Upstream information
Description
In the Linux kernel, the following vulnerability has been resolved: tcp: fix page frag corruption on page fault Steffen reported a TCP stream corruption for HTTP requests served by the apache web-server using a cifs mount-point and memory mapping the relevant file. The root cause is quite similar to the one addressed by commit 20eb4f29b602 ("net: fix sk_page_frag() recursion from memory reclaim"). Here the nested access to the task page frag is caused by a page fault on the (mmapped) user-space memory buffer coming from the cifs file. The page fault handler performs an smb transaction on a different socket, inside the same process context. Since sk->sk_allaction for such socket does not prevent the usage for the task_frag, the nested allocation modify "under the hood" the page frag in use by the outer sendmsg call, corrupting the stream. The overall relevant stack trace looks like the following: httpd 78268 [001] 3461630.850950: probe:tcp_sendmsg_locked: ffffffff91461d91 tcp_sendmsg_locked+0x1 ffffffff91462b57 tcp_sendmsg+0x27 ffffffff9139814e sock_sendmsg+0x3e ffffffffc06dfe1d smb_send_kvec+0x28 [...] ffffffffc06cfaf8 cifs_readpages+0x213 ffffffff90e83c4b read_pages+0x6b ffffffff90e83f31 __do_page_cache_readahead+0x1c1 ffffffff90e79e98 filemap_fault+0x788 ffffffff90eb0458 __do_fault+0x38 ffffffff90eb5280 do_fault+0x1a0 ffffffff90eb7c84 __handle_mm_fault+0x4d4 ffffffff90eb8093 handle_mm_fault+0xc3 ffffffff90c74f6d __do_page_fault+0x1ed ffffffff90c75277 do_page_fault+0x37 ffffffff9160111e page_fault+0x1e ffffffff9109e7b5 copyin+0x25 ffffffff9109eb40 _copy_from_iter_full+0xe0 ffffffff91462370 tcp_sendmsg_locked+0x5e0 ffffffff91462370 tcp_sendmsg_locked+0x5e0 ffffffff91462b57 tcp_sendmsg+0x27 ffffffff9139815c sock_sendmsg+0x4c ffffffff913981f7 sock_write_iter+0x97 ffffffff90f2cc56 do_iter_readv_writev+0x156 ffffffff90f2dff0 do_iter_write+0x80 ffffffff90f2e1c3 vfs_writev+0xa3 ffffffff90f2e27c do_writev+0x5c ffffffff90c042bb do_syscall_64+0x5b ffffffff916000ad entry_SYSCALL_64_after_hwframe+0x65 The cifs filesystem rightfully sets sk_allocations to GFP_NOFS, we can avoid the nesting using the sk page frag for allocation lacking the __GFP_FS flag. Do not define an additional mm-helper for that, as this is strictly tied to the sk page frag usage. v1 -> v2: - use a stricted sk_page_frag() check instead of reordering the code (Eric)SUSE information
Overall state of this security issue: Pending
This issue is currently rated as having moderate severity.
