SUSE-SU-2024:0900-2
- Source
- https://www.suse.com/support/update/announcement/2024/suse-su-20240900-2/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2024:0900-2.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2024:0900-2
- Upstream
- Related
- Published
- 2024-03-15T12:19:06Z
- Modified
- 2025-05-02T04:30:13.264420Z
- Summary
- Security update for the Linux Kernel
- Details
-
The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.
The following security bugs were fixed:
- CVE-2023-6270: Fixed a use-after-free issue in aoecmdcfgpkts (bsc#1218562).
- CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).
- CVE-2023-52559: Fixed a bug by avoiding memory allocation in iommu_suspend (bsc#1220933).
- CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).
- CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).
- CVE-2024-26607: Fixed a probing race issue in sii902x: (bsc#1220736).
- CVE-2023-52467: Fixed a null pointer dereference in ofsysconregister (bsc#1220433).
- CVE-2024-26591: Fixed re-attachment branch in bpftracingprog_attach (bsc#1220254).
- CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTRTOFLOW_KEYS (bsc#1220255).
- CVE-2023-52484: Fixed a soft lockup triggered by armsmmumminvalidaterange (bsc#1220797).
- CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).
- CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).
- CVE-2024-0607: Fixed 64-bit load issue in nftbyteordereval() (bsc#1218915).
- CVE-2023-6817: Fixed use-after-free in nftpipapowalk (bsc#1218195).
- CVE-2024-26622: Fixed UAF write bug in tomoyowritecontrol() (bsc#1220825).
- CVE-2024-23850: Fixed double free of anonymous device after snapshot creation failure (bsc#1219126).
- CVE-2023-52452: Fixed Fix accesses to uninit stack slots (bsc#1220257).
- CVE-2023-52457: Fixed skipped resource freeing if pmruntimeresumeandget() failed (bsc#1220350).
- CVE-2023-52456: Fixed tx statemachine deadlock (bsc#1220364).
- CVE-2023-52451: Fixed access beyond end of drmem array (bsc#1220250).
- CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier (bsc#1220238).
- CVE-2021-46923: Fixed reference leakage in fs/mount_setattr (bsc#1220457).
- CVE-2023-52447: Fixed mapfdput_ptr() signature kABI workaround (bsc#1220251).
- CVE-2024-26598: Fixed potential UAF in LPI translation cache (bsc#1220326).
- CVE-2024-26603: Fixed infinite loop via #PF handling (bsc#1220335).
- CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).
- CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).
- CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240).
- CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).
- CVE-2024-26593: Fixed block process call transactions (bsc#1220009).
- CVE-2024-26586: Fixed stack corruption (bsc#1220243).
- CVE-2024-26595: Fixed NULL pointer dereference in error path (bsc#1220344).
- CVE-2023-52464: Fixed possible out-of-bounds string access (bsc#1220330)
- CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2rgrpdump (bsc#1220253).
- CVE-2024-1151: Fixed unlimited number of recursions from action sets (bsc#1219835).
- CVE-2023-5197: Fixed se-after-free due to addition and removal of rules from chain bindings within the same transaction (bsc#1218216).
- CVE-2024-23849: Fixed array-index-out-of-bounds in rdscmsgrecv (bsc#1219127).
- CVE-2023-52429: Fixed potential DoS in dmtablecreate in drivers/md/dm-table.c (bsc#1219827).
- CVE-2024-23851: Fixed crash in copy_params in drivers/md/dm-ioctl.c (bsc#1219146).
The following non-security bugs were fixed:
- bpf: Fix verification of indirect var-off stack access (git-fixes).
- bpf: Guard stack limits against 32bit overflow (git-fixes).
- KVM: VMX: Move VERW closer to VMentry for MDS mitigation (git-fixes).
- KVM: VMX: Use BT+JNC, i.e. EFLAGS.CF to select VMRESUME vs. VMLAUNCH (git-fixes).
- NFS: avoid infinite loop in pnfsupdatelayout (bsc#1219633).
- nvme: move nvmestopkeep_alive() back to original position (bsc#1211515).
- nvme: remove nvmeallocrequest and nvmeallocrequest_qid (bsc#1214064).
- nvme: start keep-alive after admin queue setup (bsc#1211515).
- x86/asm: Add ASMRIP() macro for x86-64 (%rip) suffix (git-fixes).
