{"affected":[{"ecosystem_specific":{"binaries":[{"kernel-rt":"5.14.21-150400.15.71.1","kernel-source-rt":"5.14.21-150400.15.71.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","name":"kernel-rt","purl":"pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.71.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-rt":"5.14.21-150400.15.71.1","kernel-source-rt":"5.14.21-150400.15.71.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","name":"kernel-source-rt","purl":"pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.71.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-rt":"5.14.21-150400.15.71.1","kernel-source-rt":"5.14.21-150400.15.71.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","name":"kernel-rt","purl":"pkg:rpm/suse/kernel-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.71.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-rt":"5.14.21-150400.15.71.1","kernel-source-rt":"5.14.21-150400.15.71.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","name":"kernel-source-rt","purl":"pkg:rpm/suse/kernel-source-rt&distro=SUSE%20Linux%20Enterprise%20Micro%205.4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.71.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-livepatch-5_14_21-150400_15_71-rt":"1-150400.1.3.1"}]},"package":{"ecosystem":"SUSE:Linux Enterprise Live Patching 15 SP4","name":"kernel-livepatch-SLE15-SP4-RT_Update_19","purl":"pkg:rpm/suse/kernel-livepatch-SLE15-SP4-RT_Update_19&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2015%20SP4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"1-150400.1.3.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-rt":"5.14.21-150400.15.71.1"}]},"package":{"ecosystem":"openSUSE:Leap Micro 5.3","name":"kernel-rt","purl":"pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%20Micro%205.3"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.71.1"}],"type":"ECOSYSTEM"}]},{"ecosystem_specific":{"binaries":[{"kernel-rt":"5.14.21-150400.15.71.1"}]},"package":{"ecosystem":"openSUSE:Leap Micro 5.4","name":"kernel-rt","purl":"pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%20Micro%205.4"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.14.21-150400.15.71.1"}],"type":"ECOSYSTEM"}]}],"aliases":[],"details":"\n\nThe SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2019-25162: Fixed a potential use after free (bsc#1220409).\n- CVE-2021-46923: Fixed reference leakage in fs/mount_setattr (bsc#1220457).\n- CVE-2021-46924: Fixed fix memory leak in device probe and remove (bsc#1220459)\n- CVE-2021-46932: Fixed missing work initialization before device registration (bsc#1220444)\n- CVE-2021-46934: Fixed a bug by validating user data in compat ioctl (bsc#1220469).\n- CVE-2021-47083: Fixed a global-out-of-bounds issue in mediatek: (bsc#1220917).\n- CVE-2022-48627: Fixed a memory overlapping when deleting chars in the buffer (bsc#1220845).\n- CVE-2023-28746: Fixed Register File Data Sampling (bsc#1213456).\n- CVE-2023-5197: Fixed se-after-free due to addition and removal of rules from chain bindings within the same transaction (bsc#1218216).\n- CVE-2023-52340: Fixed ICMPv6 “Packet Too Big” packets force a DoS of the Linux kernel by forcing 100% CPU (bsc#1219295).\n- CVE-2023-52429: Fixed potential DoS in dm_table_create in drivers/md/dm-table.c (bsc#1219827).\n- CVE-2023-52439: Fixed use-after-free in uio_open (bsc#1220140).\n- CVE-2023-52443: Fixed crash when parsed profile name is empty (bsc#1220240).\n- CVE-2023-52445: Fixed use after free on context disconnection (bsc#1220241).\n- CVE-2023-52447: Fixed map_fd_put_ptr() signature kABI workaround  (bsc#1220251).\n- CVE-2023-52448: Fixed kernel NULL pointer dereference in gfs2_rgrp_dump  (bsc#1220253).\n- CVE-2023-52449: Fixed gluebi NULL pointer dereference caused by ftl notifier  (bsc#1220238).\n- CVE-2023-52451: Fixed access beyond end of drmem array  (bsc#1220250).\n- CVE-2023-52452: Fixed Fix accesses to uninit stack slots (bsc#1220257).\n- CVE-2023-52456: Fixed tx statemachine deadlock (bsc#1220364).\n- CVE-2023-52457: Fixed skipped resource freeing if  pm_runtime_resume_and_get() failed (bsc#1220350).\n- CVE-2023-52463: Fixed null pointer dereference in efivarfs (bsc#1220328).\n- CVE-2023-52464: Fixed possible out-of-bounds string access (bsc#1220330)\n- CVE-2023-52467: Fixed a null pointer dereference in of_syscon_register (bsc#1220433).\n- CVE-2023-52475: Fixed use-after-free in powermate_config_complete (bsc#1220649)\n- CVE-2023-52478: Fixed kernel crash on receiver USB disconnect (bsc#1220796)\n- CVE-2023-52482: Fixed a bug by adding SRSO mitigation for Hygon processors (bsc#1220735).\n- CVE-2023-52484: Fixed a soft lockup triggered by arm_smmu_mm_invalidate_range (bsc#1220797).\n- CVE-2023-52530: Fixed a potential key use-after-free in wifi mac80211 (bsc#1220930).\n- CVE-2023-52531: Fixed a memory corruption issue in iwlwifi (bsc#1220931).\n- CVE-2023-52559: Fixed a bug by avoiding memory allocation in iommu_suspend (bsc#1220933).\n- CVE-2023-6270: Fixed a use-after-free issue in aoecmd_cfg_pkts (bsc#1218562).\n- CVE-2023-6817: Fixed use-after-free in nft_pipapo_walk (bsc#1218195).\n- CVE-2024-0607: Fixed 64-bit load issue in  nft_byteorder_eval() (bsc#1218915).\n- CVE-2024-1151: Fixed unlimited number of recursions from action sets (bsc#1219835).\n- CVE-2024-23849: Fixed array-index-out-of-bounds in rds_cmsg_recv (bsc#1219127).