SUSE | |
---|---|
Base Score | 6.1 |
Vector | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L |
Attack Vector | Local |
Attack Complexity | Low |
Privileges Required | Low |
User Interaction | None |
Scope | Unchanged |
Confidentiality Impact | None |
Integrity Impact | High |
Availability Impact | Low |
CVSSv3 Version | 3.1 |
SUSE Security Advisories:
- SUSE-SU-2024:2008-1, published Wed Jun 12 12:32:06 UTC 2024
- SUSE-SU-2024:2011-1, published Wed Jun 12 20:31:16 UTC 2024
- SUSE-SU-2024:2019-1, published Thu Jun 13 12:36:27 UTC 2024
- SUSE-SU-2024:2189-1, published Tue Jun 25 08:31:08 UTC 2024
- SUSE-SU-2024:2190-1, published Tue Jun 25 12:32:30 UTC 2024
List of released packages
Product(s) | Fixed package version(s) | References |
---|---|---|
Container suse/sle-micro-rancher/5.3:latest Container suse/sle-micro-rancher/5.4:latest |
| |
Image SLES15-SP5-BYOS-GCE Image SLES15-SP5-GCE |
| |
SUSE Linux Enterprise Desktop 15 SP5 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP5-2024-2190 SUSE-SLE-Module-Development-Tools-15-SP5-2024-2190 SUSE-SLE-Product-WE-15-SP5-2024-2190 |
SUSE Linux Enterprise High Availability Extension 15 SP4 |
| Patchnames: SUSE-SLE-Product-HA-15-SP4-2024-2189 |
SUSE Linux Enterprise High Availability Extension 15 SP5 |
| Patchnames: SUSE-SLE-Product-HA-15-SP5-2024-2190 |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS |
| Patchnames: SUSE-SLE-Product-HPC-15-SP4-ESPOS-2024-2189 |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS |
| Patchnames: SUSE-SLE-Product-HPC-15-SP4-LTSS-2024-2189 |
SUSE Linux Enterprise High Performance Computing 15 SP5 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP5-2024-2190 SUSE-SLE-Module-Development-Tools-15-SP5-2024-2190 SUSE-SLE-Module-Legacy-15-SP5-2024-2190 SUSE-SLE-Module-Public-Cloud-15-SP5-2024-2019 |
SUSE Linux Enterprise Live Patching 15 SP4 | Patchnames: SUSE-SLE-Module-Live-Patching-15-SP4-2024-2189 | |
SUSE Linux Enterprise Live Patching 15 SP5 | Patchnames: SUSE-SLE-Module-Live-Patching-15-SP5-2024-2008 SUSE-SLE-Module-Live-Patching-15-SP5-2024-2190 | |
SUSE Linux Enterprise Micro 5.3 |
| Patchnames: SUSE-SLE-Micro-5.3-2024-2011 SUSE-SLE-Micro-5.3-2024-2189 |
SUSE Linux Enterprise Micro 5.4 |
| Patchnames: SUSE-SLE-Micro-5.4-2024-2011 SUSE-SLE-Micro-5.4-2024-2189 |
SUSE Linux Enterprise Micro 5.5 |
| Patchnames: SUSE-SLE-Micro-5.5-2024-2008 SUSE-SLE-Micro-5.5-2024-2190 |
SUSE Linux Enterprise Module for Basesystem 15 SP5 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP5-2024-2190 |
SUSE Linux Enterprise Module for Development Tools 15 SP5 |
| Patchnames: SUSE-SLE-Module-Development-Tools-15-SP5-2024-2190 |
SUSE Linux Enterprise Module for Legacy 15 SP5 |
| Patchnames: SUSE-SLE-Module-Legacy-15-SP5-2024-2190 |
SUSE Linux Enterprise Module for Public Cloud 15 SP5 |
| Patchnames: SUSE-SLE-Module-Public-Cloud-15-SP5-2024-2019 |
SUSE Linux Enterprise Real Time 15 SP5 SUSE Real Time Module 15 SP5 |
| Patchnames: SUSE-SLE-Module-RT-15-SP5-2024-2008 |
SUSE Linux Enterprise Server 15 SP4-LTSS |
| Patchnames: SUSE-SLE-Product-SLES-15-SP4-LTSS-2024-2189 |
SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 |
| Patchnames: SUSE-SLE-Module-Basesystem-15-SP5-2024-2190 SUSE-SLE-Module-Development-Tools-15-SP5-2024-2190 SUSE-SLE-Module-Legacy-15-SP5-2024-2190 SUSE-SLE-Module-Public-Cloud-15-SP5-2024-2019 SUSE-SLE-Product-WE-15-SP5-2024-2190 |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 |
| Patchnames: SUSE-SLE-Product-SLES_SAP-15-SP4-2024-2189 |
SUSE Linux Enterprise Workstation Extension 15 SP5 |
| Patchnames: SUSE-SLE-Product-WE-15-SP5-2024-2190 |
SUSE Manager Proxy 4.3 |
| Patchnames: SUSE-SLE-Product-SUSE-Manager-Proxy-4.3-2024-2189 |
SUSE Manager Retail Branch Server 4.3 |
| Patchnames: SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.3-2024-2189 |
SUSE Manager Server 4.3 |
| Patchnames: SUSE-SLE-Product-SUSE-Manager-Server-4.3-2024-2189 |
openSUSE Leap 15.5 |
| Patchnames: openSUSE-SLE-15.5-2024-2008 openSUSE-SLE-15.5-2024-2019 openSUSE-SLE-15.5-2024-2190 |
openSUSE Leap Micro 5.3 |
