Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:2393-1 Final 1 1 2022-07-14T07:27:37Z current 2022-07-14T07:27:37Z 2022-07-14T07:27:37Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-29900, CVE-2022-29901: Fixed the RETBLEED attack, a new Spectre like Branch Target Buffer attack, that can leak arbitrary kernel information (bsc#1199657). - CVE-2022-1679: Fixed a use-after-free in the Atheros wireless driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages (bsc#1199487). - CVE-2022-20132: Fixed out of bounds read due to improper input validation in lg_probe and related functions of hid-lg.c (bsc#1200619). - CVE-2022-33981: Fixed use-after-free in floppy driver (bsc#1200692) - CVE-2022-20141: Fixed a possible use after free due to improper locking in ip_check_mc_rcu() (bsc#1200604). - CVE-2021-4157: Fixed an out of memory bounds write flaw in the NFS subsystem, related to the replication of files with NFS. A user could potentially crash the system or escalate privileges on the system (bsc#1194013). - CVE-2022-20154: Fixed a use after free due to a race condition in lock_sock_nested of sock.c. This could lead to local escalation of privilege with System execution privileges needed (bsc#1200599). - CVE-2022-2318: Fixed a use-after-free vulnerabilities in the timer handler in net/rose/rose_timer.c that allow attackers to crash the system without any privileges (bsc#1201251). - CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742: Fixed multiple potential data leaks with Block and Network devices when using untrusted backends (bsc#1200762). - CVE-2021-26341: Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage (bsc#1201050). - CVE-2020-26541: Enforce the secure boot forbidden signature database (aka dbx) protection mechanism. (bsc#1177282) - CVE-2022-1974: Fixed an use-after-free that could causes kernel crash by simulating an nfc device from user-space (bsc#1200144). - CVE-2022-1975: Fixed a bug that allows an attacker to crash the linux kernel by simulating nfc device from user-space (bsc#1200143). - CVE-2022-1729: Fixed a sys_perf_event_open() race condition against self (bsc#1199507). - CVE-2022-1184: Fixed a use-after-free and memory errors in ext4 when mounting and operating on a corrupted image (bsc#1198577). - CVE-2022-21499: Lock down kgdb to prohibit secure-boot bypass (bsc#1199426). - CVE-2019-19377: Fixed a user-after-free that could be triggered when an attacker mounts a crafted btrfs filesystem image (bsc#1158266). The following non-security bugs were fixed: - btrfs: tree-checker: fix incorrect printk format (bsc#1200249). - exec: Force single empty string when argv is empty (bsc#1200571). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP4-SAP-Azure-LI-BYOS-Production-2022-2393,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2022-2393,SUSE-2022-2393,SUSE-OpenStack-Cloud-9-2022-2393,SUSE-OpenStack-Cloud-Crowbar-9-2022-2393,SUSE-SLE-HA-12-SP4-2022-2393,SUSE-SLE-Live-Patching-12-SP4-2022-2393,SUSE-SLE-SAP-12-SP4-2022-2393,SUSE-SLE-SERVER-12-SP4-LTSS-2022-2393 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/ Link for SUSE-SU-2022:2393-1 https://lists.suse.com/pipermail/sle-security-updates/2022-July/011546.html E-Mail link for SUSE-SU-2022:2393-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1158266 SUSE Bug 1158266 https://bugzilla.suse.com/1162338 SUSE Bug 1162338 https://bugzilla.suse.com/1162369 SUSE Bug 1162369 https://bugzilla.suse.com/1173871 SUSE Bug 1173871 https://bugzilla.suse.com/1177282 SUSE Bug 1177282 https://bugzilla.suse.com/1194013 SUSE Bug 1194013 https://bugzilla.suse.com/1196901 SUSE Bug 1196901 https://bugzilla.suse.com/1198577 SUSE Bug 1198577 https://bugzilla.suse.com/1199426 SUSE Bug 1199426 https://bugzilla.suse.com/1199487 SUSE Bug 1199487 https://bugzilla.suse.com/1199507 SUSE Bug 1199507 https://bugzilla.suse.com/1199657 SUSE Bug 1199657 https://bugzilla.suse.com/1200059 SUSE Bug 1200059 https://bugzilla.suse.com/1200143 SUSE Bug 1200143 https://bugzilla.suse.com/1200144 SUSE Bug 1200144 https://bugzilla.suse.com/1200249 SUSE Bug 1200249 https://bugzilla.suse.com/1200571 SUSE Bug 1200571 https://bugzilla.suse.com/1200599 SUSE Bug 1200599 https://bugzilla.suse.com/1200604 SUSE Bug 1200604 https://bugzilla.suse.com/1200605 SUSE Bug 1200605 https://bugzilla.suse.com/1200608 SUSE Bug 1200608 https://bugzilla.suse.com/1200619 SUSE Bug 1200619 https://bugzilla.suse.com/1200692 SUSE Bug 1200692 https://bugzilla.suse.com/1200762 SUSE Bug 1200762 https://bugzilla.suse.com/1201050 SUSE Bug 1201050 https://bugzilla.suse.com/1201080 SUSE Bug 1201080 https://bugzilla.suse.com/1201251 