- x86/bugs: Add asm helpers for executing VERW (git-fixes).
- x86/bugs: Use ALTERNATIVE() instead of mdsuserclear static key (git-fixes).
- x86/entry_32: Add VERW just before userspace transition (git-fixes).
- x86/entry_64: Add VERW just before userspace transition (git-fixes).
- References
-
- https://www.suse.com/support/update/announcement/2024/suse-su-20240900-2/
- https://bugzilla.suse.com/1211515
- https://bugzilla.suse.com/1213456
- https://bugzilla.suse.com/1214064
- https://bugzilla.suse.com/1218195
- https://bugzilla.suse.com/1218216
- https://bugzilla.suse.com/1218562
- https://bugzilla.suse.com/1218915
- https://bugzilla.suse.com/1219073
- https://bugzilla.suse.com/1219126
- https://bugzilla.suse.com/1219127
- https://bugzilla.suse.com/1219146
- https://bugzilla.suse.com/1219295
- https://bugzilla.suse.com/1219633
- https://bugzilla.suse.com/1219653
- https://bugzilla.suse.com/1219827
- https://bugzilla.suse.com/1219835
- https://bugzilla.suse.com/1220009
- https://bugzilla.suse.com/1220140
- https://bugzilla.suse.com/1220187
- https://bugzilla.suse.com/1220238
- https://bugzilla.suse.com/1220240
- https://bugzilla.suse.com/1220241
- https://bugzilla.suse.com/1220243
- https://bugzilla.suse.com/1220250
- https://bugzilla.suse.com/1220251
- https://bugzilla.suse.com/1220253
- https://bugzilla.suse.com/1220254
- https://bugzilla.suse.com/1220255
- https://bugzilla.suse.com/1220257
- https://bugzilla.suse.com/1220326
- https://bugzilla.suse.com/1220328
- https://bugzilla.suse.com/1220330
- https://bugzilla.suse.com/1220335
- https://bugzilla.suse.com/1220344
- https://bugzilla.suse.com/1220350
- https://bugzilla.suse.com/1220364
- https://bugzilla.suse.com/1220398
- https://bugzilla.suse.com/1220409
- https://bugzilla.suse.com/1220433
- https://bugzilla.suse.com/1220444
- https://bugzilla.suse.com/1220457
- https://bugzilla.suse.com/1220459
- https://bugzilla.suse.com/1220469
- https://bugzilla.suse.com/1220649
- https://bugzilla.suse.com/1220735
- https://bugzilla.suse.com/1220736
- https://bugzilla.suse.com/1220796
- https://bugzilla.suse.com/1220797
- https://bugzilla.suse.com/1220825
- https://bugzilla.suse.com/1220845
- https://bugzilla.suse.com/1220917
- https://bugzilla.suse.com/1220930
- https://bugzilla.suse.com/1220931
- https://bugzilla.suse.com/1220933
- https://www.suse.com/security/cve/CVE-2019-25162
- https://www.suse.com/security/cve/CVE-2021-46923
- https://www.suse.com/security/cve/CVE-2021-46924
- https://www.suse.com/security/cve/CVE-2021-46932
- https://www.suse.com/security/cve/CVE-2021-46934
- https://www.suse.com/security/cve/CVE-2021-47083
- https://www.suse.com/security/cve/CVE-2022-48627
- https://www.suse.com/security/cve/CVE-2023-28746
- https://www.suse.com/security/cve/CVE-2023-5197
- https://www.suse.com/security/cve/CVE-2023-52340
- https://www.suse.com/security/cve/CVE-2023-52429
- https://www.suse.com/security/cve/CVE-2023-52439
- https://www.suse.com/security/cve/CVE-2023-52443
- https://www.suse.com/security/cve/CVE-2023-52445
- https://www.suse.com/security/cve/CVE-2023-52447
- https://www.suse.com/security/cve/CVE-2023-52448
- https://www.suse.com/security/cve/CVE-2023-52449
- https://www.suse.com/security/cve/CVE-2023-52451
- https://www.suse.com/security/cve/CVE-2023-52452
- https://www.suse.com/security/cve/CVE-2023-52456
- https://www.suse.com/security/cve/CVE-2023-52457
- https://www.suse.com/security/cve/CVE-2023-52463
