Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:0068-1 Final 1 1 2022-01-13T14:11:18Z current 2022-01-13T14:11:18Z 2022-01-13T14:11:18Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 12 SP5 kernel was updated. The following security bugs were fixed: - CVE-2019-15126: Fixed a vulnerability in Broadcom and Cypress Wi-Fi chips, used in RPi family of devices aka 'Kr00k'. (bsc#1167162) - CVE-2021-33098: Fixed a potential denial of service in Intel(R) Ethernet ixgbe driver due to improper input validation. (bsc#1192877) - CVE-2021-0935: Fixed out of bounds write due to a use after free which could lead to local escalation of privilege with System execution privileges needed in ip6_xmit. (bsc#1192032) - CVE-2018-25020: Fixed an issue in the BPF subsystem in the Linux kernel mishandled situations with a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions, leading to an overflow. (bsc#1193575) - CVE-2021-0920: Fixed a local privilege escalation due to an use after free bug in unix_gc. (bsc#1193731) - CVE-2021-45485: Fixed an information leak because of certain use of a hash table which use IPv6 source addresses. (bsc#1194094) - CVE-2021-45486: Fixed an information leak because the hash table is very small in net/ipv4/route.c. (bsc#1194087) - CVE-2021-28715: Fixed an issue where a guest could force Linux netback driver to hog large amounts of kernel memory by do not queueing unlimited number of packages. (bsc#1193442) - CVE-2021-28714: Fixed an issue where a guest could force Linux netback driver to hog large amounts of kernel memory by fixing rx queue stall detection. (bsc#1193442) - CVE-2021-28713: Fixed a rogue backends that could cause DoS of guests via high frequency events by hardening hvc_xen against event channel storms. (bsc#1193440) - CVE-2021-28712: Fixed a rogue backends that could cause DoS of guests via high frequency events by hardening netfront against event channel storms. (bsc#1193440) - CVE-2021-28711: Fixed a rogue backends that could cause DoS of guests via high frequency events by hardening blkfront against event channel storms. (bsc#1193440) - CVE-2021-43975: Fixed a flaw in hw_atl_utils_fw_rpc_wait that could allow an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value. (bsc#1192845) - CVE-2021-43976: Fixed a flaw that could allow an attacker (who can connect a crafted USB device) to cause a denial of service. (bsc#1192847) - CVE-2021-4002: Added a missing TLB flush that could lead to leak or corruption of data in hugetlbfs. (bsc#1192946) - CVE-2020-27820: Fixed a vulnerability where a use-after-frees in nouveau's postclose() handler could happen if removing device. (bsc#1179599) The following non-security bugs were fixed: - blk-mq: do not deactivate hctx if managed irq isn't used (bsc#1185762). - cifs: Add new mount parameter 'acdirmax' to allow caching directory metadata (bsc#1190317). - cifs: Add new parameter 'acregmax' for distinct file and directory metadata timeout (bsc#1190317). - cifs: convert list_for_each to entry variant (jsc#SLE-20656). - cifs: convert revalidate of directories to using directory metadata cache timeout (bsc#1190317). - cifs: Do not leak EDEADLK to dgetents64 for STATUS_USER_SESSION_DELETED (bsc#1190317). - cifs: fiemap: do not return EINVAL if get nothing (bsc#1190317). - cifs: Fix a potencially linear read overflow (git-fixes). - cifs: fix a sign extension bug (git-fixes). - cifs: fix incorrect check for null pointer in header_assemble (bsc#1190317). - cifs: fix memory leak of smb3_fs_context_dup::server_hostname (bsc#1190317). - cifs: fix missed refcounting of ipc tcon (git-fixes). - cifs: fix potential use-after-free bugs (jsc#SLE-20656). - cifs: fix print of hdr_flags in dfscache_proc_show() (jsc#SLE-20656). - cifs: fix wrong release in sess_alloc_buffer() failed path (bsc#1190317). - cifs: for compound requests, use open handle if possible (bsc#1190317). - cifs: introduce new helper for cifs_reconnect() (jsc#SLE-20656). - cifs: move to generic async completion (bsc#1190317). - cifs: nosharesock should be set on new server (git-fixes). - cifs: nosharesock should not share socket