{"schemaVersion":3,"id":"SUSE-SU-2024:2895-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for the Linux Kernel\n\nThe SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2024-42145: IB/core: Implement a limit on UMAD receive List (bsc#1228743)\n- CVE-2021-47580: scsi: scsi_debug: Fix type in min_t to avoid stack OOB (bsc#1226550).\n- CVE-2021-47219: scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs() (bsc#1222824).\n- CVE-2021-47520: can: pch_can: pch_can_rx_normal: fix use after free (bsc#1225431).\n- CVE-2021-47600: dm btree remove: fix use after free in rebalance_children() (bsc#1226575).\n- CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).\n- CVE-2024-38599: jffs2: prevent xattr node from overflowing the eraseblock (bsc#1226848).\n- CVE-2023-52752: smb: client: fix use-after-free bug in cifs_debug_data_proc_show() (bsc#1225487).\n- CVE-2024-36964: fs/9p: only translate RWX permissions for plain 9P2000 (bsc#1225866).\n- CVE-2024-26923: Fixed false-positive lockdep splat for spin_lock() in __unix_gc() (bsc#1223384).\n\nThe following non-security bugs were fixed:\n\n- af_unix: Do not use atomic ops for unix_sk(sk)->inflight (bsc#1223384).\n- af_unix: Replace BUG_ON() with WARN_ON_ONCE() (bsc#1223384).\n- af_unix: annote lockless accesses to unix_tot_inflight & gc_in_progress (bsc#1223384).\n- kvm: prevent kvm_clock time-warps (bsc#1197439).\n- net: unix: properly re-increment inflight counter of GC discarded candidates (bsc#1223384).","dates":{"published":"2024-08-13T14:08:42.000Z","modified":"2026-02-04T03:42:58.960Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"kernel-default&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","name":"kernel-default","label":"kernel-default&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-default&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purlType":"rpm","versions":[{"text":"< 3.0.101-108.159.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.159.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-ec2&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","name":"kernel-ec2","label":"kernel-ec2&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-ec2&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purlType":"rpm","versions":[{"text":"< 3.0.101-108.159.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.159.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-source&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","name":"kernel-source","label":"kernel-source&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-source&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purlType":"rpm","versions":[{"text":"< 3.0.101-108.159.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.159.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-syms&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","name":"kernel-syms","label":"kernel-syms&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-syms&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purlType":"rpm","versions":[{"text":"< 3.0.101-108.159.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.159.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-trace&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","name":"kernel-trace","label":"kernel-trace&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-trace&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purlType":"rpm","versions":[{"text":"< 3.0.101-108.159.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.159.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-xen&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","name":"kernel-xen","label":"kernel-xen&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-xen&distro=SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE","purlType":"rpm","versions":[{"text":"< 3.0.101-108.159.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.159.1","eol":null,"hubHref":null}],"affectedCount":6,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20242895-1/","label":"www.suse.com/support/update/announcement/2024/suse-su-20242895-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1191958","label":"bugzilla.suse.com/1191958","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1197439","label":"bugzilla.suse.com/1197439","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1222824","label":"bugzilla.suse.com/1222824","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1223384","label":"bugzilla.suse.com/1223384","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1225431","label":"bugzilla.suse.com/1225431","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1225487","label":"bugzilla.suse.com/1225487","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1225611","label":"bugzilla.suse.com/1225611","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1225866","label":"bugzilla.suse.com/1225866","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1226550","label":"bugzilla.suse.com/1226550","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1226575","label":"bugzilla.suse.com/1226575","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1226670","label":"bugzilla.suse.com/1226670","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1226848","label":"bugzilla.suse.com/1226848","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1227154","label":"bugzilla.suse.com/1227154","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1228743","label":"bugzilla.suse.com/1228743","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2016-20022","label":"www.suse.com/security/cve/CVE-2016-20022","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43389","label":"www.suse.com/security/cve/CVE-2021-43389","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-4439","label":"www.suse.com/security/cve/CVE-2021-4439","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-47219","label":"www.suse.com/security/cve/CVE-2021-47219","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-47520","label":"www.suse.com/security/cve/CVE-2021-47520","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-47580","label":"www.suse.com/security/cve/CVE-2021-47580","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2021-47600","label":"www.suse.com/security/cve/CVE-2021-47600","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52752","label":"www.suse.com/security/cve/CVE-2023-52752","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2023-52881","label":"www.suse.com/security/cve/CVE-2023-52881","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2024-26923","label":"www.suse.com/security/cve/CVE-2024-26923","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2024-36964","label":"www.suse.com/security/cve/CVE-2024-36964","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2024-38599","label":"www.suse.com/security/cve/CVE-2024-38599","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2024-42145","label":"www.suse.com/security/cve/CVE-2024-42145","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2016-20022","CVE-2021-43389","CVE-2021-4439","CVE-2021-47219","CVE-2021-47520","CVE-2021-47580","CVE-2021-47600","CVE-2023-52752","CVE-2023-52881","CVE-2024-26923","CVE-2024-36964","CVE-2024-38599","CVE-2024-42145"],"downstream":[],"duplicates":[],"related":["CVE-2016-20022","CVE-2021-43389","CVE-2021-4439","CVE-2021-47219","CVE-2021-47520","CVE-2021-47580","CVE-2021-47600","CVE-2023-52752","CVE-2023-52881","CVE-2024-26923","CVE-2024-36964","CVE-2024-38599","CVE-2024-42145"]},"timeline":[{"kind":"published","date":"2024-08-13T14:08:42.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T03:42:58.960Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T07:48:49.996Z","stale":false,"partial":false}}