- https://www.suse.com/security/cve/CVE-2023-52464
- https://www.suse.com/security/cve/CVE-2023-52467
- https://www.suse.com/security/cve/CVE-2023-52475
- https://www.suse.com/security/cve/CVE-2023-52478
- https://www.suse.com/security/cve/CVE-2023-52482
- https://www.suse.com/security/cve/CVE-2023-52484
- https://www.suse.com/security/cve/CVE-2023-52530
- https://www.suse.com/security/cve/CVE-2023-52531
- https://www.suse.com/security/cve/CVE-2023-52559
- https://www.suse.com/security/cve/CVE-2023-6270
- https://www.suse.com/security/cve/CVE-2023-6817
- https://www.suse.com/security/cve/CVE-2024-0607
- https://www.suse.com/security/cve/CVE-2024-1151
- https://www.suse.com/security/cve/CVE-2024-23849
- https://www.suse.com/security/cve/CVE-2024-23850
- https://www.suse.com/security/cve/CVE-2024-23851
- https://www.suse.com/security/cve/CVE-2024-26585
- https://www.suse.com/security/cve/CVE-2024-26586
- https://www.suse.com/security/cve/CVE-2024-26589
- https://www.suse.com/security/cve/CVE-2024-26591
- https://www.suse.com/security/cve/CVE-2024-26593
- https://www.suse.com/security/cve/CVE-2024-26595
- https://www.suse.com/security/cve/CVE-2024-26598
- https://www.suse.com/security/cve/CVE-2024-26602
- https://www.suse.com/security/cve/CVE-2024-26603
- https://www.suse.com/security/cve/CVE-2024-26607
- https://www.suse.com/security/cve/CVE-2024-26622
Affected packages
SUSE:Manager Proxy 4.3
kernel-default
Package
- Name
- kernel-default
- Purl
- pkg:rpm/suse/kernel-default&distro=SUSE%20Manager%20Proxy%204.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.14.21-150400.24.111.2
Ecosystem specific
{
"binaries": [
{
"kernel-source": "5.14.21-150400.24.111.1",
"kernel-devel": "5.14.21-150400.24.111.1",
"kernel-syms": "5.14.21-150400.24.111.1",
"kernel-default-devel": "5.14.21-150400.24.111.2",
"kernel-default": "5.14.21-150400.24.111.2",
"kernel-default-base": "5.14.21-150400.24.111.2.150400.24.52.1",
"kernel-macros": "5.14.21-150400.24.111.1"
}
]
}kernel-default-base
Package
- Name
- kernel-default-base
- Purl
- pkg:rpm/suse/kernel-default-base&distro=SUSE%20Manager%20Proxy%204.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.14.21-150400.24.111.2.150400.24.52.1
Ecosystem specific
{
"binaries": [
{
"kernel-source": "5.14.21-150400.24.111.1",
"kernel-devel": "5.14.21-150400.24.111.1",
"kernel-syms": "5.14.21-150400.24.111.1",
"kernel-default-devel": "5.14.21-150400.24.111.2",
"kernel-default": "5.14.21-150400.24.111.2",
"kernel-default-base": "5.14.21-150400.24.111.2.150400.24.52.1",
"kernel-macros": "5.14.21-150400.24.111.1"
}
]
}kernel-source
Package
- Name
- kernel-source
- Purl
- pkg:rpm/suse/kernel-source&distro=SUSE%20Manager%20Proxy%204.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.14.21-150400.24.111.1
Ecosystem specific
{
"binaries": [
{
"kernel-source": "5.14.21-150400.24.111.1",
"kernel-devel": "5.14.21-150400.24.111.1",
"kernel-syms": "5.14.21-150400.24.111.1",
"kernel-default-devel": "5.14.21-150400.24.111.2",
"kernel-default": "5.14.21-150400.24.111.2",
"kernel-default-base": "5.14.21-150400.24.111.2.150400.24.52.1",
"kernel-macros": "5.14.21-150400.24.111.1"
}
]
}kernel-syms
Package
- Name
- kernel-syms
- Purl
- pkg:rpm/suse/kernel-syms&distro=SUSE%20Manager%20Proxy%204.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.14.21-150400.24.111.1
Ecosystem specific
{
"binaries": [
{
"kernel-source": "5.14.21-150400.24.111.1",