| Patchnames: openSUSE-Leap-Micro-5.3-2024-2011 openSUSE-Leap-Micro-5.3-2024-2189 |
openSUSE Leap Micro 5.4 |
| Patchnames: openSUSE-Leap-Micro-5.4-2024-2011 openSUSE-Leap-Micro-5.4-2024-2189 |
openSUSE Leap Micro 5.5 |
| Patchnames: openSUSE-Leap-Micro-5.5-2024-2008 openSUSE-Leap-Micro-5.5-2024-2190 |
First public cloud image revisions this CVE is fixed in:
- google/sles-15-sp5-byos-v20240628-arm64
- google/sles-15-sp5-byos-v20240628-x86-64
- google/sles-15-sp5-v20240628-arm64
- google/sles-15-sp5-v20240628-x86-64
- microsoft/suse-sle-micro-5-3-byos-v20240625-arm64
Status of this issue by product and package
Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.
Product(s) | Source package | State |
---|---|---|
Products under general support and receiving all security fixes. | ||
SLES15-SP5-CHOST-BYOS-Aliyun | kernel-default | In progress |
SLES15-SP5-CHOST-BYOS-Azure | kernel-default | In progress |
SLES15-SP5-CHOST-BYOS-EC2 | kernel-default | In progress |
SLES15-SP5-CHOST-BYOS-GCE | kernel-default | In progress |
SLES15-SP5-CHOST-BYOS-SAP-CCloud | kernel-default | In progress |
SUSE Enterprise Storage 7.1 | kernel-default | Affected |
SUSE Enterprise Storage 7.1 | kernel-source | Affected |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-64kb | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-default-base | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-docs | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-obs-build | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-syms | Released |
SUSE Linux Enterprise Desktop 15 SP5 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Desktop 15 SP6 | kernel-default | Already fixed |
SUSE Linux Enterprise Desktop 15 SP6 | kernel-source | Already fixed |
SUSE Linux Enterprise High Availability Extension 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise High Performance Computing 12 SP5 | kernel-default | Affected |
SUSE Linux Enterprise High Performance Computing 12 SP5 | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 12 SP5 | kernel-source-azure | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-64kb | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-azure | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-default-base | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-docs | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-obs-build | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-source-azure | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-syms | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-syms-azure | Released |
SUSE Linux Enterprise High Performance Computing 15 SP5 | kernel-zfcpdump | Released |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-default | Already fixed |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-source | Already fixed |
SUSE Linux Enterprise High Performance Computing 15 SP6 | kernel-source-azure | Already fixed |
SUSE Linux Enterprise Live Patching 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5-RT_Update_16 | Released |
SUSE Linux Enterprise Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_15 | Released |
SUSE Linux Enterprise Micro 5.1 | kernel-default | Affected |
SUSE Linux Enterprise Micro 5.1 | kernel-rt | Affected |
SUSE Linux Enterprise Micro 5.1 | kernel-source-rt | Affected |
SUSE Linux Enterprise Micro 5.2 | kernel-default | Affected |
SUSE Linux Enterprise Micro 5.2 | kernel-rt | Affected |
SUSE Linux Enterprise Micro 5.2 | kernel-source-rt | Affected |
SUSE Linux Enterprise Micro 5.3 | kernel-default | Released |
SUSE Linux Enterprise Micro 5.3 | kernel-default-base | Released |
SUSE Linux Enterprise Micro 5.3 | kernel-rt | Released |
SUSE Linux Enterprise Micro 5.3 | kernel-source-rt | Released |
SUSE Linux Enterprise Micro 5.4 | kernel-default | Released |
SUSE Linux Enterprise Micro 5.4 | kernel-default-base | Released |
SUSE Linux Enterprise Micro 5.4 | kernel-rt | Released |
SUSE Linux Enterprise Micro 5.4 | kernel-source-rt | Released |
SUSE Linux Enterprise Micro 5.5 | kernel-default | Released |
SUSE Linux Enterprise Micro 5.5 | kernel-default-base | Released |
