Security update for the Linux Kernel SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:3274-1 Final 1 1 2022-09-14T07:59:26Z current 2022-09-14T07:59:26Z 2022-09-14T07:59:26Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for the Linux Kernel The SUSE Linux Enterprise 12 SP4 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36946: Fixed a denial of service (panic) inside nfqnl_mangle in net/netfilter/nfnetlink_queue.c (bnc#1201940). - CVE-2022-36879: Fixed an issue in xfrm_expand_policies in net/xfrm/xfrm_policy.c where a refcount could be dropped twice (bnc#1201948). - CVE-2022-3028: Fixed race condition that was found in the IP framework for transforming packets (XFRM subsystem) (bnc#1202898). - CVE-2022-2977: Fixed reference counting for struct tpm_chip (bsc#1202672). - CVE-2022-2639: Fixed an integer coercion error that was found in the openvswitch kernel module (bnc#1202154). - CVE-2022-26373: Fixed non-transparent sharing of return predictor targets between contexts in some Intel Processors (bnc#1201726). - CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096). - CVE-2022-21385: Fixed a flaw in net_rds_alloc_sgs() that allowed unprivileged local users to crash the machine (bnc#1202897). - CVE-2022-20369: Fixed out of bounds write in v4l2_m2m_querybuf of v4l2-mem2mem.c (bnc#1202347). - CVE-2022-20368: Fixed slab-out-of-bounds access in packet_recvmsg() (bsc#1202346). - CVE-2022-20166: Fixed possible out of bounds write due to a heap buffer overflow in various methods of kernel base drivers (bnc#1200598). - CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bnc#1194535). - CVE-2020-36558: Fixed a race condition involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault (bnc#1200910). - CVE-2020-36557: Fixed a race condition between the VT_DISALLOCATE ioctl and closing/opening of ttys that could have led to a use-after-free (bnc#1201429). - CVE-2020-36516: Fixed an issue in the mixed IPID assignment method where an attacker was able to inject data into or terminate a victim's TCP session (bnc#1196616). The following non-security bugs were fixed: - cifs: fix error paths in cifs_tree_connect() (bsc#1177440). - cifs: fix uninitialized pointer in error case in dfs_cache_get_tgt_share (bsc#1188944). - cifs: report error instead of invalid when revalidating a dentry fails (bsc#1177440). - cifs: skip trailing separators of prefix paths (bsc#1188944). - kernel-obs-build: include qemu_fw_cfg (boo#1201705) - lightnvm: Remove lightnvm implemenation (bsc#1191881 bsc#1201420 ZDI-CAN-17325). - mm/rmap.c: do not reuse anon_vma if we just want a copy (git-fixes, bsc#1203098). - mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (git-fixes, bsc#1203098). - net_sched: cls_route: disallow handle of 0 (bsc#1202393). - objtool: Add --backtrace support (bsc#1202396). - objtool: Add support for intra-function calls (bsc#1202396). - objtool: Allow no-op CFI ops in alternatives (bsc#1202396). - objtool: Convert insn type to enum (bsc#1202396). - objtool: Do not use ignore flag for fake jumps (bsc#1202396). - objtool: Fix !CFI insn_state propagation (bsc#1202396). - objtool: Fix ORC vs alternatives (bsc#1202396). - objtool: Fix sibling call detection (bsc#1202396). - objtool: Make handle_insn_ops() unconditional (bsc#1202396). - objtool: Remove INSN_STACK (bsc#1202396). - objtool: Remove check preventing branches within alternative (bsc#1202396). - objtool: Rename elf_open() to prevent conflict with libelf from elftoolchain (bsc#1202396). - objtool: Rename struct cfi_state (bsc#1202396). - objtool: Rework allocating stack_ops on decode (bsc#1202396). - objtool: Rewrite alt->skip_orig (bsc#1202396). - objtool: Set insn->func for alternatives (bsc#1202396). - objtool: Support conditional retpolines (bsc#1202396). - objtool: Support multiple stack_op per instruction (bsc#1202396). - objtool: Track original function across branches (bsc#1202396). - objtool: Uniquely identify alternative instruction groups (bsc#1202396). - objtool: Use Elf_Scn typedef instead of assuming struct name (bsc#1202396). - powerpc/pci: Fix broken INTx configuration via OF (bsc#1172145 ltc#184630 bsc#1200770 ltc#198666). - powerpc/pci: Remove LSI mappings on device teardown (bsc#1172145 ltc#184630 bsc#1200770 ltc#198666). - powerpc/pci: Use of_irq_parse_and_map_pci() helper (bsc#1172145 ltc#184630 bsc#1200770 ltc#198666). - rpm: Fix parsing of rpm/macros.kernel-source on SLE12 (bsc#1201019). