Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:SUSE-SU-2024:2185-1
HistoryJun 24, 2024 - 7:04 p.m.

Security update for the Linux Kernel

2024-06-2419:04:59
Google
osv.dev

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

JSON

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2021-47378: Destroy cm id before destroy qp to avoid use after free (bsc#1225201).
  • CVE-2021-47496: Fix flipped sign in tls_err_abort() calls (bsc#1225354)
  • CVE-2021-47402: Protect fl_walk() with rcu (bsc#1225301)
  • CVE-2022-48673: kABI workarounds for struct smc_link (bsc#1223934).
  • CVE-2023-52871: Handle a second device without data corruption (bsc#1225534)
  • CVE-2024-26828: Fix underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2021-47497: Fixed shift-out-of-bound (UBSAN) with byte size cells (bsc#1225355).
  • CVE-2021-47500: Fixed trigger reference couting (bsc#1225360).
  • CVE-2024-27413: Fix incorrect allocation size (bsc#1224438).
  • CVE-2021-47383: Fiedx out-of-bound vmalloc access in imageblit (bsc#1225208).
  • CVE-2021-47511: Fixed negative period/buffer sizes (bsc#1225411).
  • CVE-2023-52840: Fix use after free in rmi_unregister_function() (bsc#1224928).
  • CVE-2021-47261: Fix initializing CQ fragments buffer (bsc#1224954)
  • CVE-2021-47254: Fix use-after-free in gfs2_glock_shrink_scan (bsc#1224888).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2023-52655: Check packet for fixup for true limit (bsc#1217169).
  • CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
  • CVE-2023-4244: Fixed a use-after-free in the nf_tables component, which could be exploited to achieve local privilege escalation (bsc#1215420).
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
  • CVE-2023-52686: Fix a null pointer in opal_event_init() (bsc#1065729).

The following non-security bugs were fixed:

  • af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
  • af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
  • af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
  • btrfs: do not start relocation until in progress drops are done (bsc#1222251).
  • btrfs: do not start relocation until in progress drops are done (bsc#1222251).
  • cifs: add missing spinlock around tcon refcount (bsc#1213476).
  • cifs: avoid dup prefix path in dfs_get_automount_devname() (bsc#1213476).
  • cifs: avoid race conditions with parallel reconnects (bsc#1213476).
  • cifs: avoid re-lookups in dfs_cache_find() (bsc#1213476).
  • cifs: avoid use of global locks for high contention data (bsc#1213476).
  • cifs: check only tcon status on tcon related functions (bsc#1213476).
  • cifs: do all necessary checks for credits within or before locking (bsc#1213476).
  • cifs: do not block in dfs_cache_noreq_update_tgthint() (bsc#1213476).
  • cifs: do not refresh cached referrals from unactive mounts (bsc#1213476).
  • cifs: do not take exclusive lock for updating target hints (bsc#1213476).
  • cifs: fix confusing debug message (bsc#1213476).
  • cifs: fix missing unload_nls() in smb2_reconnect() (bsc#1213476).
  • cifs: fix potential deadlock in cache_refresh_path() (bsc#1213476).
  • cifs: fix refresh of cached referrals (bsc#1213476).
  • cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (bsc#1213476).
  • cifs: fix source pathname comparison of dfs supers (bsc#1213476).
  • cifs: fix status checks in cifs_tree_connect (bsc#1213476).
  • cifs: fix use-after-free bug in refresh_cache_worker() (bsc#1213476).
  • cifs: get rid of dns resolve worker (bsc#1213476).
  • cifs: get rid of mount options string parsing (bsc#1213476).
  • cifs: handle cache lookup errors different than -ENOENT (bsc#1213476).
  • cifs: ignore ipc reconnect failures during dfs failover (bsc#1213476).
  • cifs: match even the scope id for ipv6 addresses (bsc#1213476).
  • cifs: optimize reconnect of nested links (bsc#1213476).
  • cifs: prevent data race in smb2_reconnect() (bsc#1213476).
  • cifs: refresh root referrals (bsc#1213476).
  • cifs: remove duplicate code in __refresh_tcon() (bsc#1213476).
  • cifs: remove unused function (bsc#1213476).
  • cifs: remove unused smb3_fs_context::mount_options (bsc#1213476).
  • cifs: return DFS root session id in DebugData (bsc#1213476).
  • cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (bsc#1213476).
  • cifs: set correct ipc status after initial tree connect (bsc#1213476).
  • cifs: set correct status of tcon ipc when reconnecting (bsc#1213476).
  • cifs: set correct tcon status after initial tree connect (bsc#1213476).
  • cifs: set DFS root session in cifs_get_smb_ses() (bsc#1213476).
  • cifs: set resolved ip in sockaddr (bsc#1213476).
  • cifs: share dfs connections and supers (bsc#1213476).
  • cifs: split out ses and tcon retrieval from mount_get_conns() (bsc#1213476).
  • cifs: use fs_context for automounts (bsc#1213476).
  • cifs: use origin fullpath for automounts (bsc#1213476).
  • cifs: use tcon allocation functions even for dummy tcon (bsc#1213476).
  • netfilter: nf_tables: defer gc run if previous batch is still pending (git-fixes).
  • netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path (git-fixes).
  • netfilter: nf_tables: fix kdoc warnings after gc rework (git-fixes).
  • netfilter: nf_tables: fix memleak when more than 255 elements expired (git-fixes).
  • netfilter: nf_tables: GC transaction race with abort path (git-fixes).
  • netfilter: nf_tables: GC transaction race with netns dismantle (git-fixes).
  • netfilter: nf_tables: mark newset as dead on transaction abort (git-fixes).
  • netfilter: nf_tables: mark set as dead when unbinding anonymous set with timeout (git-fixes).
  • netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure (git-fixes).
  • netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path (git-fixes).
  • netfilter: nf_tables: skip dead set elements in netlink dump (git-fixes).
  • netfilter: nf_tables: use correct lock to protect gc_list (git-fixes).
  • netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration (git-fixes).
  • netfilter: nft_set_rbtree: Add missing expired checks (git-fixes).
  • netfilter: nft_set_rbtree: bogus lookup/get on consecutive elements in named sets (git-fixes).
  • netfilter: nft_set_rbtree: Detect partial overlap with start endpoint match (git-fixes).
  • netfilter: nft_set_rbtree: Detect partial overlaps on insertion (git-fixes).
  • netfilter: nft_set_rbtree: Do not account for expired elements on insertion (git-fixes).
  • netfilter: nft_set_rbtree: Drop spurious condition for overlap detection on insertion (git-fixes).
  • netfilter: nft_set_rbtree: fix null deref on element insertion (git-fixes).
  • netfilter: nft_set_rbtree: fix overlap expiration walk (git-fixes).
  • netfilter: nft_set_rbtree: Handle outcomes of tree rotations in overlap detection (git-fixes).
  • netfilter: nft_set_rbtree: Introduce and use nft_rbtree_interval_start() (git-fixes).
  • netfilter: nft_set_rbtree: overlap detection with element re-addition after deletion (git-fixes).
  • netfilter: nft_set_rbtree: skip elements in transaction from garbage collection (git-fixes).
  • netfilter: nft_set_rbtree: skip end interval element from gc (git-fixes).
  • netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction (git-fixes).
  • netfilter: nft_set_rbtree: Switch to node list walk for overlap detection (git-fixes).
  • netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention (git-fixes).
  • NFC: nxp: add NXP1002 (bsc#1185589).
  • PCI: rpaphp: Add MODULE_DESCRIPTION (bsc#1176869 ltc#188243).
  • smb: client: fix dfs link mount against w2k8 (git-fixes).
  • smb: client: fix null auth (bsc#1213476).
  • smb: client: set correct id, uid and cruid for multiuser automounts (git-fixes).
  • x86/xen: Drop USERGS_SYSRET64 paravirt call (git-fixes).

