{"document":{"aggregate_severity":{"namespace":"https://www.suse.com/support/security/rating/","text":"important"},"category":"csaf_security_advisory","csaf_version":"2.0","distribution":{"text":"Copyright 2024 SUSE LLC. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"Security update for the Linux Kernel","title":"Title of the patch"},{"category":"description","text":"\nThe SUSE Linux Enterprise 12 SP5 RT kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2021-4203: Fixed use-after-free read flaw that was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (bnc#1194535).\n- CVE-2022-20368: Fixed slab-out-of-bounds access in packet_recvmsg() (bsc#1202346).\n- CVE-2022-20369: Fixed out of bounds write in v4l2_m2m_querybuf of v4l2-mem2mem.c (bnc#1202347).\n- CVE-2022-21385: Fixed a flaw in net_rds_alloc_sgs() that allowed unprivileged local users to crash the machine (bnc#1202897).\n- CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096).\n- CVE-2022-26373: Fixed non-transparent sharing of return predictor targets between contexts in some Intel Processors (bnc#1201726).\n- CVE-2022-2663: Fixed an issue that was found in nf_conntrack_irc where the message handling could be confused and incorrectly matches the message (bnc#1202097).\n- CVE-2022-2977: Fixed reference counting for struct tpm_chip (bsc#1202672).\n- CVE-2022-3028: Fixed race condition that was found in the IP framework for transforming packets (XFRM subsystem) (bnc#1202898).\n- CVE-2022-36879: Fixed an issue in xfrm_expand_policies in net/xfrm/xfrm_policy.c where a refcount could be dropped twice (bnc#1201948).\n- CVE-2022-39188: Fixed race condition in include/asm-generic/tlb.h where a device driver can free a page while it still has stale TLB entries (bnc#1203107).\n\nThe following non-security bugs were fixed:\n\n- 9p: migrate from sync_inode to filemap_fdatawrite_wbc (bsc#1202528).\n- ACPI: CPPC: Do not prevent CPPC from working in the future (git-fixes).\n- Fix releasing of old bundles in xfrm_bundle_lookup() (bsc#1201264 bsc#1190397 bsc#1199617).\n- KABI: cgroup: Restore KABI of css_set (bsc#1201610).\n- KVM: PPC: Book3S HV: Context tracking exit guest context before enabling irqs (bsc#1065729).\n- KVM: arm64: Avoid setting the upper 32 bits of TCR_EL2 and CPTR_EL2 (bsc#1201442)\n- KVM: nVMX: Set UMIP bit CR4_FIXED1 MSR when emulating UMIP (bsc#1120716).\n- KVM: x86: Mark TSS busy during LTR emulation _after_ all fault checks (git-fixes).\n- KVM: x86: Set error code to segment selector on LLDT/LTR non-canonical #GP (git-fixes).\n- PCI: dwc: Deallocate EPC memory on dw_pcie_ep_init() errors (git-fixes).\n- Revert 'USB: xhci: fix U1/U2 handling for hardware with XHCI_INTEL_HOST quirk set' (git-fixes).\n- Revert 'r8152: adjust the settings about MAC clock speed down for RTL8153' (git-fixes).\n- SUNRPC: Fix the svc_deferred_event trace class (git-fixes).\n- USB: new quirk for Dell Gen 2 devices (git-fixes).\n- USB: serial: io_ti: add Agilent E5805A support (git-fixes).\n- ata: libata: add qc->flags in ata_qc_complete_template tracepoint (git-fixes).\n- btrfs: Convert fs_info->free_chunk_space to atomic64_t (bsc#1202528).\n- btrfs: add a trace class for dumping the current ENOSPC state (bsc#1202528).\n- btrfs: add a trace point for reserve tickets (bsc#1202528).\n- btrfs: adjust the flush trace point to include the source (bsc#1202528).\n- btrfs: check reclaim_size in need_preemptive_reclaim (bsc#1202528).\n- btrfs: check worker before need_preemptive_reclaim (bsc#1202528).\n- btrfs: do not do preemptive flushing if the majority is global rsv (bsc#1202528).\n- btrfs: do not include the global rsv size in the preemptive used amount (bsc#1202528).\n- btrfs: enable a tracepoint when we fail tickets (bsc#1202528).