SUSE Linux Enterprise Micro 5.5 | kernel-rt | Released |
SUSE Linux Enterprise Micro 5.5 | kernel-source-rt | Released |
SUSE Linux Enterprise Micro for Rancher 5.3 | kernel-default | Released |
SUSE Linux Enterprise Micro for Rancher 5.3 | kernel-rt | Released |
SUSE Linux Enterprise Micro for Rancher 5.3 | kernel-source-rt | Released |
SUSE Linux Enterprise Micro for Rancher 5.4 | kernel-default | Released |
SUSE Linux Enterprise Micro for Rancher 5.4 | kernel-rt | Released |
SUSE Linux Enterprise Micro for Rancher 5.4 | kernel-source-rt | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP5 | kernel-64kb | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP5 | kernel-default-base | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP5 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP6 | kernel-default | Already fixed |
SUSE Linux Enterprise Module for Basesystem 15 SP6 | kernel-source | Already fixed |
SUSE Linux Enterprise Module for Development Tools 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP5 | kernel-docs | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP5 | kernel-obs-build | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP5 | kernel-syms | Released |
SUSE Linux Enterprise Module for Development Tools 15 SP6 | kernel-default | Already fixed |
SUSE Linux Enterprise Module for Development Tools 15 SP6 | kernel-source | Already fixed |
SUSE Linux Enterprise Module for Legacy 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Module for Public Cloud 15 SP5 | kernel-azure | Released |
SUSE Linux Enterprise Module for Public Cloud 15 SP5 | kernel-source-azure | Released |
SUSE Linux Enterprise Module for Public Cloud 15 SP5 | kernel-syms-azure | Released |
SUSE Linux Enterprise Module for Public Cloud 15 SP6 | kernel-source-azure | Already fixed |
SUSE Linux Enterprise Real Time 12 SP5 | kernel-source-rt | Affected |
SUSE Linux Enterprise Real Time 15 SP5 | kernel-rt | Released |
SUSE Linux Enterprise Real Time 15 SP5 | kernel-rt_debug | Released |
SUSE Linux Enterprise Real Time 15 SP5 | kernel-source-rt | Released |
SUSE Linux Enterprise Real Time 15 SP5 | kernel-syms-rt | Released |
SUSE Linux Enterprise Real Time 15 SP6 | kernel-source-rt | Already fixed |
SUSE Linux Enterprise Server 12 SP5 | kernel-default | Affected |
SUSE Linux Enterprise Server 12 SP5 | kernel-source | Affected |
SUSE Linux Enterprise Server 12 SP5 | kernel-source-azure | Affected |
SUSE Linux Enterprise Server 15 SP5 | kernel-64kb | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-azure | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-default-base | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-docs | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-obs-build | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-source-azure | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-syms | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-syms-azure | Released |
SUSE Linux Enterprise Server 15 SP5 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Server 15 SP6 | kernel-default | Already fixed |
SUSE Linux Enterprise Server 15 SP6 | kernel-source | Already fixed |
SUSE Linux Enterprise Server 15 SP6 | kernel-source-azure | Already fixed |
SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-default | Affected |
SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-source | Affected |
SUSE Linux Enterprise Server for SAP Applications 12 SP5 | kernel-source-azure | Affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-64kb | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-default | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-default-base | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-docs | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-obs-build | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-source | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-source-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-syms | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-syms-azure | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP5 | kernel-zfcpdump | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-default | Already fixed |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-source | Already fixed |