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP4-SAP-Azure-LI-BYOS-Production-2022-3274,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2022-3274,SUSE-2022-3274,SUSE-OpenStack-Cloud-9-2022-3274,SUSE-OpenStack-Cloud-Crowbar-9-2022-3274,SUSE-SLE-HA-12-SP4-2022-3274,SUSE-SLE-Live-Patching-12-SP4-2022-3274,SUSE-SLE-SAP-12-SP4-2022-3274,SUSE-SLE-SERVER-12-SP4-LTSS-2022-3274 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20223274-1/ Link for SUSE-SU-2022:3274-1 https://lists.suse.com/pipermail/sle-security-updates/2022-September/012234.html E-Mail link for SUSE-SU-2022:3274-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1172145 SUSE Bug 1172145 https://bugzilla.suse.com/1177440 SUSE Bug 1177440 https://bugzilla.suse.com/1188944 SUSE Bug 1188944 https://bugzilla.suse.com/1191881 SUSE Bug 1191881 https://bugzilla.suse.com/1194535 SUSE Bug 1194535 https://bugzilla.suse.com/1196616 SUSE Bug 1196616 https://bugzilla.suse.com/1200598 SUSE Bug 1200598 https://bugzilla.suse.com/1200770 SUSE Bug 1200770 https://bugzilla.suse.com/1200910 SUSE Bug 1200910 https://bugzilla.suse.com/1201019 SUSE Bug 1201019 https://bugzilla.suse.com/1201420 SUSE Bug 1201420 https://bugzilla.suse.com/1201429 SUSE Bug 1201429 https://bugzilla.suse.com/1201705 SUSE Bug 1201705 https://bugzilla.suse.com/1201726 SUSE Bug 1201726 https://bugzilla.suse.com/1201940 SUSE Bug 1201940 https://bugzilla.suse.com/1201948 SUSE Bug 1201948 https://bugzilla.suse.com/1202096 SUSE Bug 1202096 https://bugzilla.suse.com/1202154 SUSE Bug 1202154 https://bugzilla.suse.com/1202346 SUSE Bug 1202346 https://bugzilla.suse.com/1202347 SUSE Bug 1202347 https://bugzilla.suse.com/1202393 SUSE Bug 1202393 https://bugzilla.suse.com/1202396 SUSE Bug 1202396 https://bugzilla.suse.com/1202672 SUSE Bug 1202672 https://bugzilla.suse.com/1202897 SUSE Bug 1202897 https://bugzilla.suse.com/1202898 SUSE Bug 1202898 https://bugzilla.suse.com/1203098 SUSE Bug 1203098 https://www.suse.com/security/cve/CVE-2020-36516/ SUSE CVE CVE-2020-36516 page https://www.suse.com/security/cve/CVE-2020-36557/ SUSE CVE CVE-2020-36557 page https://www.suse.com/security/cve/CVE-2020-36558/ SUSE CVE CVE-2020-36558 page https://www.suse.com/security/cve/CVE-2021-4203/ SUSE CVE CVE-2021-4203 page https://www.suse.com/security/cve/CVE-2022-20166/ SUSE CVE CVE-2022-20166 page https://www.suse.com/security/cve/CVE-2022-20368/ SUSE CVE CVE-2022-20368 page https://www.suse.com/security/cve/CVE-2022-20369/ SUSE CVE CVE-2022-20369 page https://www.suse.com/security/cve/CVE-2022-21385/ SUSE CVE CVE-2022-21385 page https://www.suse.com/security/cve/CVE-2022-2588/ SUSE CVE CVE-2022-2588 page https://www.suse.com/security/cve/CVE-2022-26373/ SUSE CVE CVE-2022-26373 page https://www.suse.com/security/cve/CVE-2022-2639/ SUSE CVE CVE-2022-2639 page https://www.suse.com/security/cve/CVE-2022-2977/ SUSE CVE CVE-2022-2977 page https://www.suse.com/security/cve/CVE-2022-3028/ SUSE CVE CVE-2022-3028 page https://www.suse.com/security/cve/CVE-2022-36879/ SUSE CVE CVE-2022-36879 page https://www.suse.com/security/cve/CVE-2022-36946/ SUSE CVE CVE-2022-36946 page Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production SUSE Linux Enterprise High Availability Extension 12 SP4 SUSE Linux Enterprise Live Patching 12 SP4 SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 cluster-md-kmp-default-4.12.14-95.108.1 dlm-kmp-default-4.12.14-95.108.1 gfs2-kmp-default-4.12.14-95.108.1 kernel-default-4.12.14-95.108.1 ocfs2-kmp-default-4.12.14-95.108.1 kernel-debug-4.12.14-95.108.1 kernel-debug-base-4.12.14-95.108.1 kernel-debug-devel-4.12.14-95.108.1 kernel-debug-kgraft-devel-4.12.14-95.108.1 kernel-default-base-4.12.14-95.108.1 kernel-default-devel-4.12.14-95.108.1 kernel-default-extra-4.12.14-95.108.1 kernel-default-kgraft-4.12.14-95.108.1 kernel-default-kgraft-devel-4.12.14-95.108.1 kernel-default-man-4.12.14-95.108.1 kernel-devel-4.12.14-95.108.1 kernel-docs-4.12.14-95.108.1 