with future sessions (bsc#1190317). - cifs: On cifs_reconnect, resolve the hostname again (bsc#1190317). - cifs: properly invalidate cached root handle when closing it (bsc#1190317). - cifs: release lock earlier in dequeue_mid error case (bsc#1190317). - cifs: set a minimum of 120s for next dns resolution (bsc#1190317). - cifs: Simplify reconnect code when dfs upcall is enabled (bsc#1190317). - cifs: split out dfs code from cifs_reconnect() (jsc#SLE-20656). - cifs: support nested dfs links over reconnect (jsc#SLE-20656). - cifs: support share failover when remounting (jsc#SLE-20656). - cifs: To match file servers, make sure the server hostname matches (bsc#1190317). - config: INPUT_EVBUG=n (bsc#1192974). Debug driver unsuitable for production, only enabled on ppc64. - constraints: Build aarch64 on recent ARMv8.1 builders. Request asimdrdm feature which is available only on recent ARMv8.1 CPUs. This should prevent scheduling the kernel on an older slower builder. - cred: allow get_cred() and put_cred() to be given NULL (git-fixes). - EDAC/amd64: Handle three rank interleaving mode (bsc#1114648). - elfcore: correct reference to CONFIG_UML (git-fixes). - elfcore: fix building with clang (bsc#1169514). - fuse: release pipe buf after last use (bsc#1193318). - genirq: Move initial affinity setup to irq_startup() (bsc#1193231). - genirq: Provide IRQCHIP_AFFINITY_PRE_STARTUP (bsc#1193231). - genirq: Remove mask argument from setup_affinity() (bsc#1193231). - genirq: Rename setup_affinity() to irq_setup_affinity() (bsc#1193231). - genirq: Split out irq_startup() code (bsc#1193231). - lpfc: Reintroduce old IRQ probe logic (bsc#1183897). - md: fix a lock order reversal in md_alloc (git-fixes). - net: hso: fix control-request directions (git-fixes). - net: hso: fix muxed tty registration (git-fixes). - net: lan78xx: fix division by zero in send path (git-fixes). - net: mana: Allow setting the number of queues while the NIC is down (jsc#SLE-18779, bsc#1185727). - net: mana: Fix spelling mistake 'calledd' -> 'called' (jsc#SLE-18779, bsc#1185727). - net: mana: Fix the netdev_err()'s vPort argument in mana_init_port() (jsc#SLE-18779, bsc#1185727). - net: mana: Improve the HWC error handling (jsc#SLE-18779, bsc#1185727). - net: mana: Support hibernation and kexec (jsc#SLE-18779, bsc#1185727). - net: mana: Use kcalloc() instead of kzalloc() (jsc#SLE-18779, bsc#1185727). - net: pegasus: fix uninit-value in get_interrupt_interval (git-fixes). - net: usb: lan78xx: lan78xx_phy_init(): use PHY_POLL instead of '0' if no IRQ is available (git-fixes). - nfsd: do not alloc under spinlock in rpc_parse_scope_id (git-fixes). - nfsd: Handle the NFSv4 READDIR 'dircount' hint being zero (git-fixes). - nvme-fc: avoid race between time out and tear down (bsc#1185762). - nvme-fc: remove freeze/unfreeze around update_nr_hw_queues (bsc#1185762). - nvme-fc: update hardware queues before using them (bsc#1185762). - nvme-fc: wait for queues to freeze before calling update_hr_hw_queues (bsc#1183678). - nvme-pci: add NO APST quirk for Kioxia device (git-fixes). - objtool: Support Clang non-section symbols in ORC generation (bsc#1169514). - platform/x86: hp_accel: Fix an error handling path in 'lis3lv02d_probe()' (git-fixes). - platform/x86: thinkpad_acpi: Fix bitwise vs. logical warning (git-fixes). - pnfs/flexfiles: Fix misplaced barrier in nfs4_ff_layout_prepare_ds (git-fixes). - rndis_host: set proper input size for OID_GEN_PHYSICAL_MEDIUM request (git-fixes). - scsi: core: Fix bad pointer dereference when ehandler kthread is invalid (git-fixes). - scsi: core: Put LLD module refcnt after SCSI device is released (git-fixes). - scsi: iscsi: Adjust iface sysfs attr detection (git-fixes). - scsi: lpfc: Add additional debugfs support for CMF (bsc1192145). - scsi: lpfc: Adjust CMF total bytes and rxmonitor (bsc1192145). - scsi: lpfc: Cap CMF read bytes to MBPI (bsc1192145). - scsi: lpfc: Change return code on I/Os received during link bounce (bsc1192145). - scsi: lpfc: Fix leaked lpfc_dmabuf mbox allocations with NPIV (bsc1192145). - scsi: lpfc: Fix lpfc_force_rscn ndlp kref imbalance (bsc1192145). - scsi: lpfc: Fix non-recovery of remote ports following an unsolicited LOGO (bsc#1189126). - scsi: lpfc: Fix NPIV port deletion crash (bsc1192145). - scsi: lpfc: Trigger SLI4 firmware dump before doing driver cleanup (bsc1192145). - scsi: lpfc: Update lpfc version to 14.0.0.4 (bsc1192145). - scsi: mpt3sas: Fix kernel panic during drive powercycle test (git-fixes). - scsi: qla2xxx: edif: Fix app start delay (git-fixes). - scsi: qla2xxx: edif: Fix app start fail (git-fixes). - scsi: qla2xxx: edif: Fix EDIF bsg (git-fixes). - scsi: qla2xxx: edif: Fix off by one bug in qla_edif_app_getfcinfo() (git-fixes). - scsi: qla2xxx: edif: Flush stale events and msgs on session down (git-fixes). - scsi: qla2xxx: edif: Increase ELS payload (git-fixes). - scsi: qla2xxx: Fix gnl list corruption (git-fixes). - scsi: qla2xxx: Fix mailbox direction flags in qla2xxx_get_adapter_id() (git-fixes). - scsi: qla2xxx: Format log strings only if needed (git-fixes). - scsi: qla2xxx: Relogin during fabric disturbance (git-fixes). - smb3: add additional null check in SMB2_ioctl (bsc#1190317). - smb3: add additional null check in SMB2_open (bsc#1190317). - smb3: add additional null check in SMB2_tcon (bsc#1190317). - smb3: correct server pointer dereferencing check to be more consistent (bsc#1190317). - smb3: correct smb3 ACL security descriptor (bsc#1190317). - smb3: do not error on fsync when readonly (bsc#1190317). - smb3: remove trivial dfs compile warning (jsc#SLE-20656). - SUNRPC: async tasks mustn't block waiting for memory (bsc#1191876 bsc#1192866). - SUNRPC: improve 'swap' handling: scheduling and PF_MEMALLOC (bsc#1191876 bsc#1192866). - tracing: Check pid filtering when creating events (git-fixes). - tracing: Fix pid filtering when triggers are attached (git-fixes). - tty: hvc: replace BUG_ON() with negative return value (git-fixes). - usb: Add compatibility quirk flags for iODD 2531/2541 (git-fixes). - usb: dwc2: hcd_queue: Fix use of floating point literal (git-fixes). - usb: serial: option: add Fibocom FM101-GL variants (git-fixes). - usb: serial: option: add prod. id for Quectel EG91 (git-fixes). - usb: serial: option: add Quectel EC200S-CN module support (git-fixes). - usb: serial: option: add Telit LE910Cx composition 0x1204 (git-fixes). - usb: serial: option: add Telit LE910S1 0x9200 composition (git-fixes). - usb: serial: qcserial: add EM9191 QDL support (git-fixes). - x86/msi: Force affinity setup before startup (bsc#1193231). - x86/pkey: Fix undefined behaviour with PKRU_WD_BIT (bsc#1114648). - x86/sme: Explicitly map new EFI memmap table as encrypted (bsc#1114648). - x86/xen: Add xenpv_restore_regs_and_return_to_usermode() (bsc#1114648). - x86/xen: Mark cpu_bringup_and_idle() as dead_end_function (bsc#1169514). - xen: sync include/xen/interface/io/ring.h with Xen's newest version (git-fixes). - xen/blkfront: do not take local copy of a request from the ring page (git-fixes). - xen/blkfront: do not trust the backend response data blindly (git-fixes). - xen/blkfront: read response from backend only once (git-fixes). - xen/netfront: disentangle tx_skb_freelist (git-fixes). - xen/netfront: do not read data from request on the ring page (git-fixes). - xen/netfront: do not trust the backend response data blindly (git-fixes). - xen/netfront: read response from backend only once (git-fixes). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP5-Azure-BYOS-2022-68,Image SLES12-SP5-Azure-HPC-BYOS-2022-68,Image SLES12-SP5-Azure-SAP-BYOS-2022-68,Image SLES12-SP5-Azure-SAP-On-Demand-2022-68,Image SLES12-SP5-EC2-BYOS-2022-68,Image SLES12-SP5-EC2-ECS-On-Demand-2022-68,Image SLES12-SP5-EC2-On-Demand-2022-68,Image SLES12-SP5-EC2-SAP-BYOS-2022-68,Image SLES12-SP5-EC2-SAP-On-Demand-2022-68,Image SLES12-SP5-GCE-BYOS-2022-68,Image SLES12-SP5-GCE-On-Demand-2022-68,Image SLES12-SP5-GCE-SAP-BYOS-2022-68,Image SLES12-SP5-GCE-SAP-On-Demand-2022-68,Image SLES12-SP5-SAP-Azure-LI-BYOS-Production-2022-68,Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production-2022-68,SUSE-2022-68,SUSE-SLE-HA-12-SP5-2022-68,SUSE-SLE-Live-Patching-12-SP5-2022-68,SUSE-SLE-SDK-12-SP5-2022-68,SUSE-SLE-SERVER-12-SP5-2022-68,SUSE-SLE-WE-12-SP5-2022-68 