SUSE Linux Enterprise Server for SAP Applications 15 SP6 | kernel-source-azure | Already fixed |
SUSE Linux Enterprise Workstation Extension 15 SP5 | kernel-default | Released |
SUSE Manager Proxy 4.3 | kernel-64kb | Affected |
SUSE Manager Proxy 4.3 | kernel-default | Released |
SUSE Manager Proxy 4.3 | kernel-default-base | Released |
SUSE Manager Proxy 4.3 | kernel-docs | Affected |
SUSE Manager Proxy 4.3 | kernel-obs-build | Affected |
SUSE Manager Proxy 4.3 | kernel-source | Released |
SUSE Manager Proxy 4.3 | kernel-syms | Released |
SUSE Manager Proxy 4.3 | kernel-zfcpdump | Affected |
SUSE Manager Retail Branch Server 4.3 | kernel-64kb | Affected |
SUSE Manager Retail Branch Server 4.3 | kernel-default | Released |
SUSE Manager Retail Branch Server 4.3 | kernel-default-base | Released |
SUSE Manager Retail Branch Server 4.3 | kernel-docs | Affected |
SUSE Manager Retail Branch Server 4.3 | kernel-obs-build | Affected |
SUSE Manager Retail Branch Server 4.3 | kernel-source | Released |
SUSE Manager Retail Branch Server 4.3 | kernel-syms | Affected |
SUSE Manager Retail Branch Server 4.3 | kernel-zfcpdump | Affected |
SUSE Manager Server 4.3 | kernel-64kb | Affected |
SUSE Manager Server 4.3 | kernel-default | Released |
SUSE Manager Server 4.3 | kernel-default-base | Released |
SUSE Manager Server 4.3 | kernel-docs | Affected |
SUSE Manager Server 4.3 | kernel-obs-build | Affected |
SUSE Manager Server 4.3 | kernel-source | Released |
SUSE Manager Server 4.3 | kernel-syms | Released |
SUSE Manager Server 4.3 | kernel-zfcpdump | Released |
SUSE Real Time Module 15 SP5 | kernel-rt | Released |
SUSE Real Time Module 15 SP5 | kernel-rt_debug | Released |
SUSE Real Time Module 15 SP5 | kernel-source-rt | Released |
SUSE Real Time Module 15 SP5 | kernel-syms-rt | Released |
SUSE Real Time Module 15 SP6 | kernel-source-rt | Already fixed |
openSUSE Leap 15.5 | dtb-aarch64 | Released |
openSUSE Leap 15.5 | dtb-armv7l | Released |
openSUSE Leap 15.5 | kernel-64kb | Released |
openSUSE Leap 15.5 | kernel-azure | Released |
openSUSE Leap 15.5 | kernel-debug | Released |
openSUSE Leap 15.5 | kernel-default | Released |
openSUSE Leap 15.5 | kernel-docs | Released |
openSUSE Leap 15.5 | kernel-kvmsmall | Released |
openSUSE Leap 15.5 | kernel-lpae | Released |
openSUSE Leap 15.5 | kernel-obs-build | Released |
openSUSE Leap 15.5 | kernel-obs-qa | Released |
openSUSE Leap 15.5 | kernel-rt | Released |
openSUSE Leap 15.5 | kernel-rt_debug | Released |
openSUSE Leap 15.5 | kernel-source | Released |
openSUSE Leap 15.5 | kernel-source-azure | Released |
openSUSE Leap 15.5 | kernel-source-rt | Released |
openSUSE Leap 15.5 | kernel-syms | Released |
openSUSE Leap 15.5 | kernel-syms-azure | Released |
openSUSE Leap 15.5 | kernel-syms-rt | Released |
openSUSE Leap 15.5 | kernel-zfcpdump | Released |
openSUSE Leap 15.6 | kernel-default | Already fixed |
openSUSE Leap 15.6 | kernel-source | Already fixed |
openSUSE Leap 15.6 | kernel-source-azure | Already fixed |
openSUSE Leap 15.6 | kernel-source-rt | Already fixed |
openSUSE Leap Micro 5.4 | kernel-default | Released |
openSUSE Leap Micro 5.4 | kernel-rt | Released |
Products under Long Term Service Pack support and receiving important and critical security fixes. | ||
SLES15-SP4-CHOST-BYOS | kernel-default | In progress |
SLES15-SP4-CHOST-BYOS-Aliyun | kernel-default | In progress |
SLES15-SP4-CHOST-BYOS-Azure | kernel-default | In progress |
SLES15-SP4-CHOST-BYOS-EC2 | kernel-default | In progress |
SLES15-SP4-CHOST-BYOS-GCE | kernel-default | In progress |
SLES15-SP4-CHOST-BYOS-SAP-CCloud | kernel-default | In progress |
SUSE Linux Enterprise Desktop 15 SP4 | kernel-64kb | Affected |
SUSE Linux Enterprise Desktop 15 SP4 | kernel-default | Affected |
SUSE Linux Enterprise Desktop 15 SP4 | kernel-docs | Affected |
SUSE Linux Enterprise Desktop 15 SP4 | kernel-obs-build | Affected |