\n- btrfs: handle preemptive delalloc flushing slightly differently (bsc#1202528).\n- btrfs: implement space clamping for preemptive flushing (bsc#1202528).\n- btrfs: improve preemptive background space flushing (bsc#1202528).\n- btrfs: include delalloc related info in dump space info tracepoint (bsc#1202528).\n- btrfs: introduce a FORCE_COMMIT_TRANS flush operation (bsc#1202528).\n- btrfs: make flush_space take a enum btrfs_flush_state instead of int (bsc#1202528).\n- btrfs: only clamp the first time we have to start flushing (bsc#1202528).\n- btrfs: only ignore delalloc if delalloc is much smaller than ordered (bsc#1202528).\n- btrfs: reduce the preemptive flushing threshold to 90% (bsc#1202528).\n- btrfs: remove FLUSH_DELAYED_REFS from data ENOSPC flushing (bsc#1202528).\n- btrfs: rename need_do_async_reclaim (bsc#1202528).\n- btrfs: rework btrfs_calc_reclaim_metadata_size (bsc#1202528).\n- btrfs: rip out btrfs_space_info::total_bytes_pinned (bsc#1202528).\n- btrfs: rip out may_commit_transaction (bsc#1202528).\n- btrfs: rip the first_ticket_bytes logic from fail_all_tickets (bsc#1202528).\n- btrfs: simplify the logic in need_preemptive_flushing (bsc#1202528).\n- btrfs: take into account global rsv in need_preemptive_reclaim (bsc#1202528).\n- btrfs: use delalloc_bytes to determine flush amount for shrink_delalloc (bsc#1202528).\n- btrfs: use percpu_read_positive instead of sum_positive for need_preempt (bsc#1202528).\n- btrfs: use the filemap_fdatawrite_wbc helper for delalloc shrinking (bsc#1202528).\n- btrfs: use the global rsv size in the preemptive thresh calculation (bsc#1202528).\n- btrfs: wait on async extents when flushing delalloc (bsc#1202528).\n- btrfs: wake up async_delalloc_pages waiters after submit (bsc#1202528).\n- ceph: do not truncate file in atomic_open (bsc#1202830).\n- cgroup: Use separate src/dst nodes when preloading css_sets for migration (bsc#1201610).\n- check sk_peer_cred pointer before put_cred() call\n- crypto: arm64/gcm - Select AEAD for GHASH_ARM64_CE (git-fixes).\n- crypto: inside-secure - Add missing MODULE_DEVICE_TABLE for of (git-fixes).\n- cxgb4: fix endian conversions for L4 ports in filters (git-fixes).\n- cxgb4: move handling L2T ARP failures to caller (git-fixes).\n- cxgb4: parse TC-U32 key values and masks natively (git-fixes).\n- drivers/perf: arm_spe: Fix consistency of SYS_PMSCR_EL1.CX (git-fixes).\n- fs: add a filemap_fdatawrite_wbc helper (bsc#1202528).\n- fuse: limit nsec (bsc#1203126).\n- iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE) (git-fixes).\n- ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback (git-fixes).\n- kabi/severities: add mlx5 internal symbols\n- lightnvm: Remove lightnvm implemenation (bsc#1191881 bsc#1201420 ZDI-CAN-17325).\n- md/bitmap: do not set sb values if can't pass sanity check (bsc#1197158).\n- mm/rmap.c: do not reuse anon_vma if we just want a copy (git-fixes, bsc#1203098).\n- mm/rmap: Fix anon_vma->degree ambiguity leading to double-reuse (git-fixes, bsc#1203098). \n- mvpp2: fix panic on module removal (git-fixes).\n- mvpp2: refactor the HW checksum setup (git-fixes).\n- net/mlx5: Clear LAG notifier pointer after unregister (git-fixes).\n- net/mlx5: Fix auto group size calculation (git-fixes).\n- net/mlx5: Imply MLXFW in mlx5_core (git-fixes).\n- net/mlx5e: Use the inner headers to determine tc/pedit offload limitation on decap flows (git-fixes).\n- net: dsa: mt7530: Change the LINK bit to reflect the link status (git-fixes).\n- net: emaclite: Simplify if-else statements (git-fixes).\n- net: ll_temac: Add more error handling of dma_map_single() calls (git-fixes).\n- net: ll_temac: Enable DMA when ready, not before (git-fixes).\n- net: ll_temac: Fix RX buffer descriptor handling on GFP_ATOMIC pressure (git-fixes).