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20220068-1/ Link for SUSE-SU-2022:0068-1 https://lists.suse.com/pipermail/sle-security-updates/2022-January/010003.html E-Mail link for SUSE-SU-2022:0068-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1114648 SUSE Bug 1114648 https://bugzilla.suse.com/1124431 SUSE Bug 1124431 https://bugzilla.suse.com/1167162 SUSE Bug 1167162 https://bugzilla.suse.com/1169514 SUSE Bug 1169514 https://bugzilla.suse.com/1172073 SUSE Bug 1172073 https://bugzilla.suse.com/1179599 SUSE Bug 1179599 https://bugzilla.suse.com/1183678 SUSE Bug 1183678 https://bugzilla.suse.com/1183897 SUSE Bug 1183897 https://bugzilla.suse.com/1184804 SUSE Bug 1184804 https://bugzilla.suse.com/1185727 SUSE Bug 1185727 https://bugzilla.suse.com/1185762 SUSE Bug 1185762 https://bugzilla.suse.com/1187167 SUSE Bug 1187167 https://bugzilla.suse.com/1189126 SUSE Bug 1189126 https://bugzilla.suse.com/1189158 SUSE Bug 1189158 https://bugzilla.suse.com/1189305 SUSE Bug 1189305 https://bugzilla.suse.com/1189841 SUSE Bug 1189841 https://bugzilla.suse.com/1190317 SUSE Bug 1190317 https://bugzilla.suse.com/1190358 SUSE Bug 1190358 https://bugzilla.suse.com/1190428 SUSE Bug 1190428 https://bugzilla.suse.com/1191229 SUSE Bug 1191229 https://bugzilla.suse.com/1191384 SUSE Bug 1191384 https://bugzilla.suse.com/1191731 SUSE Bug 1191731 https://bugzilla.suse.com/1191876 SUSE Bug 1191876 https://bugzilla.suse.com/1192032 SUSE Bug 1192032 https://bugzilla.suse.com/1192145 SUSE Bug 1192145 https://bugzilla.suse.com/1192267 SUSE Bug 1192267 https://bugzilla.suse.com/1192740 SUSE Bug 1192740 https://bugzilla.suse.com/1192845 SUSE Bug 1192845 https://bugzilla.suse.com/1192847 SUSE Bug 1192847 https://bugzilla.suse.com/1192866 SUSE Bug 1192866 https://bugzilla.suse.com/1192877 SUSE Bug 1192877 https://bugzilla.suse.com/1192946 SUSE Bug 1192946 https://bugzilla.suse.com/1192974 SUSE Bug 1192974 https://bugzilla.suse.com/1193231 SUSE Bug 1193231 https://bugzilla.suse.com/1193306 SUSE Bug 1193306 https://bugzilla.suse.com/1193318 SUSE Bug 1193318 https://bugzilla.suse.com/1193440 SUSE Bug 1193440 https://bugzilla.suse.com/1193442 SUSE Bug 1193442 https://bugzilla.suse.com/1193575 SUSE Bug 1193575 https://bugzilla.suse.com/1193731 SUSE Bug 1193731 https://bugzilla.suse.com/1194087 SUSE Bug 1194087 https://bugzilla.suse.com/1194094 SUSE Bug 1194094 https://www.suse.com/security/cve/CVE-2018-25020/ SUSE CVE CVE-2018-25020 page https://www.suse.com/security/cve/CVE-2019-15126/ SUSE CVE CVE-2019-15126 page https://www.suse.com/security/cve/CVE-2020-27820/ SUSE CVE CVE-2020-27820 page https://www.suse.com/security/cve/CVE-2021-0920/ SUSE CVE CVE-2021-0920 page https://www.suse.com/security/cve/CVE-2021-0935/ SUSE CVE CVE-2021-0935 page https://www.suse.com/security/cve/CVE-2021-28711/ SUSE CVE CVE-2021-28711 page https://www.suse.com/security/cve/CVE-2021-28712/ SUSE CVE CVE-2021-28712 page https://www.suse.com/security/cve/CVE-2021-28713/ SUSE CVE CVE-2021-28713 page https://www.suse.com/security/cve/CVE-2021-28714/ SUSE CVE CVE-2021-28714 page https://www.suse.com/security/cve/CVE-2021-28715/ SUSE CVE CVE-2021-28715 page https://www.suse.com/security/cve/CVE-2021-33098/ SUSE CVE CVE-2021-33098 page https://www.suse.com/security/cve/CVE-2021-4002/ SUSE CVE CVE-2021-4002 page https://www.suse.com/security/cve/CVE-2021-43975/ SUSE CVE CVE-2021-43975 page https://www.suse.com/security/cve/CVE-2021-43976/ SUSE CVE CVE-2021-43976 page https://www.suse.com/security/cve/CVE-2021-45485/ SUSE CVE CVE-2021-45485 page https://www.suse.com/security/cve/CVE-2021-45486/ SUSE CVE CVE-2021-45486 page Image SLES12-SP5-Azure-BYOS Image SLES12-SP5-Azure-HPC-BYOS Image SLES12-SP5-Azure-SAP-BYOS Image SLES12-SP5-Azure-SAP-On-Demand Image SLES12-SP5-EC2-BYOS Image SLES12-SP5-EC2-ECS-On-Demand Image SLES12-SP5-EC2-On-Demand Image SLES12-SP5-EC2-SAP-BYOS Image SLES12-SP5-EC2-SAP-On-Demand Image SLES12-SP5-GCE-BYOS Image SLES12-SP5-GCE-On-Demand Image SLES12-SP5-GCE-SAP-BYOS Image SLES12-SP5-GCE-SAP-On-Demand Image