\n- CVE-2024-23850: Fixed double free of anonymous device after snapshot  creation failure (bsc#1219126).\n- CVE-2024-23851: Fixed crash in copy_params in drivers/md/dm-ioctl.c (bsc#1219146).\n- CVE-2024-26585: Fixed race between tx work scheduling and socket close (bsc#1220187).\n- CVE-2024-26586: Fixed stack corruption (bsc#1220243).\n- CVE-2024-26589: Fixed out of bounds read due to variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255).\n- CVE-2024-26591: Fixed re-attachment branch in bpf_tracing_prog_attach  (bsc#1220254).\n- CVE-2024-26593: Fixed block process call transactions (bsc#1220009).\n- CVE-2024-26595: Fixed NULL pointer dereference in  error path (bsc#1220344).\n- CVE-2024-26598: Fixed potential UAF in LPI translation  cache (bsc#1220326).\n- CVE-2024-26602: Fixed overall slowdowns with sys_membarrier (bsc1220398).\n- CVE-2024-26603: Fixed infinite loop via #PF handling (bsc#1220335).\n- CVE-2024-26607: Fixed a probing race issue in sii902x: (bsc#1220736).\n- CVE-2024-26622: Fixed UAF write bug in tomoyo_write_control() (bsc#1220825).\n\nThe following non-security bugs were fixed:\n\n- bpf: fix verification of indirect var-off stack access (git-fixes).\n- bpf: guard stack limits against 32bit overflow (git-fixes).\n- drop 2 git-fixes patches which are suspicious to introduce regression reported in bsc#1219073\n- fix unresolved hunks in readme.branch\n- kvm: vmx: move verw closer to vmentry for mds mitigation (git-fixes).\n- kvm: vmx: use bt+jnc, i.e. eflags.cf to select vmresume vs. vmlaunch (git-fixes).\n- nfs: avoid infinite loop in pnfs_update_layout (bsc#1219633).\n- nvme: move nvme_stop_keep_alive() back to original position (bsc#1211515).\n- nvme: remove nvme_alloc_request and nvme_alloc_request_qid (bsc#1214064).\n- nvme: start keep-alive after admin queue setup (bsc#1211515).\n- readme.branch: use correct mail for roy\n- rpm/kernel-binary.spec.in: install scripts/gdb when enabled in config (bsc#1219653) they are put into -devel subpackage. and a proper link to /usr/share/gdb/auto-load/ is created.\n- x86/asm: add _asm_rip() macro for x86-64 (%rip) suffix (git-fixes).\n- x86/bugs: add asm helpers for executing verw (git-fixes).\n- x86/bugs: use alternative() instead of mds_user_clear static key (git-fixes). also add the removed mds_user_clear symbol to kabi severities as it is exposed just for kvm module and is generally a core kernel component so removing it is low risk.\n- x86/entry_32: add verw just before userspace transition (git-fixes).\n- x86/entry_64: Add VERW just before userspace transition (git-fixes).\n","id":"SUSE-SU-2024:0977-1","modified":"2024-03-22T14:33:44Z","published":"2024-03-22T14:33:44Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2024/suse-su-20240977-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1211515"},{"type":"REPORT","url":"https://bugzilla.suse.com/1213456"},{"type":"REPORT","url":"https://bugzilla.suse.com/1214064"},{"type":"REPORT","url":"https://bugzilla.suse.com/1218195"},{"type":"REPORT","url":"https://bugzilla.suse.com/1218216"},{"type":"REPORT","url":"https://bugzilla.suse.com/1218562"},{"type":"REPORT","url":"https://bugzilla.suse.com/1218915"},{"type":"REPORT","url":"https://bugzilla.suse.com/1219073"},{"type":"REPORT","url":"https://bugzilla.suse.com/1219126"},{"type":"REPORT","url":"https://bugzilla.suse.com/1219127"},{"type":"REPORT","url":"https://bugzilla.suse.com/1219146"},{"type":"REPORT","url":"https://bugzilla.suse.com/1219295"},{"type":"REPORT","url":"https://bugzilla.suse.com/1219633"},{"type":"REPORT","url":"https://bugzilla.suse.com/1219653"},{"type":"REPORT","url":"https://bugzilla.suse.com/1219827"},{"type":"REPORT","url":"https://bugzilla.suse.com/1219835"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220009"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220140"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220187"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220238"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220240"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220241"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220243"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220250"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220251"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220253"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220254"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220255"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220257"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220326"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220328"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220330"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220335"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220344"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220350"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220364"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220398"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220409"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220433"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220444"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220457"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220459"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