SUSE Linux Enterprise Desktop 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise Desktop 15 SP4 | kernel-syms | Affected |
SUSE Linux Enterprise Desktop 15 SP4 | kernel-zfcpdump | Affected |
SUSE Linux Enterprise Desktop 15 SP4 LTSS | kernel-default | Released |
SUSE Linux Enterprise Desktop 15 SP4 LTSS | kernel-docs | Released |
SUSE Linux Enterprise Desktop 15 SP4 LTSS | kernel-obs-build | Released |
SUSE Linux Enterprise Desktop 15 SP4 LTSS | kernel-source | Released |
SUSE Linux Enterprise Desktop 15 SP4 LTSS | kernel-syms | Released |
SUSE Linux Enterprise High Availability Extension 15 SP4 | kernel-default | Released |
SUSE Linux Enterprise High Performance Computing 15 SP2 | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | kernel-default | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP3 | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-default | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4 | kernel-64kb | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4 | kernel-default | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4 | kernel-docs | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4 | kernel-obs-build | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4 | kernel-syms | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4 | kernel-zfcpdump | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-64kb | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-default | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-default-base | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-docs | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-obs-build | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-source | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-syms | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-64kb | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-default | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-default-base | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-docs | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-obs-build | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-source | Released |
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-syms | Released |
SUSE Linux Enterprise Live Patching 15 SP4 | kernel-default | Released |
SUSE Linux Enterprise Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_27 | Released |
SUSE Linux Enterprise Module for Basesystem 15 SP2 | kernel-source | Affected |
SUSE Linux Enterprise Module for Basesystem 15 SP3 | kernel-source | Affected |
SUSE Linux Enterprise Module for Basesystem 15 SP4 | kernel-64kb | Affected |
SUSE Linux Enterprise Module for Basesystem 15 SP4 | kernel-default | Affected |
SUSE Linux Enterprise Module for Basesystem 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise Module for Basesystem 15 SP4 | kernel-zfcpdump | Affected |
SUSE Linux Enterprise Module for Development Tools 15 SP2 | kernel-source | Affected |
SUSE Linux Enterprise Module for Development Tools 15 SP3 | kernel-source | Affected |
SUSE Linux Enterprise Module for Development Tools 15 SP4 | kernel-docs | Affected |
SUSE Linux Enterprise Module for Development Tools 15 SP4 | kernel-obs-build | Affected |
SUSE Linux Enterprise Module for Development Tools 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise Module for Development Tools 15 SP4 | kernel-syms | Affected |
SUSE Linux Enterprise Module for Legacy 15 SP4 | kernel-default | Affected |
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE | kernel-default | Not affected |
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE | kernel-source | Not affected |
SUSE Linux Enterprise Server 15 SP2 | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP2-LTSS | kernel-default | Affected |
SUSE Linux Enterprise Server 15 SP2-LTSS | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP3 | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP3-LTSS | kernel-default | Affected |
SUSE Linux Enterprise Server 15 SP3-LTSS | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP4 | kernel-64kb | Affected |