SLES12-SP5-SAP-Azure-LI-BYOS-Production Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise High Availability Extension 12 SP5 SUSE Linux Enterprise Live Patching 12 SP5 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 kernel-default-4.12.14-122.106.1 cluster-md-kmp-default-4.12.14-122.106.1 dlm-kmp-default-4.12.14-122.106.1 gfs2-kmp-default-4.12.14-122.106.1 ocfs2-kmp-default-4.12.14-122.106.1 kernel-debug-4.12.14-122.106.1 kernel-debug-base-4.12.14-122.106.1 kernel-debug-devel-4.12.14-122.106.1 kernel-debug-kgraft-devel-4.12.14-122.106.1 kernel-default-base-4.12.14-122.106.1 kernel-default-devel-4.12.14-122.106.1 kernel-default-extra-4.12.14-122.106.1 kernel-default-kgraft-4.12.14-122.106.1 kernel-default-kgraft-devel-4.12.14-122.106.1 kernel-default-man-4.12.14-122.106.1 kernel-devel-4.12.14-122.106.1 kernel-docs-4.12.14-122.106.1 kernel-docs-html-4.12.14-122.106.1 kernel-kvmsmall-4.12.14-122.106.1 kernel-kvmsmall-base-4.12.14-122.106.1 kernel-kvmsmall-devel-4.12.14-122.106.1 kernel-kvmsmall-kgraft-devel-4.12.14-122.106.1 kernel-macros-4.12.14-122.106.1 kernel-obs-build-4.12.14-122.106.1 kernel-obs-qa-4.12.14-122.106.1 kernel-source-4.12.14-122.106.1 kernel-source-vanilla-4.12.14-122.106.1 kernel-syms-4.12.14-122.106.1 kernel-vanilla-4.12.14-122.106.1 kernel-vanilla-base-4.12.14-122.106.1 kernel-vanilla-devel-4.12.14-122.106.1 kernel-vanilla-kgraft-devel-4.12.14-122.106.1 kernel-zfcpdump-4.12.14-122.106.1 kernel-zfcpdump-man-4.12.14-122.106.1 kgraft-patch-4_12_14-122_106-default-1-8.3.1 kselftests-kmp-default-4.12.14-122.106.1 kernel-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-Azure-BYOS kernel-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-Azure-HPC-BYOS cluster-md-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS dlm-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS gfs2-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS kernel-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS ocfs2-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-Azure-SAP-BYOS cluster-md-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand dlm-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand gfs2-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand kernel-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand ocfs2-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-Azure-SAP-On-Demand kernel-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-EC2-BYOS kernel-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-EC2-ECS-On-Demand kernel-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-EC2-On-Demand cluster-md-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS dlm-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS gfs2-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS kernel-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS ocfs2-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-EC2-SAP-BYOS cluster-md-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand dlm-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand gfs2-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand kernel-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand ocfs2-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-EC2-SAP-On-Demand kernel-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-GCE-BYOS kernel-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-GCE-On-Demand cluster-md-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS dlm-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS gfs2-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS kernel-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS ocfs2-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-GCE-SAP-BYOS cluster-md-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand dlm-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand gfs2-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand kernel-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand ocfs2-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-GCE-SAP-On-Demand cluster-md-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production