SUSE Bug 1201251 https://www.suse.com/security/cve/CVE-2019-19377/ SUSE CVE CVE-2019-19377 page https://www.suse.com/security/cve/CVE-2020-26541/ SUSE CVE CVE-2020-26541 page https://www.suse.com/security/cve/CVE-2021-26341/ SUSE CVE CVE-2021-26341 page https://www.suse.com/security/cve/CVE-2021-4157/ SUSE CVE CVE-2021-4157 page https://www.suse.com/security/cve/CVE-2022-1184/ SUSE CVE CVE-2022-1184 page https://www.suse.com/security/cve/CVE-2022-1679/ SUSE CVE CVE-2022-1679 page https://www.suse.com/security/cve/CVE-2022-1729/ SUSE CVE CVE-2022-1729 page https://www.suse.com/security/cve/CVE-2022-1974/ SUSE CVE CVE-2022-1974 page https://www.suse.com/security/cve/CVE-2022-1975/ SUSE CVE CVE-2022-1975 page https://www.suse.com/security/cve/CVE-2022-20132/ SUSE CVE CVE-2022-20132 page https://www.suse.com/security/cve/CVE-2022-20141/ SUSE CVE CVE-2022-20141 page https://www.suse.com/security/cve/CVE-2022-20154/ SUSE CVE CVE-2022-20154 page https://www.suse.com/security/cve/CVE-2022-21499/ SUSE CVE CVE-2022-21499 page https://www.suse.com/security/cve/CVE-2022-2318/ SUSE CVE CVE-2022-2318 page https://www.suse.com/security/cve/CVE-2022-26365/ SUSE CVE CVE-2022-26365 page https://www.suse.com/security/cve/CVE-2022-29900/ SUSE CVE CVE-2022-29900 page https://www.suse.com/security/cve/CVE-2022-29901/ SUSE CVE CVE-2022-29901 page https://www.suse.com/security/cve/CVE-2022-33740/ SUSE CVE CVE-2022-33740 page https://www.suse.com/security/cve/CVE-2022-33741/ SUSE CVE CVE-2022-33741 page https://www.suse.com/security/cve/CVE-2022-33742/ SUSE CVE CVE-2022-33742 page https://www.suse.com/security/cve/CVE-2022-33981/ SUSE CVE CVE-2022-33981 page Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise High Availability Extension 12 SP4 SUSE Linux Enterprise Live Patching 12 SP4 SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 cluster-md-kmp-default-4.12.14-95.102.1 dlm-kmp-default-4.12.14-95.102.1 gfs2-kmp-default-4.12.14-95.102.1 kernel-default-4.12.14-95.102.1 ocfs2-kmp-default-4.12.14-95.102.1 kernel-debug-4.12.14-95.102.1 kernel-debug-base-4.12.14-95.102.1 kernel-debug-devel-4.12.14-95.102.1 kernel-debug-kgraft-devel-4.12.14-95.102.1 kernel-default-base-4.12.14-95.102.1 kernel-default-devel-4.12.14-95.102.1 kernel-default-extra-4.12.14-95.102.1 kernel-default-kgraft-4.12.14-95.102.1 kernel-default-kgraft-devel-4.12.14-95.102.1 kernel-default-man-4.12.14-95.102.1 kernel-devel-4.12.14-95.102.1 kernel-docs-4.12.14-95.102.1 kernel-docs-html-4.12.14-95.102.1 kernel-kvmsmall-4.12.14-95.102.1 kernel-kvmsmall-base-4.12.14-95.102.1 kernel-kvmsmall-devel-4.12.14-95.102.1 kernel-kvmsmall-kgraft-devel-4.12.14-95.102.1 kernel-macros-4.12.14-95.102.1 kernel-obs-build-4.12.14-95.102.1 kernel-obs-qa-4.12.14-95.102.1 kernel-source-4.12.14-95.102.1 kernel-source-vanilla-4.12.14-95.102.1 kernel-syms-4.12.14-95.102.1 kernel-vanilla-4.12.14-95.102.1 kernel-vanilla-base-4.12.14-95.102.1 kernel-vanilla-devel-4.12.14-95.102.1 kernel-vanilla-kgraft-devel-4.12.14-95.102.1 kernel-zfcpdump-4.12.14-95.102.1 kernel-zfcpdump-man-4.12.14-95.102.1 kgraft-patch-4_12_14-95_102-default-1-6.3.1 kselftests-kmp-default-4.12.14-95.102.1 cluster-md-kmp-default-4.12.14-95.102.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production dlm-kmp-default-4.12.14-95.102.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production gfs2-kmp-default-4.12.14-95.102.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production kernel-default-4.12.14-95.102.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production ocfs2-kmp-default-4.12.14-95.102.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production cluster-md-kmp-default-4.12.14-95.102.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production dlm-kmp-default-4.12.14-95.102.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production gfs2-kmp-default-4.12.14-95.102.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production kernel-default-4.12.14-95.102.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production ocfs2-kmp-default-4.12.14-95.102.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production cluster-md-kmp-default-4.12.14-95.102.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP4 dlm-kmp-default-4.12.14-95.102.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP4 gfs2-kmp-default-4.12.14-95.102.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP4 ocfs2-kmp-default-4.12.14-95.102.