FlawAtlas
Search the atlas
SUSE-SU-2024:3585-1 Not scored

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47069: Fixed a crash due to relying on a stack reference past its expiry in ipc/mqueue, ipc/msg, ipc/sem (bsc#1220826). - CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633). - CVE-2022-48945: media: vivid: fix compose size exceed boundary (bsc#1230398). - CVE-2024-41087: Fix double free on error (bsc#1228466). - CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015). - CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245). - CVE-2024-45021: memcg_write_event_control(): fix a user-triggerable oops (bsc#1230434). - CVE-2024-46695: selinux,smack: do not bypass permissions check in inode_setsecctx hook (bsc#1230519). - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226145). The following non-security bugs were fixed: - ext4: add check to prevent attempting to resize an fs with sparse_super2 (bsc#1230326). - ext4: add reserved GDT blocks check (bsc#1230326). - ext4: consolidate checks for resize of bigalloc into ext4_resize_begin (bsc#1230326). - ext4: fix bug_on ext4_mb_use_inode_pa (bsc#1230326). - kabi: add __nf_queue_get_refs() for kabi compliance. - PKCS#7: Check codeSigning EKU of certificates in PKCS#7 (bsc#1226666). - Revert 'ext4: consolidate checks for resize of bigalloc into ext4_resize_begin' (bsc#1230326).

Exploit probability Not scored
Published October 10, 2024
Required by Not available
Last source change February 4, 2026

02 / AFFECTED SOFTWARE

Affected packages

SUSE:Linux Enterprise Micro 5.2 kernel-default
SUSE:Linux Enterprise Server 15 SP3-LTSS kernel-default-base
SUSE:Linux Enterprise Server for SAP Applications 15 SP3 kernel-syms
SUSE:Enterprise Storage 7.1 kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-preempt
SUSE:Enterprise Storage 7.1 kernel-source
SUSE:Linux Enterprise Server for SAP Applications 15 SP3 kernel-docs
SUSE:Linux Enterprise Micro 5.2 kernel-default-base
SUSE:Linux Enterprise Server 15 SP3-LTSS kernel-preempt
SUSE:Linux Enterprise Server 15 SP3-LTSS kernel-64kb
SUSE:Linux Enterprise Server 15 SP3-LTSS kernel-source
SUSE:Enterprise Storage 7.1 kernel-syms
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-64kb
SUSE:Linux Enterprise Micro 5.1 kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP3 kernel-default
SUSE:Linux Enterprise Server for SAP Applications 15 SP3 kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-syms
SUSE:Linux Enterprise Server for SAP Applications 15 SP3 kernel-default-base
SUSE:Enterprise Storage 7.1 kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default-base
SUSE:Linux Enterprise Micro 5.1 kernel-default-base
SUSE:Linux Enterprise Server 15 SP3-LTSS kernel-syms
SUSE:Linux Enterprise High Availability Extension 15 SP3 kernel-default
SUSE:Linux Enterprise Live Patching 15 SP3 kernel-livepatch-SLE15-SP3_Update_49
SUSE:Linux Enterprise Server 15 SP3-LTSS kernel-docs
SUSE:Linux Enterprise Server for SAP Applications 15 SP3 kernel-source
SUSE:Enterprise Storage 7.1 kernel-64kb
SUSE:Linux Enterprise Server for SAP Applications 15 SP3 kernel-preempt
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-obs-build
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-docs
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-source
SUSE:Enterprise Storage 7.1 kernel-default-base
SUSE:Enterprise Storage 7.1 kernel-default
SUSE:Linux Enterprise Server 15 SP3-LTSS kernel-zfcpdump
SUSE:Linux Enterprise Live Patching 15 SP3 kernel-default
SUSE:Enterprise Storage 7.1 kernel-preempt
SUSE:Linux Enterprise Server 15 SP3-LTSS kernel-obs-build
SUSE:Linux Enterprise Server 15 SP3-LTSS kernel-default

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities SUSE-SU-2024:3585-1

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47069: Fixed a crash due to relying on a stack reference past its expiry in ipc/mqueue, ipc/msg, ipc/sem (bsc#1220826). - CVE-2022-48911: kabi: add __nf_queue_get_refs() for kabi compliance. (bsc#1229633). - CVE-2022-48945: media: vivid: fix compose size exceed boundary (bsc#1230398). - CVE-2024-41087: Fix double free on error (bsc#1228466). - CVE-2024-44946: kcm: Serialise kcm_sendmsg() for the same socket (bsc#1230015). - CVE-2024-45003: Don't evict inode under the inode lru traversing context (bsc#1230245). - CVE-2024-45021: memcg_write_event_control(): fix a user-triggerable oops (bsc#1230434). - CVE-2024-46695: selinux,smack: do not bypass permissions check in inode_setsecctx hook (bsc#1230519). - CVE-2024-36971: Fixed __dst_negative_advice() race (bsc#1226145). The following non-security bugs were fixed: - ext4: add check to prevent attempting to resize an fs with sparse_super2 (bsc#1230326). - ext4: add reserved GDT blocks check (bsc#1230326). - ext4: consolidate checks for resize of bigalloc into ext4_resize_begin (bsc#1230326). - ext4: fix bug_on ext4_mb_use_inode_pa (bsc#1230326). - kabi: add __nf_queue_get_refs() for kabi compliance. - PKCS#7: Check codeSigning EKU of certificates in PKCS#7 (bsc#1226666). - Revert 'ext4: consolidate checks for resize of bigalloc into ext4_resize_begin' (bsc#1230326).

View original source

05 / REFERENCES

Further evidence