kernel-docs-html-4.12.14-95.108.1 kernel-kvmsmall-4.12.14-95.108.1 kernel-kvmsmall-base-4.12.14-95.108.1 kernel-kvmsmall-devel-4.12.14-95.108.1 kernel-kvmsmall-kgraft-devel-4.12.14-95.108.1 kernel-macros-4.12.14-95.108.1 kernel-obs-build-4.12.14-95.108.1 kernel-obs-qa-4.12.14-95.108.1 kernel-source-4.12.14-95.108.1 kernel-source-vanilla-4.12.14-95.108.1 kernel-syms-4.12.14-95.108.1 kernel-vanilla-4.12.14-95.108.1 kernel-vanilla-base-4.12.14-95.108.1 kernel-vanilla-devel-4.12.14-95.108.1 kernel-vanilla-kgraft-devel-4.12.14-95.108.1 kernel-zfcpdump-4.12.14-95.108.1 kernel-zfcpdump-man-4.12.14-95.108.1 kgraft-patch-4_12_14-95_108-default-1-6.3.1 kselftests-kmp-default-4.12.14-95.108.1 cluster-md-kmp-default-4.12.14-95.108.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production dlm-kmp-default-4.12.14-95.108.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production gfs2-kmp-default-4.12.14-95.108.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production kernel-default-4.12.14-95.108.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production ocfs2-kmp-default-4.12.14-95.108.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production cluster-md-kmp-default-4.12.14-95.108.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production dlm-kmp-default-4.12.14-95.108.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production gfs2-kmp-default-4.12.14-95.108.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production kernel-default-4.12.14-95.108.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production ocfs2-kmp-default-4.12.14-95.108.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production cluster-md-kmp-default-4.12.14-95.108.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP4 dlm-kmp-default-4.12.14-95.108.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP4 gfs2-kmp-default-4.12.14-95.108.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP4 ocfs2-kmp-default-4.12.14-95.108.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP4 kernel-default-kgraft-4.12.14-95.108.1 as a component of SUSE Linux Enterprise Live Patching 12 SP4 kernel-default-kgraft-devel-4.12.14-95.108.1 as a component of SUSE Linux Enterprise Live Patching 12 SP4 kgraft-patch-4_12_14-95_108-default-1-6.3.1 as a component of SUSE Linux Enterprise Live Patching 12 SP4 kernel-default-4.12.14-95.108.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-base-4.12.14-95.108.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-devel-4.12.14-95.108.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-man-4.12.14-95.108.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-devel-4.12.14-95.108.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-macros-4.12.14-95.108.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-source-4.12.14-95.108.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-syms-4.12.14-95.108.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-4.12.14-95.108.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-default-base-4.12.14-95.108.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-default-devel-4.12.14-95.108.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-devel-4.12.14-95.108.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-macros-4.12.14-95.108.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-source-4.12.14-95.108.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-syms-4.12.14-95.108.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-default-4.12.14-95.108.1 as a component of SUSE OpenStack Cloud 9 kernel-default-base-4.12.14-95.108.1 as a component of SUSE OpenStack Cloud 9 kernel-default-devel-4.12.14-95.108.1 as a component of SUSE OpenStack Cloud 9 kernel-devel-4.12.14-95.108.1 as a component of SUSE OpenStack Cloud 9 kernel-macros-4.12.14-95.108.1 as a component of SUSE OpenStack Cloud 9 kernel-source-4.12.14-95.108.1 as a component of SUSE OpenStack Cloud 9 kernel-syms-4.12.14-95.108.1 as a component of SUSE OpenStack Cloud 9 kernel-default-4.12.14-95.108.1 as a component of SUSE OpenStack Cloud Crowbar 9 kernel-default-base-4.12.14-95.108.1 as a component of SUSE OpenStack Cloud Crowbar 9 kernel-default-devel-4.12.14-95.108.1 