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP4 kernel-default-kgraft-4.12.14-95.102.1 as a component of SUSE Linux Enterprise Live Patching 12 SP4 kernel-default-kgraft-devel-4.12.14-95.102.1 as a component of SUSE Linux Enterprise Live Patching 12 SP4 kgraft-patch-4_12_14-95_102-default-1-6.3.1 as a component of SUSE Linux Enterprise Live Patching 12 SP4 kernel-default-4.12.14-95.102.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-base-4.12.14-95.102.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-devel-4.12.14-95.102.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-man-4.12.14-95.102.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-devel-4.12.14-95.102.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-macros-4.12.14-95.102.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-source-4.12.14-95.102.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-syms-4.12.14-95.102.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-4.12.14-95.102.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-default-base-4.12.14-95.102.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-default-devel-4.12.14-95.102.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-devel-4.12.14-95.102.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-macros-4.12.14-95.102.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-source-4.12.14-95.102.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-syms-4.12.14-95.102.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-default-4.12.14-95.102.1 as a component of SUSE OpenStack Cloud 9 kernel-default-base-4.12.14-95.102.1 as a component of SUSE OpenStack Cloud 9 kernel-default-devel-4.12.14-95.102.1 as a component of SUSE OpenStack Cloud 9 kernel-devel-4.12.14-95.102.1 as a component of SUSE OpenStack Cloud 9 kernel-macros-4.12.14-95.102.1 as a component of SUSE OpenStack Cloud 9 kernel-source-4.12.14-95.102.1 as a component of SUSE OpenStack Cloud 9 kernel-syms-4.12.14-95.102.1 as a component of SUSE OpenStack Cloud 9 kernel-default-4.12.14-95.102.1 as a component of SUSE OpenStack Cloud Crowbar 9 kernel-default-base-4.12.14-95.102.1 as a component of SUSE OpenStack Cloud Crowbar 9 kernel-default-devel-4.12.14-95.102.1 as a component of SUSE OpenStack Cloud Crowbar 9 kernel-devel-4.12.14-95.102.1 as a component of SUSE OpenStack Cloud Crowbar 9 kernel-macros-4.12.14-95.102.1 as a component of SUSE OpenStack Cloud Crowbar 9 kernel-source-4.12.14-95.102.1 as a component of SUSE OpenStack Cloud Crowbar 9 kernel-syms-4.12.14-95.102.1 as a component of SUSE OpenStack Cloud Crowbar 9 In the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image, performing some operations, and unmounting can lead to a use-after-free in btrfs_queue_work in fs/btrfs/async-thread.c. CVE-2019-19377 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_102-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.102.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/ https://www.suse.com/security/cve/CVE-2019-19377.html CVE-2019-19377 https://bugzilla.suse.com/1158266 SUSE Bug 1158266 https://bugzilla.suse.com/1162338 SUSE Bug 1162338 https://bugzilla.suse.com/1162369 SUSE Bug 1162369 https://bugzilla.suse.com/1173871 SUSE Bug 1173871 https://bugzilla.suse.com/1211495 SUSE Bug 1211495 The Linux kernel through 5.8.13 does not properly enforce the Secure Boot Forbidden Signature Database (aka dbx) protection mechanism. This affects certs/blacklist.c and certs/system_keyring.c. CVE-2020-26541 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_102-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.102.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/ https://www.suse.com/security/cve/CVE-2020-26541.html CVE-2020-26541 https://bugzilla.suse.com/1177282 SUSE Bug 1177282 Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage. CVE-2021-26341 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_102-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.102.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/ https://www.suse.com/security/cve/CVE-2021-26341.html CVE-2021-26341 https://bugzilla.suse.com/1196901 SUSE Bug 1196901 https://bugzilla.suse.com/1201050 SUSE Bug 1201050 An out of memory bounds write flaw (1 or 2 bytes of memory) in the Linux kernel NFS subsystem was found in the way users use mirroring (replication of files with NFS). A user, having access to the NFS mount, could potentially use this flaw to crash the system or escalate privileges on the system. CVE-2021-4157 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_102-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.102.