220469"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220649"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220735"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220736"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220796"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220797"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220825"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220845"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220917"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220930"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220931"},{"type":"REPORT","url":"https://bugzilla.suse.com/1220933"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-25162"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-46923"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-46924"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-46932"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-46934"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2021-47083"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2022-48627"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-28746"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-5197"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-52340"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-52429"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-52439"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-52443"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-52445"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-52447"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-52448"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-52449"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-52451"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-52452"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-52456"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-52457"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-52463"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-52464"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-52467"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-52475"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-52478"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-52482"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-52484"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-52530"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-52531"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-52559"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-6270"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2023-6817"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-0607"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-1151"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-23849"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-23850"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-23851"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-26585"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-26586"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-26589"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-26591"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-26593"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-26595"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-26598"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-26602"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-26603"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-26607"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2024-26622"}],"related":["CVE-2019-25162","CVE-2021-46923","CVE-2021-46924","CVE-2021-46932","CVE-2021-46934","CVE-2021-47083","CVE-2022-48627","CVE-2023-28746","CVE-2023-5197","CVE-2023-52340","CVE-2023-52429","CVE-2023-52439","CVE-2023-52443","CVE-2023-52445","CVE-2023-52447","CVE-2023-52448","CVE-2023-52449","CVE-2023-52451","CVE-2023-52452","CVE-2023-52456","CVE-2023-52457","CVE-2023-52463","CVE-2023-52464","CVE-2023-52467","CVE-2023-52475","CVE-2023-52478","CVE-2023-52482","CVE-2023-52484","CVE-2023-52530","CVE-2023-52531","CVE-2023-52559","CVE-2023-6270","CVE-2023-6817","CVE-2024-0607","CVE-2024-1151","CVE-2024-23849","CVE-2024-23850","CVE-2024-23851","CVE-2024-26585","CVE-2024-26586","CVE-2024-26589","CVE-2024-26591","CVE-2024-26593","CVE-2024-26595","CVE-2024-26598","CVE-2024-26602","CVE-2024-26603","CVE-2024-26607","CVE-2024-26622"],"summary":"Security update for the Linux Kernel","upstream":["CVE-2019-25162","CVE-2021-46923","CVE-2021-46924","CVE-2021-46932","CVE-2021-46934","CVE-2021-47083","CVE-2022-48627","CVE-2023-28746","CVE-2023-5197","CVE-2023-52340","CVE-2023-52429","CVE-2023-52439","CVE-2023-52443","CVE-2023-52445","CVE-2023-52447","CVE-2023-52448","CVE-2023-52449","CVE-2023-52451","CVE-2023-52452","CVE-2023-52456","CVE-2023-52457","CVE-2023-52463","CVE-2023-52464","CVE-2023-52467","CVE-2023-52475","CVE-2023-52478","CVE-2023-52482","CVE-2023-52484","CVE-2023-52530","CVE-2023-52531","CVE-2023-52559","CVE-2023-6270","CVE-2023-6817","CVE-2024-0607","CVE-2024-1151","CVE-2024-23849","CVE-2024-23850","CVE-2024-23851","CVE-2024-26585","CVE-2024-26586","CVE-2024-26589","CVE-2024-26591","CVE-2024-26593","CVE-2024-26595","CVE-2024-26598","CVE-2024-26602","CVE-2024-26603","CVE-2024-26607","CVE-2024-26622"]}