 | kernel-rt_debug | Released |
SUSE Real Time Module 15 SP5 | kernel-source-rt | Released |
SUSE Real Time Module 15 SP5 | kernel-syms-rt | Released |
SUSE Real Time Module 15 SP6 | kernel-source-rt | Affected |
openSUSE Leap 15.5 | dtb-aarch64 | Released |
openSUSE Leap 15.5 | dtb-armv7l | Released |
openSUSE Leap 15.5 | kernel-64kb | Released |
openSUSE Leap 15.5 | kernel-azure | Released |
openSUSE Leap 15.5 | kernel-debug | Released |
openSUSE Leap 15.5 | kernel-default | Released |
openSUSE Leap 15.5 | kernel-docs | Released |
openSUSE Leap 15.5 | kernel-kvmsmall | Released |
openSUSE Leap 15.5 | kernel-lpae | Released |
openSUSE Leap 15.5 | kernel-obs-build | Released |
openSUSE Leap 15.5 | kernel-obs-qa | Released |
openSUSE Leap 15.5 | kernel-rt | Released |
openSUSE Leap 15.5 | kernel-rt_debug | Released |
openSUSE Leap 15.5 | kernel-source | Released |
openSUSE Leap 15.5 | kernel-source-azure | Released |
openSUSE Leap 15.5 | kernel-source-rt | Released |
openSUSE Leap 15.5 | kernel-syms | Released |
openSUSE Leap 15.5 | kernel-syms-azure | Released |
openSUSE Leap 15.5 | kernel-syms-rt | Released |
openSUSE Leap 15.5 | kernel-zfcpdump | Released |
openSUSE Leap 15.6 | dtb-aarch64 | Released |
openSUSE Leap 15.6 | dtb-armv7l | Released |
openSUSE Leap 15.6 | kernel-64kb | Released |
openSUSE Leap 15.6 | kernel-azure | Released |
openSUSE Leap 15.6 | kernel-debug | Released |
openSUSE Leap 15.6 | kernel-default | Released |
openSUSE Leap 15.6 | kernel-docs | Released |
openSUSE Leap 15.6 | kernel-kvmsmall | Released |
openSUSE Leap 15.6 | kernel-lpae | Released |
openSUSE Leap 15.6 | kernel-obs-build | Released |
openSUSE Leap 15.6 | kernel-obs-qa | Released |
openSUSE Leap 15.6 | kernel-source | Released |
openSUSE Leap 15.6 | kernel-source-azure | Released |
openSUSE Leap 15.6 | kernel-source-rt | Affected |
openSUSE Leap 15.6 | kernel-syms | Released |
openSUSE Leap 15.6 | kernel-syms-azure | Released |
openSUSE Leap 15.6 | kernel-zfcpdump | Released |
Products under Long Term Service Pack support and receiving important and critical security fixes. | ||
SUSE Linux Enterprise Desktop 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-default | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-default | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-source | Affected |
SUSE Linux Enterprise Module for Basesystem 15 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Basesystem 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Basesystem 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise Module for Development Tools 15 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Development Tools 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Development Tools 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE | kernel-default | Not affected |
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP2-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 15 SP2-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP3-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 15 SP3-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-default | Affected |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-source | Affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP2 | kernel-default | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP3 | kernel-default | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-default | Affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-source | Affected |
Products past their end of life and not receiving proactive updates anymore. | ||
HPE Helion OpenStack 8 | kernel-source | Not affected |
SUSE CaaS Platform 4.0 | kernel-source | Not affected |
SUSE Enterprise Storage 6 | kernel-source | Not affected |
SUSE Enterprise Storage 7 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 12 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 12 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 15 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 15 SP1 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 15 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Desktop 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP1 | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise High Performance Computing 15-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Micro 5.0 | kernel-default | Not affected |
SUSE Linux Enterprise Module for Basesystem 15 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Basesystem 15 SP1 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Development Tools 15 | kernel-source | Not affected |
SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-source | Not affected |
SUSE Linux Enterprise Real Time 15 SP2 | kernel-source | Not affected |
SUSE Linux Enterprise Real Time 15 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Real Time 15 SP3 | kernel-source-rt | Not affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-source-rt | Affected |
SUSE Linux Enterprise Server 11 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Server 11 SP4 LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 11 SP4 LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 11 SP4-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP3-BCL | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP3-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP3-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP4-ESPOS | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP4-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 12 SP4-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP1 | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP1-BCL | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP1-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 15 SP1-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP2-BCL | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP3-BCL | kernel-source | Not affected |
SUSE Linux Enterprise Server 15-LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 15-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 12 SP3 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-default | Not affected |
SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 | kernel-source | Not affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP1 | kernel-source | Not affected |
SUSE Manager Proxy 4.0 | kernel-source | Not affected |
SUSE Manager Proxy 4.1 | kernel-source | Not affected |
SUSE Manager Proxy 4.2 | kernel-source | Not affected |
SUSE Manager Retail Branch Server 4.0 | kernel-source | Not affected |
SUSE Manager Retail Branch Server 4.1 | kernel-source | Not affected |
SUSE Manager Retail Branch Server 4.2 | kernel-source | Not affected |
SUSE Manager Server 4.0 | kernel-source | Not affected |
SUSE Manager Server 4.1 | kernel-source | Not affected |
SUSE Manager Server 4.2 | kernel-source | Not affected |
SUSE OpenStack Cloud 8 | kernel-source | Not affected |
SUSE OpenStack Cloud 9 | kernel-default | Not affected |
SUSE OpenStack Cloud 9 | kernel-source | Not affected |
SUSE OpenStack Cloud Crowbar 8 | kernel-source | Not affected |
SUSE OpenStack Cloud Crowbar 9 | kernel-default | Not affected |
SUSE OpenStack Cloud Crowbar 9 | kernel-source | Not affected |
SUSE Real Time Module 15 SP3 | kernel-source-rt | Not affected |
SUSE Real Time Module 15 SP4 | kernel-source-rt | Affected |
Products at an unknown state of their lifecycle. | ||
SLES15-SP6-CHOST-BYOS | kernel-default | Released |
SLES15-SP6-CHOST-BYOS-Aliyun | kernel-default | Released |
SLES15-SP6-CHOST-BYOS-Azure | kernel-default | Released |
SLES15-SP6-CHOST-BYOS-EC2 | kernel-default | Released |
SLES15-SP6-CHOST-BYOS-GCE | kernel-default | Released |
Container Status | ||
suse/hpc/warewulf4-x86_64/sle-hpc-node | kernel-default | In progress |
suse/sles/15.5/libguestfs-tools:0.58.0 | kernel-kvmsmall | In progress |
suse/sle-micro/rt-5.5 | kernel-rt | In progress |
bci/bci-sle15-kernel-module-devel bci/bci-sle15-kernel-module-devel:15.6 | kernel-syms | In progress |
SUSE Timeline for this CVE
CVE page created: Wed May 1 10:00:36 2024CVE page last modified: Thu Jun 27 11:59:58 2024