as a component of SUSE OpenStack Cloud Crowbar 9 kernel-devel-4.12.14-95.108.1 as a component of SUSE OpenStack Cloud Crowbar 9 kernel-macros-4.12.14-95.108.1 as a component of SUSE OpenStack Cloud Crowbar 9 kernel-source-4.12.14-95.108.1 as a component of SUSE OpenStack Cloud Crowbar 9 kernel-syms-4.12.14-95.108.1 as a component of SUSE OpenStack Cloud Crowbar 9 An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP session or terminate that session. CVE-2020-36516 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_108-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223274-1/ https://www.suse.com/security/cve/CVE-2020-36516.html CVE-2020-36516 https://bugzilla.suse.com/1196616 SUSE Bug 1196616 https://bugzilla.suse.com/1196867 SUSE Bug 1196867 https://bugzilla.suse.com/1204092 SUSE Bug 1204092 https://bugzilla.suse.com/1204183 SUSE Bug 1204183 A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free. CVE-2020-36557 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_108-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223274-1/ https://www.suse.com/security/cve/CVE-2020-36557.html CVE-2020-36557 https://bugzilla.suse.com/1201429 SUSE Bug 1201429 https://bugzilla.suse.com/1201742 SUSE Bug 1201742 https://bugzilla.suse.com/1202874 SUSE Bug 1202874 https://bugzilla.suse.com/1205313 SUSE Bug 1205313 A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault. CVE-2020-36558 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_108-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223274-1/ https://www.suse.com/security/cve/CVE-2020-36558.html CVE-2020-36558 https://bugzilla.suse.com/1200910 SUSE Bug 1200910 https://bugzilla.suse.com/1201752 SUSE Bug 1201752 https://bugzilla.suse.com/1205313 SUSE Bug 1205313 A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Linux kernel. In this flaw, an attacker with a user privileges may crash the system or leak internal kernel information. CVE-2021-4203 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_108-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.108.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223274-1/ https://www.suse.com/security/cve/CVE-2021-4203.html CVE-2021-4203 https://bugzilla.suse.com/1194535 SUSE Bug 1194535 In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-182388481References: Upstream kernel CVE-2022-20166 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_108-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.108.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223274-1/ https://www.suse.com/security/cve/CVE-2022-20166.html CVE-2022-20166 https://bugzilla.suse.com/1200598 SUSE Bug 1200598 https://bugzilla.suse.com/1212284 SUSE Bug 1212284 Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel CVE-2022-20368 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_108-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.108.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223274-1/ https://www.suse.com/security/cve/CVE-2022-20368.html CVE-2022-20368 https://bugzilla.suse.com/1202346 SUSE Bug 1202346 https://bugzilla.suse.com/1212311 SUSE Bug 1212311 In v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-223375145References: Upstream kernel CVE-2022-20369 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_108-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.108.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223274-1/ https://www.suse.com/security/cve/CVE-2022-20369.html CVE-2022-20369 https://bugzilla.suse.com/1202347 SUSE Bug 1202347 https://bugzilla.suse.com/1212321 SUSE Bug 1212321 A flaw in net_rds_alloc_sgs() in Oracle Linux kernels allows unprivileged local users to crash the machine. CVSS 3.1 Base Score 6.2 (Availability impacts). CVSS Vector (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) CVE-2022-21385 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_108-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.108.