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/ https://www.suse.com/security/cve/CVE-2021-4157.html CVE-2021-4157 https://bugzilla.suse.com/1194013 SUSE Bug 1194013 A use-after-free flaw was found in fs/ext4/namei.c:dx_insert_block() in the Linux kernel’s filesystem sub-component. This flaw allows a local attacker with a user privilege to cause a denial of service. CVE-2022-1184 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_102-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.102.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/ https://www.suse.com/security/cve/CVE-2022-1184.html CVE-2022-1184 https://bugzilla.suse.com/1198577 SUSE Bug 1198577 https://bugzilla.suse.com/1210859 SUSE Bug 1210859 A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system. CVE-2022-1679 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_102-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.102.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/ https://www.suse.com/security/cve/CVE-2022-1679.html CVE-2022-1679 https://bugzilla.suse.com/1199487 SUSE Bug 1199487 https://bugzilla.suse.com/1201080 SUSE Bug 1201080 https://bugzilla.suse.com/1201832 SUSE Bug 1201832 https://bugzilla.suse.com/1204132 SUSE Bug 1204132 https://bugzilla.suse.com/1212316 SUSE Bug 1212316 A race condition was found the Linux kernel in perf_event_open() which can be exploited by an unprivileged user to gain root privileges. The bug allows to build several exploit primitives such as kernel address information leak, arbitrary execution, etc. CVE-2022-1729 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_102-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.102.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/ https://www.suse.com/security/cve/CVE-2022-1729.html CVE-2022-1729 https://bugzilla.suse.com/1199507 SUSE Bug 1199507 https://bugzilla.suse.com/1199697 SUSE Bug 1199697 https://bugzilla.suse.com/1201832 SUSE Bug 1201832 A use-after-free flaw was found in the Linux kernel's NFC core functionality due to a race condition between kobject creation and delete. This vulnerability allows a local attacker with CAP_NET_ADMIN privilege to leak kernel information. CVE-2022-1974 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_102-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.102.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/ https://www.suse.com/security/cve/CVE-2022-1974.html CVE-2022-1974 https://bugzilla.suse.com/1200144 SUSE Bug 1200144 https://bugzilla.suse.com/1200265 SUSE Bug 1200265 There is a sleep-in-atomic bug in /net/nfc/netlink.c that allows an attacker to crash the Linux kernel by simulating a nfc device from user-space. CVE-2022-1975 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_102-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.102.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/ https://www.suse.com/security/cve/CVE-2022-1975.html CVE-2022-1975 https://bugzilla.suse.com/1200143 SUSE Bug 1200143 In lg_probe and related functions of hid-lg.c and other USB HID files, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure if a malicious USB HID device were plugged in, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-188677105References: Upstream kernel CVE-2022-20132 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_102-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.102.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/ https://www.suse.com/security/cve/CVE-2022-20132.html CVE-2022-20132 https://bugzilla.suse.com/1200619 SUSE Bug 1200619 https://bugzilla.suse.com/1212287 SUSE Bug 1212287 In ip_check_mc_rcu of igmp.c, there is a possible use after free due to improper locking. This could lead to local escalation of privilege when opening and closing inet sockets with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-112551163References: Upstream kernel CVE-2022-20141 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_102-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.102.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/ https://www.suse.com/security/cve/CVE-2022-20141.html CVE-2022-20141 https://bugzilla.suse.com/1200604 SUSE Bug 1200604 https://bugzilla.suse.com/1200605 SUSE Bug 1200605 https://bugzilla.suse.com/1203034 SUSE Bug 1203034 In lock_sock_nested of sock.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-174846563References: Upstream kernel CVE-2022-20154 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_102-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.102.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/ https://www.suse.com/security/cve/CVE-2022-20154.html CVE-2022-20154 https://bugzilla.suse.com/1200599 SUSE Bug 1200599 https://bugzilla.suse.com/1200608 SUSE Bug 1200608 KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a serial port could trigger the debugger so it is important that the debugger respect the lockdown mode when/if it is triggered. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). CVE-2022-21499 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_102-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.102.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/ https://www.suse.com/security/cve/CVE-2022-21499.html CVE-2022-21499 https://bugzilla.suse.com/1199426 SUSE Bug 1199426 https://bugzilla.suse.com/1200059 SUSE Bug 1200059 https://bugzilla.suse.com/1203034 SUSE Bug 1203034 https://bugzilla.suse.com/1204132 SUSE Bug 1204132 https://bugzilla.suse.com/1212315 SUSE Bug 1212315 There are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of linux that allow attackers to crash linux kernel without any privileges. CVE-2022-2318 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_102-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.102.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/ https://www.suse.com/security/cve/CVE-2022-2318.html CVE-2022-2318 https://bugzilla.suse.com/1201251 SUSE Bug 1201251 https://bugzilla.suse.com/1212303 SUSE Bug 1212303 Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742). CVE-2022-26365 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_102-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.102.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/ https://www.suse.com/security/cve/CVE-2022-26365.html CVE-2022-26365 https://bugzilla.suse.com/1200762 SUSE Bug 1200762 Mis-trained branch predictions for return instructions may allow arbitrary speculative code execution under certain microarchitecture-dependent conditions. CVE-2022-29900 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_102-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.102.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/ https://www.suse.com/security/cve/CVE-2022-29900.html CVE-2022-29900 https://bugzilla.suse.com/1199657 SUSE Bug 1199657 https://bugzilla.suse.com/1201469 SUSE Bug 1201469 https://bugzilla.suse.com/1207894 SUSE Bug 1207894 Intel microprocessor generations 6 to 8 are affected by a new Spectre variant that is able to bypass their retpoline mitigation in the kernel to leak arbitrary data. An attacker with unprivileged user access can hijack return instructions to achieve arbitrary speculative code execution under certain microarchitecture-dependent conditions. CVE-2022-29901 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_102-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.102.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/ https://www.suse.com/security/cve/CVE-2022-29901.html CVE-2022-29901 https://bugzilla.suse.com/1201469 SUSE Bug 1201469 https://bugzilla.suse.com/1207894 SUSE Bug 1207894 Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742). CVE-2022-33740 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_102-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.102.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/ https://www.suse.com/security/cve/CVE-2022-33740.html CVE-2022-33740 https://bugzilla.suse.com/1200762 SUSE Bug 1200762 Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742). CVE-2022-33741 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_102-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.102.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/ https://www.suse.com/security/cve/CVE-2022-33741.html CVE-2022-33741 https://bugzilla.suse.com/1200762 SUSE Bug 1200762 Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742). CVE-2022-33742 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_102-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.102.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/ https://www.suse.com/security/cve/CVE-2022-33742.html CVE-2022-33742 https://bugzilla.suse.com/1200762 SUSE Bug 1200762 drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of a concurrency use-after-free flaw after deallocating raw_cmd in the raw_cmd_ioctl function. CVE-2022-33981 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.102.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.102.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_102-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.102.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.102.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.102.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222393-1/ https://www.suse.com/security/cve/CVE-2022-33981.html CVE-2022-33981 https://bugzilla.suse.com/1200692 SUSE Bug 1200692