SUSE-SU-2024:2365-1

Advisory lineage Upstream: 38 Downstream: 0
Published: 09 Jul 2024, 14:03
Last modified:04 Feb 2026, 03:07

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

09 Jul 2024, 14:03
Published
Vulnerability first disclosed
04 Feb 2026, 03:07
Last Modified
Vulnerability information updated

Description

Security update for the Linux Kernel The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47247: net/mlx5e: Fix use-after-free of encap entry in neigh update handler (bsc#1224865). - CVE-2021-47311: net: qcom/emac: fix UAF in emac_remove (bsc#1225010). - CVE-2021-47368: enetc: Fix illegal access when reading affinity_hint (bsc#1225161). - CVE-2021-47372: net: macb: fix use after free on rmmod (bsc#1225184). - CVE-2021-47379: blk-cgroup: fix UAF by grabbing blkcg lock before destroying blkg pd (bsc#1225203). - CVE-2021-47571: staging: rtl8192e: Fix use after free in _rtl92e_pci_disconnect() (bsc#1225518). - CVE-2022-2938: psi: Fix uaf issue when psi trigger is destroyed while being polled (bsc#1202623). - CVE-2022-48760: USB: core: Fix hang in usb_kill_urb by adding memory barriers (bsc#1226712). - CVE-2023-52707: sched/psi: Fix use-after-free in ep_remove_wait_queue() (bsc#1225109). - CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487). - CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611). - CVE-2024-26921: Preserve kabi for sk_buff (bsc#1223138). - CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384). - CVE-2024-35789: Check fast rx for non-4addr sta VLAN changes (bsc#1224749). - CVE-2024-35861: Fixed potential UAF in cifs_signal_cifsd_for_reconnect() (bsc#1224766). - CVE-2024-35862: Fixed potential UAF in smb2_is_network_name_deleted() (bsc#1224764). - CVE-2024-35864: Fixed potential UAF in smb2_is_valid_lease_break() (bsc#1224765). - CVE-2024-35950: drm/client: Fully protect modes with dev->mode_config.mutex (bsc#1224703). - CVE-2024-36894: usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete (bsc#1225749). - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732). - CVE-2024-36940: pinctrl: core: delete incorrect free in pinctrl_enable() (bsc#1225840). - CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1225866). - CVE-2024-38545: RDMA/hns: Fix UAF for cq async event (bsc#1226595) - CVE-2024-38559: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226758). - CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786). The following non-security bugs were fixed: - ocfs2: adjust enabling place for la window (bsc#1219224). - ocfs2: fix sparse warnings (bsc#1219224). - ocfs2: improve write IO performance when fragmentation is high (bsc#1219224). - ocfs2: speed up chain-list searching (bsc#1219224). - x86/tsc: Trust initial offset in architectural TSC-adjust MSRs (bsc#1222015 bsc#1226962). - x86/xen: Drop USERGS_SYSRET64 paravirt call (git-fixes).

Affected Systems

  • suse•kernel-default-base&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

    < 5.3.18-150200.24.197.1.150200.9.101.1

  • suse•kernel-default-base&distro=SUSE Linux Enterprise Server 15 SP2-LTSS

    < 5.3.18-150200.24.197.1.150200.9.101.1

  • suse•kernel-default-base&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2

    < 5.3.18-150200.24.197.1.150200.9.101.1

  • suse•kernel-default&distro=SUSE Linux Enterprise High Availability Extension 15 SP2

    < 5.3.18-150200.24.197.1

  • suse•kernel-default&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

    < 5.3.18-150200.24.197.1

  • suse•kernel-default&distro=SUSE Linux Enterprise Live Patching 15 SP2

    < 5.3.18-150200.24.197.1

  • suse•kernel-default&distro=SUSE Linux Enterprise Server 15 SP2-LTSS

    < 5.3.18-150200.24.197.1

  • suse•kernel-default&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2

    < 5.3.18-150200.24.197.1

  • suse•kernel-docs&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

    < 5.3.18-150200.24.197.1

  • suse•kernel-docs&distro=SUSE Linux Enterprise Server 15 SP2-LTSS

    < 5.3.18-150200.24.197.1

  • suse•kernel-docs&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2

    < 5.3.18-150200.24.197.1

  • suse•kernel-livepatch-SLE15-SP2_Update_50&distro=SUSE Linux Enterprise Live Patching 15 SP2

    < 1-150200.5.3.1

  • suse•kernel-obs-build&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

    < 5.3.18-150200.24.197.1

  • suse•kernel-obs-build&distro=SUSE Linux Enterprise Server 15 SP2-LTSS

    < 5.3.18-150200.24.197.1

  • suse•kernel-obs-build&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2

    < 5.3.18-150200.24.197.1

  • suse•kernel-preempt&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

    < 5.3.18-150200.24.197.1

  • suse•kernel-preempt&distro=SUSE Linux Enterprise Server 15 SP2-LTSS

    < 5.3.18-150200.24.197.1

  • suse•kernel-preempt&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2

    < 5.3.18-150200.24.197.1

  • suse•kernel-source&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

    < 5.3.18-150200.24.197.1

  • suse•kernel-source&distro=SUSE Linux Enterprise Server 15 SP2-LTSS

    < 5.3.18-150200.24.197.1

  • suse•kernel-source&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2

    < 5.3.18-150200.24.197.1

  • suse•kernel-syms&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS

    < 5.3.18-150200.24.197.1

  • suse•kernel-syms&distro=SUSE Linux Enterprise Server 15 SP2-LTSS

    < 5.3.18-150200.24.197.1

  • suse•kernel-syms&distro=SUSE Linux Enterprise Server for SAP Applications 15 SP2

    < 5.3.18-150200.24.197.1

References (79)