SUSE Linux Enterprise Server 15 SP4 | kernel-default | Affected |
SUSE Linux Enterprise Server 15 SP4 | kernel-docs | Affected |
SUSE Linux Enterprise Server 15 SP4 | kernel-obs-build | Affected |
SUSE Linux Enterprise Server 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP4 | kernel-syms | Affected |
SUSE Linux Enterprise Server 15 SP4 | kernel-zfcpdump | Affected |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-64kb | Released |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-default | Released |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-default-base | Released |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-docs | Released |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-obs-build | Released |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-source | Released |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-syms | Released |
SUSE Linux Enterprise Server 15 SP4-LTSS | kernel-zfcpdump | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP2 | kernel-default | Affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP2 | kernel-source | Affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP3 | kernel-default | Affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP3 | kernel-source | Affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-64kb | Affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-default | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-default-base | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-docs | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-obs-build | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-source | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-syms | Released |
SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kernel-zfcpdump | Affected |
Products past their end of life and not receiving proactive updates anymore. | ||
HPE Helion OpenStack 8 | kernel-source | Affected |
SUSE CaaS Platform 4.0 | kernel-source | Affected |
SUSE Enterprise Storage 6 | kernel-source | Affected |
SUSE Enterprise Storage 7 | kernel-source | Affected |
SUSE Linux Enterprise Desktop 12 SP3 | kernel-source | Affected |
SUSE Linux Enterprise Desktop 12 SP4 | kernel-source | Affected |
SUSE Linux Enterprise Desktop 15 | kernel-source | Affected |
SUSE Linux Enterprise Desktop 15 SP1 | kernel-source | Affected |
SUSE Linux Enterprise Desktop 15 SP2 | kernel-source | Affected |
SUSE Linux Enterprise Desktop 15 SP3 | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP1 | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15-ESPOS | kernel-source | Affected |
SUSE Linux Enterprise High Performance Computing 15-LTSS | kernel-source | Affected |
SUSE Linux Enterprise Micro 5.0 | kernel-default | Affected |
SUSE Linux Enterprise Module for Basesystem 15 | kernel-source | Affected |
SUSE Linux Enterprise Module for Basesystem 15 SP1 | kernel-source | Affected |
SUSE Linux Enterprise Module for Development Tools 15 | kernel-source | Affected |
SUSE Linux Enterprise Module for Development Tools 15 SP1 | kernel-source | Affected |
SUSE Linux Enterprise Real Time 15 SP2 | kernel-source | Affected |
SUSE Linux Enterprise Real Time 15 SP3 | kernel-source | Affected |
SUSE Linux Enterprise Real Time 15 SP3 | kernel-source-rt | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-default | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-docs | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-obs-build | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-rt | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-rt_debug | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-source | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-source-rt | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-syms | Affected |
SUSE Linux Enterprise Real Time 15 SP4 | kernel-syms-rt | Affected |
SUSE Linux Enterprise Server 11 SP4 | kernel-source | Not affected |
SUSE Linux Enterprise Server 11 SP4 LTSS | kernel-default | Not affected |
SUSE Linux Enterprise Server 11 SP4 LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 11 SP4-LTSS | kernel-source | Not affected |