References

Related

openvas 4
nessus 30
osv 49
nvd 18
debiancve 22
redhatcve 14
vulnrichment 14
ubuntucve 20
cvelist 17
cve 10
redos 1
openvas
openvas
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2024:2185-1)
2024-06-29 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1978-1)
2024-06-12 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1979-1)
2024-06-12 00:00:00
nessus
nessus
SUSE SLES15 Security Update : kernel (SUSE-SU-2024:2183-1)
2024-06-25 00:00:00
SUSE SLES15 Security Update : kernel (SUSE-SU-2024:2185-1)
2024-06-25 00:00:00
SUSE SLES15 Security Update : kernel (Live Patch 44 for SLE 15 SP3) (SUSE-SU-2024:3039-1)
2024-08-28 00:00:00
osv
osv
Security update for the Linux Kernel
2024-06-24 17:04:16
Security update for the Linux Kernel (Live Patch 44 for SLE 15 SP3)
2024-08-27 18:03:53
Security update for the Linux Kernel
2024-06-24 18:34:20
nvd
nvd
CVE-2024-35811
2024-05-17 14:15:15
CVE-2021-47253
2024-05-21 15:15:14
CVE-2021-47348
2024-05-21 15:15:21
debiancve
debiancve
CVE-2024-35811
2024-05-17 14:15:15
CVE-2021-47404
2024-05-21 15:15:25
CVE-2021-47285
2024-05-21 15:15:16
redhatcve
redhatcve
CVE-2024-35811
2024-05-18 00:11:01
CVE-2023-52433
2024-02-20 20:21:58
CVE-2023-52581
2024-03-04 18:27:36
vulnrichment
vulnrichment
CVE-2024-35811 wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
2024-05-17 13:23:17
CVE-2021-47499 iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
2024-05-24 15:01:42
CVE-2021-47404 HID: betop: fix slab-out-of-bounds Write in betop_probe
2024-05-21 15:03:58
ubuntucve
ubuntucve
CVE-2024-35811
2024-05-17 00:00:00
CVE-2023-52433
2024-02-20 00:00:00
CVE-2021-47255
2024-05-21 00:00:00
cvelist
cvelist
CVE-2024-35811 wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
2024-05-17 13:23:17
CVE-2021-47535 drm/msm/a6xx: Allocate enough space for GMU registers
2024-05-24 15:09:43
CVE-2021-47281 ALSA: seq: Fix race of snd_seq_timer_open()
2024-05-21 14:20:07
cve
cve
CVE-2024-35811
2024-05-17 14:15:15
CVE-2021-47269
2024-05-21 15:15:15
CVE-2021-47333
2024-05-21 15:15:20
redos
redos
ROS-20240819-02
2024-08-19 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

JSON
Related for OSV:SUSE-SU-2024:2185-1
openvas4nessus30osv49nvd18debiancve22redhatcve14vulnrichment14ubuntucve20cvelist17cve10redos1