Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:SUSE-SU-2024:2011-1
HistoryJun 12, 2024 - 4:39 p.m.

Security update for the Linux Kernel

2024-06-1216:39:51
Google
osv.dev
2
suse linux enterprise
kernel update
security bugfixes
cve vulnerabilities
memory leak
use-after-free
deadlock
denial-of-service
mutex
memory corruption
stack overflow
powerpc
iommu table
filemap removal

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

10

Confidence

High

JSON

The SUSE Linux Enterprise 15 SP4 RT kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
  • CVE-2024-26828: Fixed underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223057).
  • CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
  • CVE-2024-26928: Fixed potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
  • CVE-2024-26929: Fixed double free of fcport (bsc#1223715).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223626).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
  • CVE-2024-27413: Fixed incorrect allocation size (bsc#1224438).
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
  • CVE-2024-35863: Fixed potential UAF in is_valid_oplock_break() (bsc#1224763).
  • CVE-2024-35867: Fixed potential UAF in cifs_stats_proc_show() (bsc#1224664).
  • CVE-2024-35868: Fixed potential UAF in cifs_stats_proc_write() (bsc#1224678).
  • CVE-2024-35904: Fixed dereference of garbage after mount failure (bsc#1224494).
  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
  • CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).

The following non-security bugs were fixed:

  • af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
  • af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
  • af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
  • filemap: remove use of wait bookmarks (bsc#1224085).
  • idpf: extend tx watchdog timeout (bsc#1224137).
  • ipvs: Fix checksumming on GSO of SCTP packets (bsc#1221958)
  • powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt (bsc#1221645 ltc#205739 bsc#1223191).
  • powerpc/kasan: Do not instrument non-maskable or raw interrupts (bsc#1223191).
  • powerpc/powernv: Add a null pointer check in opal_event_init() (bsc#1065729).
  • powerpc/powernv: Add a null pointer check to scom_debug_init_one() (bsc#1194869).
  • powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (bsc#1220492 ltc#205270).
  • powerpc/pseries/vio: Do not return ENODEV if node or compatible missing (bsc#1220783).
  • powerpc: Refactor verification of MSR_RI (bsc#1223191).
  • supported.conf: support tcp_dctcp module (jsc#PED-8111)

References

Related

openvas 4
nessus 34
osv 45
redos 5
vulnrichment 17
ubuntucve 16
debiancve 14
cve 19
redhatcve 12
nvd 19
cvelist 14
openvas
openvas
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2024:2189-1)
2024-06-29 00:00:00
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2024:2185-1)
2024-06-29 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1978-1)
2024-06-12 00:00:00
nessus
nessus
SUSE SLES15 Security Update : kernel (SUSE-SU-2024:2189-1)
2024-06-26 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:2019-1)
2024-06-14 00:00:00
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:2190-1)
2024-06-26 00:00:00
osv
osv
Security update for the Linux Kernel
2024-06-25 06:34:56
Security update for the Linux Kernel
2024-06-13 10:40:58
Security update for the Linux Kernel
2024-06-12 16:39:35
redos
redos
ROS-20240819-02
2024-08-19 00:00:00
ROS-20240814-03
2024-08-14 00:00:00
ROS-20240927-05
2024-09-27 00:00:00
vulnrichment
vulnrichment
CVE-2022-48672 of: fdt: fix off-by-one error in unflatten_dt_nodes()
2024-05-03 14:51:18
CVE-2021-47481 RDMA/mlx5: Initialize the ODP xarray when creating an ODP MR
2024-05-22 08:19:33
CVE-2022-48693 soc: brcmstb: pm-arm: Fix refcount leak and __iomem leak bugs
2024-05-03 15:05:46
ubuntucve
ubuntucve
CVE-2021-47394
2024-05-21 00:00:00
CVE-2023-52838
2024-05-21 00:00:00
CVE-2022-48702
2024-05-03 00:00:00
debiancve
debiancve
CVE-2021-47462
2024-05-22 07:15:11
CVE-2021-47479
2024-05-22 09:15:09
CVE-2021-47429
2024-05-21 15:15:28
cve
cve
CVE-2021-47450
2024-05-22 07:15:10
CVE-2023-52856
2024-05-21 16:15:22
CVE-2023-52736
2024-05-21 16:15:13
redhatcve
redhatcve
CVE-2022-48675
2024-05-03 18:54:36
CVE-2021-47371
2024-05-22 10:34:57
CVE-2022-48697
2024-05-03 21:28:11
nvd
nvd
CVE-2022-48652
2024-04-28 13:15:07
CVE-2021-47534
2024-05-24 15:15:16
CVE-2021-47476
2024-05-22 09:15:09
cvelist
cvelist
CVE-2021-47475 comedi: vmk80xx: fix transfer-buffer overflows
2024-05-22 08:19:29
CVE-2021-47398 RDMA/hfi1: Fix kernel pointer leak
2024-05-21 15:03:54
CVE-2022-48709 ice: switch: fix potential memleak in ice_add_adv_recipe()
2024-05-21 15:22:50

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

10

Confidence

High

JSON
Related for OSV:SUSE-SU-2024:2011-1
openvas4nessus34osv45redos5vulnrichment17ubuntucve16debiancve14cve19redhatcve12nvd19cvelist14