dlm-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production gfs2-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production kernel-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production ocfs2-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-SAP-Azure-LI-BYOS-Production cluster-md-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production dlm-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production gfs2-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production kernel-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production ocfs2-kmp-default-4.12.14-122.106.1 as a component of Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production cluster-md-kmp-default-4.12.14-122.106.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP5 dlm-kmp-default-4.12.14-122.106.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP5 gfs2-kmp-default-4.12.14-122.106.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP5 ocfs2-kmp-default-4.12.14-122.106.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP5 kernel-default-kgraft-4.12.14-122.106.1 as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-default-kgraft-devel-4.12.14-122.106.1 as a component of SUSE Linux Enterprise Live Patching 12 SP5 kgraft-patch-4_12_14-122_106-default-1-8.3.1 as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-default-4.12.14-122.106.1 as a component of SUSE Linux Enterprise Server 12 SP5 kernel-default-base-4.12.14-122.106.1 as a component of SUSE Linux Enterprise Server 12 SP5 kernel-default-devel-4.12.14-122.106.1 as a component of SUSE Linux Enterprise Server 12 SP5 kernel-default-man-4.12.14-122.106.1 as a component of SUSE Linux Enterprise Server 12 SP5 kernel-devel-4.12.14-122.106.1 as a component of SUSE Linux Enterprise Server 12 SP5 kernel-macros-4.12.14-122.106.1 as a component of SUSE Linux Enterprise Server 12 SP5 kernel-source-4.12.14-122.106.1 as a component of SUSE Linux Enterprise Server 12 SP5 kernel-syms-4.12.14-122.106.1 as a component of SUSE Linux Enterprise Server 12 SP5 kernel-default-4.12.14-122.106.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-default-base-4.12.14-122.106.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-default-devel-4.12.14-122.106.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-default-man-4.12.14-122.106.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-devel-4.12.14-122.106.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-macros-4.12.14-122.106.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-source-4.12.14-122.106.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-syms-4.12.14-122.106.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-docs-4.12.14-122.106.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 kernel-obs-build-4.12.14-122.106.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 kernel-default-extra-4.12.14-122.106.1 as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions, leading to an overflow. This affects kernel/bpf/core.c and net/core/filter.c. CVE-2018-25020 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220068-1/ https://www.suse.com/security/cve/CVE-2018-25020.html CVE-2018-25020 https://bugzilla.suse.com/1193575 SUSE Bug 1193575 An issue was discovered on Broadcom Wi-Fi client devices. Specifically timed and handcrafted traffic can cause internal errors (related to state transitions) in a WLAN device that lead to improper layer 2 Wi-Fi encryption with a consequent possibility of information disclosure over the air for a discrete set of traffic, a different vulnerability than CVE-2019-9500, CVE-2019-9501, CVE-2019-9502, and CVE-2019-9503. CVE-2019-15126 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220068-1/ https://www.suse.com/security/cve/CVE-2019-15126.html CVE-2019-15126 https://bugzilla.suse.com/1167162 SUSE Bug 1167162 A vulnerability was found in Linux kernel, where a use-after-frees in nouveau's postclose() handler could happen if removing device (that is not common to remove video card physically without power-off, but same happens if "unbind" the driver). CVE-2020-27820 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220068-1/ https://www.suse.com/security/cve/CVE-2020-27820.html CVE-2020-27820 https://bugzilla.suse.com/1179599 SUSE Bug 1179599 In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-196926917References: Upstream kernel CVE-2021-0920 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220068-1/ https://www.suse.com/security/cve/CVE-2021-0920.html CVE-2021-0920 https://bugzilla.suse.com/1193731 SUSE Bug 1193731 https://bugzilla.suse.com/1194463 SUSE Bug 1194463 https://bugzilla.suse.com/1195939 SUSE Bug 1195939 https://bugzilla.suse.com/1199255 SUSE Bug 1199255 https://bugzilla.suse.com/1200084 SUSE Bug 1200084 In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-168607263References: Upstream kernel CVE-2021-0935 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220068-1/ https://www.suse.com/security/cve/CVE-2021-0935.html CVE-2021-0935 https://bugzilla.suse.com/1192032 SUSE Bug 1192032 https://bugzilla.suse.com/1192042 SUSE Bug 1192042 https://bugzilla.suse.com/1196722 SUSE Bug 1196722 Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as "driver domains". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713 CVE-2021-28711 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220068-1/ https://www.suse.com/security/cve/CVE-2021-28711.html CVE-2021-28711 https://bugzilla.suse.com/1193440 SUSE Bug 1193440 Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as "driver domains". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713 CVE-2021-28712 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220068-1/ https://www.suse.com/security/cve/CVE-2021-28712.html CVE-2021-28712 Rogue backends can cause DoS of guests via high frequency events T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen offers the ability to run PV backends in regular unprivileged guests, typically referred to as "driver domains". Running PV backends in driver domains has one primary security advantage: if a driver domain gets compromised, it doesn't have the privileges to take over the system. However, a malicious driver domain could try to attack other guests via sending events at a high frequency leading to a Denial of Service in the guest due to trying to service interrupts for elongated amounts of time. There are three affected backends: * blkfront patch 1, CVE-2021-28711 * netfront patch 2, CVE-2021-28712 * hvc_xen (console) patch 3, CVE-2021-28713 CVE-2021-28713 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220068-1/ https://www.suse.com/security/cve/CVE-2021-28713.html CVE-2021-28713 Guest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the guest is ready to process them. There are some measures taken for avoiding to pile up too much data, but those can be bypassed by the guest: There is a timeout how long the client side of an interface can stop consuming new packets before it is assumed to have stalled, but this timeout is rather long (60 seconds by default). Using a UDP connection on a fast interface can easily accumulate gigabytes of data in that time. (CVE-2021-28715) The timeout could even never trigger if the guest manages to have only one free slot in its RX queue ring page and the next package would require more than one free slot, which may be the case when using GSO, XDP, or software hashing. (CVE-2021-28714) CVE-2021-28714 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220068-1/ https://www.suse.com/security/cve/CVE-2021-28714.html CVE-2021-28714 https://bugzilla.suse.com/1193442 SUSE Bug 1193442 Guest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the guest is ready to process them. There are some measures taken for avoiding to pile up too much data, but those can be bypassed by the guest: There is a timeout how long the client side of an interface can stop consuming new packets before it is assumed to have stalled, but this timeout is rather long (60 seconds by default). Using a UDP connection on a fast interface can easily accumulate gigabytes of data in that time. (CVE-2021-28715) The timeout could even never trigger if the guest manages to have only one free slot in its RX queue ring page and the next