Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:SUSE-SU-2024:2189-1
HistoryJun 25, 2024 - 6:34 a.m.

Security update for the Linux Kernel

2024-06-2506:34:56
Google
osv.dev

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.6

Confidence

High

JSON

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-35905: Fixed int overflow for stack access size (bsc#1224488).
  • CVE-2024-26828: Fix underflow in parse_server_interfaces() (bsc#1223084).
  • CVE-2024-35863: Fix potential UAF in is_valid_oplock_break() (bsc#1224763).
  • CVE-2024-35867: Fix potential UAF in cifs_stats_proc_show() (bsc#1224664).
  • CVE-2024-35868: Fix potential UAF in cifs_stats_proc_write() (bsc#1224678).
  • CVE-2024-26928: Fix potential UAF in cifs_debug_files_proc_show() (bsc#1223532).
  • CVE-2024-36926: Fixed LPAR panics during boot up with a frozen PE (bsc#1222011).
  • CVE-2024-26925: Release mutex after nft_gc_seq_end from abort path (bsc#1223390).
  • CVE-2024-27413: Fix incorrect allocation size (bsc#1224438).
  • CVE-2024-35817: Set gtt bound flag in amdgpu_ttm_gart_bind (bsc#1224736).
  • CVE-2024-35904: Avoid dereference of garbage after mount failure (bsc#1224494).
  • CVE-2024-26929: Fixed double free of fcport (bsc#1223715).
  • CVE-2024-27398: Fixed use-after-free bugs caused by sco_sock_timeout (bsc#1224174).
  • CVE-2024-26930: Fixed double free of the ha->vp_map pointer (bsc#1223626).
  • CVE-2024-26840: Fixed a memory leak in cachefiles_add_cache() (bsc#1222976).
  • CVE-2024-26862: Fixed packet annotate data-races around ignore_outgoing (bsc#1223111).
  • CVE-2024-0639: Fixed a denial-of-service vulnerability due to a deadlock found in sctp_auto_asconf_init in net/sctp/socket.c (bsc#1218917).
  • CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138).
  • CVE-2024-26852: Fixed use-after-free in ip6_route_mpath_notify() (bsc#1223057).
  • CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).

The following non-security bugs were fixed:

  • af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).
  • af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).
  • af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).
  • filemap: remove use of wait bookmarks (bsc#1224085).
  • idpf: extend tx watchdog timeout (bsc#1224137).
  • ipvs: Fix checksumming on GSO of SCTP packets (bsc#1221958)
  • powerpc/kasan: Do not instrument non-maskable or raw interrupts (bsc#1223191).
  • powerpc/powernv: Add a null pointer check in opal_event_init() (bsc#1065729).
  • powerpc/powernv: Add a null pointer check to scom_debug_init_one() (bsc#1194869).
  • powerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV (bsc#1220492 ltc#205270).
  • powerpc/pseries/vio: Do not return ENODEV if node or compatible missing (bsc#1220783).
  • powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt (bsc#1221645 ltc#205739 bsc#1223191).
  • powerpc: Refactor verification of MSR_RI (bsc#1223191).

References

Related

nessus 44
openvas 4
redos 3
osv 47
nvd 11
debiancve 15
redhatcve 11
vulnrichment 16
ubuntucve 18
cve 16
cvelist 14
nessus
nessus
SUSE SLES15 Security Update : kernel (SUSE-SU-2024:2189-1)
2024-06-26 00:00:00
SUSE SLES15 Security Update : kernel (SUSE-SU-2024:2185-1)
2024-06-25 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:2019-1)
2024-06-14 00:00:00
openvas
openvas
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2024:2189-1)
2024-06-29 00:00:00
openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2024:2185-1)
2024-06-29 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1978-1)
2024-06-12 00:00:00
redos
redos
ROS-20240819-02
2024-08-19 00:00:00
ROS-20240814-03
2024-08-14 00:00:00
ROS-20240823-01
2024-08-23 00:00:00
osv
osv
Security update for the Linux Kernel
2024-06-24 19:04:59
Security update for the Linux Kernel
2024-06-25 08:50:52
Security update for the Linux Kernel
2024-06-24 17:04:16
nvd
nvd
CVE-2024-35811
2024-05-17 14:15:15
CVE-2023-52838
2024-05-21 16:15:21
CVE-2023-52870
2024-05-21 16:15:23
debiancve
debiancve
CVE-2024-35811
2024-05-17 14:15:15
CVE-2021-47404
2024-05-21 15:15:25
CVE-2021-47457
2024-05-22 07:15:10
redhatcve
redhatcve
CVE-2024-35811
2024-05-18 00:11:01
CVE-2021-47371
2024-05-22 10:34:57
CVE-2021-47428
2024-05-22 08:30:54
vulnrichment
vulnrichment
CVE-2024-35811 wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
2024-05-17 13:23:17
CVE-2021-47499 iio: accel: kxcjk-1013: Fix possible memory leak in probe and remove
2024-05-24 15:01:42
CVE-2023-52872 tty: n_gsm: fix race condition in status line change on dead connections
2024-05-21 15:32:06
ubuntucve
ubuntucve
CVE-2024-35811
2024-05-17 00:00:00
CVE-2021-47429
2024-05-21 00:00:00
CVE-2023-52816
2024-05-21 00:00:00
cve
cve
CVE-2024-35811
2024-05-17 14:15:15
CVE-2023-52745
2024-05-21 16:15:14
CVE-2023-52804
2024-05-21 16:15:18
cvelist
cvelist
CVE-2024-35811 wifi: brcmfmac: Fix use-after-free bug in brcmf_cfg80211_detach
2024-05-17 13:23:17
CVE-2021-47401 ipack: ipoctal: fix stack information leak
2024-05-21 15:03:56
CVE-2023-52740 powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch
2024-05-21 15:23:03

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.6

Confidence

High

JSON
Related for OSV:SUSE-SU-2024:2189-1
nessus44openvas4redos3osv47nvd11debiancve15redhatcve11vulnrichment16ubuntucve18cve16cvelist14