"kernel-devel": "5.14.21-150400.24.111.1",
"kernel-syms": "5.14.21-150400.24.111.1",
"kernel-default-devel": "5.14.21-150400.24.111.2",
"kernel-default": "5.14.21-150400.24.111.2",
"kernel-default-base": "5.14.21-150400.24.111.2.150400.24.52.1",
"kernel-macros": "5.14.21-150400.24.111.1"
}
]
}SUSE:Manager Server 4.3
kernel-default
Package
- Name
- kernel-default
- Purl
- pkg:rpm/suse/kernel-default&distro=SUSE%20Manager%20Server%204.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.14.21-150400.24.111.2
Ecosystem specific
{
"binaries": [
{
"kernel-devel": "5.14.21-150400.24.111.1",
"kernel-syms": "5.14.21-150400.24.111.1",
"kernel-default": "5.14.21-150400.24.111.2",
"kernel-macros": "5.14.21-150400.24.111.1",
"kernel-zfcpdump": "5.14.21-150400.24.111.2",
"kernel-default-devel": "5.14.21-150400.24.111.2",
"kernel-default-base": "5.14.21-150400.24.111.2.150400.24.52.1",
"kernel-source": "5.14.21-150400.24.111.1"
}
]
}kernel-default-base
Package
- Name
- kernel-default-base
- Purl
- pkg:rpm/suse/kernel-default-base&distro=SUSE%20Manager%20Server%204.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.14.21-150400.24.111.2.150400.24.52.1
Ecosystem specific
{
"binaries": [
{
"kernel-devel": "5.14.21-150400.24.111.1",
"kernel-syms": "5.14.21-150400.24.111.1",
"kernel-default": "5.14.21-150400.24.111.2",
"kernel-macros": "5.14.21-150400.24.111.1",
"kernel-zfcpdump": "5.14.21-150400.24.111.2",
"kernel-default-devel": "5.14.21-150400.24.111.2",
"kernel-default-base": "5.14.21-150400.24.111.2.150400.24.52.1",
"kernel-source": "5.14.21-150400.24.111.1"
}
]
}kernel-source
Package
- Name
- kernel-source
- Purl
- pkg:rpm/suse/kernel-source&distro=SUSE%20Manager%20Server%204.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.14.21-150400.24.111.1
Ecosystem specific
{
"binaries": [
{
"kernel-devel": "5.14.21-150400.24.111.1",
"kernel-syms": "5.14.21-150400.24.111.1",
"kernel-default": "5.14.21-150400.24.111.2",
"kernel-macros": "5.14.21-150400.24.111.1",
"kernel-zfcpdump": "5.14.21-150400.24.111.2",
"kernel-default-devel": "5.14.21-150400.24.111.2",
"kernel-default-base": "5.14.21-150400.24.111.2.150400.24.52.1",
"kernel-source": "5.14.21-150400.24.111.1"
}
]
}kernel-syms
Package
- Name
- kernel-syms
- Purl
- pkg:rpm/suse/kernel-syms&distro=SUSE%20Manager%20Server%204.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.14.21-150400.24.111.1
Ecosystem specific
{
"binaries": [
{
"kernel-devel": "5.14.21-150400.24.111.1",
"kernel-syms": "5.14.21-150400.24.111.1",
"kernel-default": "5.14.21-150400.24.111.2",
"kernel-macros": "5.14.21-150400.24.111.1",
"kernel-zfcpdump": "5.14.21-150400.24.111.2",
"kernel-default-devel": "5.14.21-150400.24.111.2",
"kernel-default-base": "5.14.21-150400.24.111.2.150400.24.52.1",
"kernel-source": "5.14.21-150400.24.111.1"
}
]
}kernel-zfcpdump
Package
- Name
- kernel-zfcpdump
- Purl
- pkg:rpm/suse/kernel-zfcpdump&distro=SUSE%20Manager%20Server%204.3
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed5.14.21-150400.24.111.2
Ecosystem specific
{
"binaries": [
{
"kernel-devel": "5.14.21-150400.24.111.1",
"kernel-syms": "5.14.21-150400.24.111.1",
"kernel-default": "5.14.21-150400.24.111.2",
"kernel-macros": "5.14.21-150400.24.111.1",
"kernel-zfcpdump": "5.14.21-150400.24.111.2",
"kernel-default-devel": "5.14.21-150400.24.111.2",
"kernel-default-base": "5.14.21-150400.24.111.2.150400.24.52.1",
"kernel-source": "5.14.21-150400.24.111.1"
}
]
}