\n- net: ll_temac: Fix iommu/swiotlb leak (git-fixes).\n- net: ll_temac: Fix support for 64-bit platforms (git-fixes).\n- net: ll_temac: Fix support for little-endian platforms (git-fixes).\n- net: ll_temac: Fix typo bug for 32-bit (git-fixes).\n- net: sock: tracing: Fix sock_exceed_buf_limit not to dereference stale pointer (git-fixes).\n- net: stmmac: gmac4: bitrev32 returns u32 (git-fixes).\n- net: usb: lan78xx: Connect PHY before registering MAC (git-fixes).\n- net: xilinx: replace dev_kfree_skb_irq by dev_consume_skb_irq for drop profiles (git-fixes).\n- net_sched: cls_route: disallow handle of 0 (bsc#1202393).\n- objtool: Add --backtrace support (bsc#1202396).\n- objtool: Add support for intra-function calls (bsc#1202396).\n- objtool: Allow no-op CFI ops in alternatives (bsc#1202396).\n- objtool: Convert insn type to enum (bsc#1202396).\n- objtool: Do not use ignore flag for fake jumps (bsc#1202396).\n- objtool: Fix !CFI insn_state propagation (bsc#1202396).\n- objtool: Fix ORC vs alternatives (bsc#1202396).\n- objtool: Fix sibling call detection (bsc#1202396).\n- objtool: Make handle_insn_ops() unconditional (bsc#1202396).\n- objtool: Remove INSN_STACK (bsc#1202396).\n- objtool: Remove check preventing branches within alternative (bsc#1202396).\n- objtool: Rename elf_open() to prevent conflict with libelf from elftoolchain (bsc#1202396).\n- objtool: Rename struct cfi_state (bsc#1202396).\n- objtool: Rework allocating stack_ops on decode (bsc#1202396).\n- objtool: Rewrite alt->skip_orig (bsc#1202396).\n- objtool: Set insn->func for alternatives (bsc#1202396).\n- objtool: Support conditional retpolines (bsc#1202396).\n- objtool: Support multiple stack_op per instruction (bsc#1202396).\n- objtool: Track original function across branches (bsc#1202396).\n- objtool: Uniquely identify alternative instruction groups (bsc#1202396).\n- objtool: Use Elf_Scn typedef instead of assuming struct name (bsc#1202396).\n- phy: tegra: fix device-tree node lookups (git-fixes).\n- powerpc/perf: Add privileged access check for thread_imc (bsc#1054914, git-fixes).\n- powerpc/perf: Fix loop exit condition in nest_imc_event_init (bsc#1054914, git-fixes).\n- powerpc/perf: Return accordingly on invalid chip-id in (bsc#1054914, git-fixes).\n- powerpc/xive: Fix refcount leak in xive_get_max_prio (git-fixess).\n- powerpc: Enable execve syscall exit tracepoint (bsc#1065729).\n- powerpc: Use sizeof(*foo) rather than sizeof(struct foo) (bsc#1054914, git-fixes).\n- powerpc: define get_cycles macro for arch-override (bsc#1065729).\n- qed: Add EDPM mode type for user-fw compatibility (git-fixes).\n- qed: fix kABI in qed_rdma_create_qp_in_params (git-fixes).\n- scsi: smartpqi: set force_blk_mq=1.(bsc#1179310)\n- spmi: trace: fix stack-out-of-bound access in SPMI tracing functions (git-fixes).\n- squashfs: add more sanity checks in id lookup (git-fixes).\n- squashfs: add more sanity checks in inode lookup (git-fixes).\n- squashfs: add more sanity checks in xattr id lookup (git-fixes).\n- squashfs: fix divide error in calculate_skip() (git-fixes).\n- squashfs: fix inode lookup sanity checks (bsc#1203013).\n- squashfs: fix xattr id and id lookup sanity checks (bsc#1203013).\n- tracepoint: Add tracepoint_probe_register_may_exist() for BPF tracing (git-fixes).\n- tracing/perf: Use strndup_user() instead of buggy open-coded version (git-fixes).\n- tracing/uprobes: Check the return value of kstrdup() for tu->filename (git-fixes).\n- tracing: Fix race in perf_trace_buf initialization (git-fixes).\n- usb: misc: fix improper handling of refcount in uss720_probe() (git-fixes).\n- usbnet: Fix linkwatch use-after-free on disconnect (git-fixes).\n- usbnet: smsc95xx: Fix deadlock on runtime resume (git-fixes).