Search the atlas

SUSE-SU-2024:3408-1 Not scored

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-41062: Sync sock recv cb and release (bsc#1228576). - CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454). - CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707). - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500). - CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326). - CVE-2024-44938: Fix shift-out-of-bounds in dbDiscardAG (bsc#1229792). - CVE-2024-41087: Fix double free on error (CVE-2024-41087,bsc#1228466). - CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503) - CVE-2022-48935: Fixed an unregister flowtable hooks on netns exit (bsc#1229619) - CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641) - CVE-2024-42271: Fixed a use after free in iucv_sock_close(). (bsc#1229400) - CVE-2024-42232: Fixed a race between delayed_work() and ceph_monc_stop(). (bsc#1228959) - CVE-2024-40910: Fix refcount imbalance on inbound connections (bsc#1227832). - CVE-2024-41009: Fix overrunning reservations in ringbuf (bsc#1228020). - CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245). The following non-security bugs were fixed: - Bluetooth: L2CAP: Fix deadlock (git-fixes). - mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes). - mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes). - Revert 'mm: prevent derefencing NULL ptr in pfn_section_valid()' (bsc#1230413). - Revert 'mm, kmsan: fix infinite recursion due to RCU critical section' (bsc#1230413). - Revert 'mm/sparsemem: fix race in accessing memory_section->usage' (bsc#1230413). - nvme_core: scan namespaces asynchronously (bsc#1224105).

Exploit probability Not scored

Published September 24, 2024

Required by Not available

Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Manager Server 4.3 kernel-source