SUSE Linux Enterprise Server 12 SP3 | kernel-source | Affected |
SUSE Linux Enterprise Server 12 SP3-BCL | kernel-source | Affected |
SUSE Linux Enterprise Server 12 SP3-ESPOS | kernel-source | Affected |
SUSE Linux Enterprise Server 12 SP3-LTSS | kernel-source | Affected |
SUSE Linux Enterprise Server 12 SP4 | kernel-source | Affected |
SUSE Linux Enterprise Server 12 SP4-ESPOS | kernel-source | Affected |
SUSE Linux Enterprise Server 12 SP4-LTSS | kernel-default | Affected |
SUSE Linux Enterprise Server 12 SP4-LTSS | kernel-source | Affected |
SUSE Linux Enterprise Server 15 | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP1 | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP1-BCL | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP1-LTSS | kernel-default | Affected |
SUSE Linux Enterprise Server 15 SP1-LTSS | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP2-BCL | kernel-source | Affected |
SUSE Linux Enterprise Server 15 SP3-BCL | kernel-source | Affected |
SUSE Linux Enterprise Server 15-LTSS | kernel-default | Affected |
SUSE Linux Enterprise Server 15-LTSS | kernel-source | Affected |
SUSE Linux Enterprise Server for SAP Applications 12 SP3 | kernel-source | Affected |
SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-default | Affected |
SUSE Linux Enterprise Server for SAP Applications 12 SP4 | kernel-source | Affected |
SUSE Linux Enterprise Server for SAP Applications 15 | kernel-source | Affected |
SUSE Linux Enterprise Server for SAP Applications 15 SP1 | kernel-source | Affected |
SUSE Linux Enterprise Workstation Extension 15 SP4 | kernel-default | Affected |
SUSE Manager Proxy 4.0 | kernel-source | Affected |
SUSE Manager Proxy 4.1 | kernel-source | Affected |
SUSE Manager Proxy 4.2 | kernel-source | Affected |
SUSE Manager Retail Branch Server 4.0 | kernel-source | Affected |
SUSE Manager Retail Branch Server 4.1 | kernel-source | Affected |
SUSE Manager Retail Branch Server 4.2 | kernel-source | Affected |
SUSE Manager Server 4.0 | kernel-source | Affected |
SUSE Manager Server 4.1 | kernel-source | Affected |
SUSE Manager Server 4.2 | kernel-source | Affected |
SUSE OpenStack Cloud 8 | kernel-source | Affected |
SUSE OpenStack Cloud 9 | kernel-default | Affected |
SUSE OpenStack Cloud 9 | kernel-source | Affected |
SUSE OpenStack Cloud Crowbar 8 | kernel-source | Affected |
SUSE OpenStack Cloud Crowbar 9 | kernel-default | Affected |
SUSE OpenStack Cloud Crowbar 9 | kernel-source | Affected |
SUSE Real Time Module 15 SP3 | kernel-source-rt | Affected |
SUSE Real Time Module 15 SP4 | kernel-rt | Affected |
SUSE Real Time Module 15 SP4 | kernel-rt_debug | Affected |
SUSE Real Time Module 15 SP4 | kernel-source-rt | Affected |
SUSE Real Time Module 15 SP4 | kernel-syms-rt | Affected |
openSUSE Leap 15.4 | dtb-aarch64 | Released |
openSUSE Leap 15.4 | dtb-armv7l | Released |
openSUSE Leap 15.4 | kernel-64kb | Released |
openSUSE Leap 15.4 | kernel-debug | Released |
openSUSE Leap 15.4 | kernel-default | Released |
openSUSE Leap 15.4 | kernel-docs | Released |
openSUSE Leap 15.4 | kernel-kvmsmall | Released |
openSUSE Leap 15.4 | kernel-lpae | Released |
openSUSE Leap 15.4 | kernel-obs-build | Released |
openSUSE Leap 15.4 | kernel-obs-qa | Released |
openSUSE Leap 15.4 | kernel-source | Released |
openSUSE Leap 15.4 | kernel-syms | Released |
openSUSE Leap 15.4 | kernel-zfcpdump | Released |
openSUSE Leap Micro 5.3 | kernel-default | Released |
openSUSE Leap Micro 5.3 | kernel-rt | Released |
Container Status | ||
suse/sle-micro-rancher/5.3 suse/sle-micro-rancher/5.4 | kernel-default | Released |
suse/hpc/warewulf4-x86_64/sle-hpc-node | kernel-default | In progress |
suse/sles/15.4/libguestfs-tools:0.49.0 suse/sles/15.5/libguestfs-tools:0.58.0 | kernel-kvmsmall | In progress |
rancher/elemental-teal-rt/5.3 rancher/elemental-teal-rt/5.4 suse/sle-micro/rt-5.5 | kernel-rt | In progress |
bci/bci-sle15-kernel-module-devel | kernel-syms | In progress |
SUSE Timeline for this CVE
CVE page created: Fri May 24 18:00:41 2024CVE page last modified: Sat Jun 29 00:38:38 2024