package would require more than one free slot, which may be the case when using GSO, XDP, or software hashing. (CVE-2021-28714) CVE-2021-28715 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220068-1/ https://www.suse.com/security/cve/CVE-2021-28715.html CVE-2021-28715 Improper input validation in the Intel(R) Ethernet ixgbe driver for Linux before version 3.17.3 may allow an authenticated user to potentially enable denial of service via local access. CVE-2021-33098 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220068-1/ https://www.suse.com/security/cve/CVE-2021-33098.html CVE-2021-33098 https://bugzilla.suse.com/1192877 SUSE Bug 1192877 A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget() which are aligned to PUD alignment with the fault of some of the memory pages. A local user could use this flaw to get unauthorized access to some data. CVE-2021-4002 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220068-1/ https://www.suse.com/security/cve/CVE-2021-4002.html CVE-2021-4002 https://bugzilla.suse.com/1192946 SUSE Bug 1192946 https://bugzilla.suse.com/1192973 SUSE Bug 1192973 In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_utils.c allows an attacker (who can introduce a crafted device) to trigger an out-of-bounds write via a crafted length value. CVE-2021-43975 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220068-1/ https://www.suse.com/security/cve/CVE-2021-43975.html CVE-2021-43975 https://bugzilla.suse.com/1192845 SUSE Bug 1192845 In the Linux kernel through 5.15.2, mwifiex_usb_recv in drivers/net/wireless/marvell/mwifiex/usb.c allows an attacker (who can connect a crafted USB device) to cause a denial of service (skb_over_panic). CVE-2021-43976 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220068-1/ https://www.suse.com/security/cve/CVE-2021-43976.html CVE-2021-43976 https://bugzilla.suse.com/1192847 SUSE Bug 1192847 In the IPv6 implementation in the Linux kernel before 5.13.3, net/ipv6/output_core.c has an information leak because of certain use of a hash table which, although big, doesn't properly consider that IPv6-based attackers can typically choose among many IPv6 source addresses. CVE-2021-45485 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220068-1/ https://www.suse.com/security/cve/CVE-2021-45485.html CVE-2021-45485 https://bugzilla.suse.com/1194094 SUSE Bug 1194094 In the IPv4 implementation in the Linux kernel before 5.12.4, net/ipv4/route.c has an information leak because the hash table is very small. CVE-2021-45486 Image SLES12-SP5-Azure-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-HPC-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-Azure-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-ECS-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-EC2-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-BYOS:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-GCE-SAP-On-Demand:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-122.106.1 Image SLES12-SP5-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:cluster-md-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:dlm-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:gfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise High Availability Extension 12 SP5:ocfs2-kmp-default-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel-4.12.14-122.106.1 SUSE Linux Enterprise Live Patching 12 SP5:kgraft-patch-4_12_14-122_106-default-1-8.3.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-base-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default-man-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-macros-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-4.12.14-122.106.1 SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-docs-4.12.14-122.106.1 SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-obs-build-4.12.14-122.106.1 SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra-4.12.14-122.106.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20220068-1/ https://www.suse.com/security/cve/CVE-2021-45486.html CVE-2021-45486 https://bugzilla.suse.com/1194087 SUSE Bug 1194087