SUSE:Manager Server 4.3 kernel-zfcpdump

SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-syms

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-docs

SUSE:Manager Server 4.3 kernel-default-base

SUSE:Linux Enterprise Micro 5.3 kernel-default

SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-default-base

SUSE:Linux Enterprise Live Patching 15 SP4 kernel-livepatch-SLE15-SP4_Update_31

SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-syms

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-source

SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-source

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-64kb

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-obs-build

SUSE:Linux Enterprise Micro 5.3 kernel-default-base

SUSE:Manager Server 4.3 kernel-syms

SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-docs

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-default

SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-default-base

SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-default

SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-64kb

SUSE:Manager Proxy 4.3 kernel-source

SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-default

SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-obs-build

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-obs-build

SUSE:Manager Proxy 4.3 kernel-syms

SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-obs-build

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-syms

SUSE:Linux Enterprise Micro 5.4 kernel-default

SUSE:Linux Enterprise Server for SAP Applications 15 SP4 kernel-source

SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-zfcpdump

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-docs

SUSE:Linux Enterprise Live Patching 15 SP4 kernel-default

SUSE:Manager Server 4.3 kernel-default

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-syms

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default-base

SUSE:Linux Enterprise Micro 5.4 kernel-default-base

SUSE:Linux Enterprise High Availability Extension 15 SP4 kernel-default

SUSE:Manager Proxy 4.3 kernel-default-base

SUSE:Linux Enterprise Server 15 SP4-LTSS kernel-docs

SUSE:Manager Proxy 4.3 kernel-default

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default

SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-source

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-default-base

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-64kb

03 / CONNECTIONS

Connected vulnerabilities

related CVE-2021-4441

related CVE-2022-4382

related CVE-2022-48868

related CVE-2022-48869

related CVE-2022-48870

related CVE-2022-48871

related CVE-2022-48872

related CVE-2022-48873

related CVE-2022-48875

related CVE-2022-48878

related CVE-2022-48880

related CVE-2022-48890

related CVE-2022-48891

related CVE-2022-48896

related CVE-2022-48898

related CVE-2022-48899

related CVE-2022-48903

related CVE-2022-48904

related CVE-2022-48905

related CVE-2022-48907

related CVE-2022-48909

related CVE-2022-48912

related CVE-2022-48913

related CVE-2022-48914

related CVE-2022-48915

related CVE-2022-48916

related CVE-2022-48917

related CVE-2022-48918

related CVE-2022-48919

related CVE-2022-48921

related CVE-2022-48924

related CVE-2022-48925

related CVE-2022-48926

related CVE-2022-48927

related CVE-2022-48928

related CVE-2022-48929

related CVE-2022-48930

related CVE-2022-48931

related CVE-2022-48932

related CVE-2022-48934

related CVE-2022-48935

related CVE-2022-48937

related CVE-2022-48938

related CVE-2022-48941

related CVE-2022-48942

related CVE-2022-48943

related CVE-2023-52489

related CVE-2023-52893

related CVE-2023-52894

related CVE-2023-52896

related CVE-2023-52898

related CVE-2023-52900

related CVE-2023-52901

related CVE-2023-52905

related CVE-2023-52907

related CVE-2023-52911

related CVE-2024-40910

related CVE-2024-41009

related CVE-2024-41011

related CVE-2024-41062

related CVE-2024-41087

related CVE-2024-42077

related CVE-2024-42126

related CVE-2024-42230

related CVE-2024-42232

related CVE-2024-42271

related CVE-2024-43853

related CVE-2024-43861

related CVE-2024-43882

related CVE-2024-43883

related CVE-2024-44938

related CVE-2024-44947

related CVE-2024-45003

upstream CVE-2021-4441

upstream CVE-2022-4382

upstream CVE-2022-48868

upstream CVE-2022-48869

upstream CVE-2022-48870

upstream CVE-2022-48871

upstream CVE-2022-48872

upstream CVE-2022-48873

upstream CVE-2022-48875

upstream CVE-2022-48878

upstream CVE-2022-48880

upstream CVE-2022-48890

upstream CVE-2022-48891

upstream CVE-2022-48896

upstream CVE-2022-48898

upstream CVE-2022-48899

upstream CVE-2022-48903

upstream CVE-2022-48904

upstream CVE-2022-48905

upstream CVE-2022-48907

upstream CVE-2022-48909

upstream CVE-2022-48912

upstream CVE-2022-48913

upstream CVE-2022-48914

upstream CVE-2022-48915

upstream CVE-2022-48916

upstream CVE-2022-48917

upstream CVE-2022-48918

upstream CVE-2022-48919

upstream CVE-2022-48921

upstream CVE-2022-48924

upstream CVE-2022-48925

upstream CVE-2022-48926

upstream CVE-2022-48927

upstream CVE-2022-48928

upstream CVE-2022-48929

upstream CVE-2022-48930

upstream CVE-2022-48931

upstream CVE-2022-48932

upstream CVE-2022-48934

upstream CVE-2022-48935

upstream CVE-2022-48937

upstream CVE-2022-48938

upstream CVE-2022-48941

upstream CVE-2022-48942

upstream CVE-2022-48943

upstream CVE-2023-52489

upstream CVE-2023-52893

upstream CVE-2023-52894

upstream CVE-2023-52896

upstream CVE-2023-52898

upstream CVE-2023-52900

upstream CVE-2023-52901

upstream CVE-2023-52905

upstream CVE-2023-52907

upstream CVE-2023-52911

upstream CVE-2024-40910

upstream CVE-2024-41009

upstream CVE-2024-41011

upstream CVE-2024-41062

upstream CVE-2024-41087

upstream CVE-2024-42077

upstream CVE-2024-42126

upstream CVE-2024-42230

upstream CVE-2024-42232

upstream CVE-2024-42271

upstream CVE-2024-43853

upstream CVE-2024-43861

upstream CVE-2024-43882

upstream CVE-2024-43883

upstream CVE-2024-44938

upstream CVE-2024-44947

upstream CVE-2024-45003

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2024:3408-1

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2024-41062: Sync sock recv cb and release (bsc#1228576). - CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454). - CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707). - CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500). - CVE-2023-52489: Fix race in accessing memory_section->usage (bsc#1221326). - CVE-2024-44938: Fix shift-out-of-bounds in dbDiscardAG (bsc#1229792). - CVE-2024-41087: Fix double free on error (CVE-2024-41087,bsc#1228466). - CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503) - CVE-2022-48935: Fixed an unregister flowtable hooks on netns exit (bsc#1229619) - CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641) - CVE-2024-42271: Fixed a use after free in iucv_sock_close(). (bsc#1229400) - CVE-2024-42232: Fixed a race between delayed_work() and ceph_monc_stop(). (bsc#1228959) - CVE-2024-40910: Fix refcount imbalance on inbound connections (bsc#1227832). - CVE-2024-41009: Fix overrunning reservations in ringbuf (bsc#1228020). - CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245). The following non-security bugs were fixed: - Bluetooth: L2CAP: Fix deadlock (git-fixes). - mm, kmsan: fix infinite recursion due to RCU critical section (git-fixes). - mm: prevent derefencing NULL ptr in pfn_section_valid() (git-fixes). - Revert 'mm: prevent derefencing NULL ptr in pfn_section_valid()' (bsc#1230413). - Revert 'mm, kmsan: fix infinite recursion due to RCU critical section' (bsc#1230413). - Revert 'mm/sparsemem: fix race in accessing memory_section->usage' (bsc#1230413). - nvme_core: scan namespaces asynchronously (bsc#1224105).

View original source

05 / REFERENCES

Further evidence