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223274-1/ https://www.suse.com/security/cve/CVE-2022-21385.html CVE-2022-21385 https://bugzilla.suse.com/1202897 SUSE Bug 1202897 https://bugzilla.suse.com/1212285 SUSE Bug 1212285 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. CVE-2022-2588 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_108-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223274-1/ https://www.suse.com/security/cve/CVE-2022-2588.html CVE-2022-2588 https://bugzilla.suse.com/1202096 SUSE Bug 1202096 https://bugzilla.suse.com/1203613 SUSE Bug 1203613 https://bugzilla.suse.com/1204183 SUSE Bug 1204183 https://bugzilla.suse.com/1209225 SUSE Bug 1209225 Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. CVE-2022-26373 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_108-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.108.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223274-1/ https://www.suse.com/security/cve/CVE-2022-26373.html CVE-2022-26373 https://bugzilla.suse.com/1201726 SUSE Bug 1201726 https://bugzilla.suse.com/1209619 SUSE Bug 1209619 An integer coercion error was found in the openvswitch kernel module. Given a sufficiently large number of actions, while copying and reserving memory for a new action of a new flow, the reserve_sfa_size() function does not return -EMSGSIZE as expected, potentially leading to an out-of-bounds write access. This flaw allows a local user to crash or potentially escalate their privileges on the system. CVE-2022-2639 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_108-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.108.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223274-1/ https://www.suse.com/security/cve/CVE-2022-2639.html CVE-2022-2639 https://bugzilla.suse.com/1202154 SUSE Bug 1202154 A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a system where virtualized TPM devices are configured (this is not the default) a local attacker can create a use-after-free and create a situation where it may be possible to escalate privileges on the system. CVE-2022-2977 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_108-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.108.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223274-1/ https://www.suse.com/security/cve/CVE-2022-2977.html CVE-2022-2977 https://bugzilla.suse.com/1202672 SUSE Bug 1202672 A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket. CVE-2022-3028 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_108-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.108.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223274-1/ https://www.suse.com/security/cve/CVE-2022-3028.html CVE-2022-3028 https://bugzilla.suse.com/1202898 SUSE Bug 1202898 https://bugzilla.suse.com/1212296 SUSE Bug 1212296 An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice. CVE-2022-36879 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_108-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.108.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223274-1/ https://www.suse.com/security/cve/CVE-2022-36879.html CVE-2022-36879 https://bugzilla.suse.com/1201948 SUSE Bug 1201948 https://bugzilla.suse.com/1212327 SUSE Bug 1212327 nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len. CVE-2022-36946 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:cluster-md-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:dlm-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:gfs2-kmp-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:kernel-default-4.12.14-95.108.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.108.1 SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_108-default-1-6.3.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.108.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.108.1 SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.108.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20223274-1/ https://www.suse.com/security/cve/CVE-2022-36946.html CVE-2022-36946 https://bugzilla.suse.com/1201940 SUSE Bug 1201940 https://bugzilla.suse.com/1201941 SUSE Bug 1201941 https://bugzilla.suse.com/1202312 SUSE Bug 1202312 https://bugzilla.suse.com/1202874 SUSE Bug 1202874 https://bugzilla.suse.com/1203208 SUSE Bug 1203208 https://bugzilla.suse.com/1204132 SUSE Bug 1204132 https://bugzilla.suse.com/1205313 SUSE Bug 1205313 https://bugzilla.suse.com/1212310 SUSE Bug 1212310