\n- xen/xenbus: fix return type in xenbus_file_read() (git-fixes).\n- xfs: always free inline data before resetting inode fork during ifree (bsc#1202017).\n- xfs: check sb_meta_uuid for dabuf buffer recovery (bsc#1202577).\n- xprtrdma: Fix trace point use-after-free race (git-fixes).\n","title":"Description of the patch"},{"category":"details","text":"SUSE-2022-3422,SUSE-SLE-RT-12-SP5-2022-3422","title":"Patchnames"},{"category":"legal_disclaimer","text":"CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).","title":"Terms of use"}],"publisher":{"category":"vendor","contact_details":"https://www.suse.com/support/security/contact/","name":"SUSE Product Security Team","namespace":"https://www.suse.com/"},"references":[{"category":"external","summary":"SUSE ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"self","summary":"URL of this CSAF notice","url":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_3422-1.json"},{"category":"self","summary":"URL for SUSE-SU-2022:3422-1","url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223422-1/"},{"category":"self","summary":"E-Mail link for SUSE-SU-2022:3422-1","url":"https://lists.suse.com/pipermail/sle-security-updates/2022-September/012397.html"},{"category":"self","summary":"SUSE Bug 1054914","url":"https://bugzilla.suse.com/1054914"},{"category":"self","summary":"SUSE Bug 1065729","url":"https://bugzilla.suse.com/1065729"},{"category":"self","summary":"SUSE Bug 1120716","url":"https://bugzilla.suse.com/1120716"},{"category":"self","summary":"SUSE Bug 1179310","url":"https://bugzilla.suse.com/1179310"},{"category":"self","summary":"SUSE Bug 1190397","url":"https://bugzilla.suse.com/1190397"},{"category":"self","summary":"SUSE Bug 1191881","url":"https://bugzilla.suse.com/1191881"},{"category":"self","summary":"SUSE Bug 1194535","url":"https://bugzilla.suse.com/1194535"},{"category":"self","summary":"SUSE Bug 1197158","url":"https://bugzilla.suse.com/1197158"},{"category":"self","summary":"SUSE Bug 1199617","url":"https://bugzilla.suse.com/1199617"},{"category":"self","summary":"SUSE Bug 1201264","url":"https://bugzilla.suse.com/1201264"},{"category":"self","summary":"SUSE Bug 1201420","url":"https://bugzilla.suse.com/1201420"},{"category":"self","summary":"SUSE Bug 1201442","url":"https://bugzilla.suse.com/1201442"},{"category":"self","summary":"SUSE Bug 1201610","url":"https://bugzilla.suse.com/1201610"},{"category":"self","summary":"SUSE Bug 1201726","url":"https://bugzilla.suse.com/1201726"},{"category":"self","summary":"SUSE Bug 1201948","url":"https://bugzilla.suse.com/1201948"},{"category":"self","summary":"SUSE Bug 1202017","url":"https://bugzilla.suse.com/1202017"},{"category":"self","summary":"SUSE Bug 1202096","url":"https://bugzilla.suse.com/1202096"},{"category":"self","summary":"SUSE Bug 1202097","url":"https://bugzilla.suse.com/1202097"},{"category":"self","summary":"SUSE Bug 1202346","url":"https://bugzilla.suse.com/1202346"},{"category":"self","summary":"SUSE Bug 1202347","url":"https://bugzilla.suse.com/1202347"},{"category":"self","summary":"SUSE Bug 1202393","url":"https://bugzilla.suse.com/1202393"},{"category":"self","summary":"SUSE Bug 1202396","url":"https://bugzilla.suse.com/1202396"},{"category":"self","summary":"SUSE Bug 1202528","url":"https://bugzilla.suse.com/1202528"},{"category":"self","summary":"SUSE Bug 1202577","url":"https://bugzilla.suse.com/1202577"},{"category":"self","summary":"SUSE Bug 1202672","url":"https://bugzilla.suse.com/1202672"},{"category":"self","summary":"SUSE Bug 1202830","url":"https://bugzilla.suse.com/1202830"},{"category":"self","summary":"SUSE Bug 1202897","url":"https://bugzilla.suse.com/1202897"},{"category":"self","summary":"SUSE Bug 1202898","url":"https://bugzilla.suse.com/1202898"},{"category":"self","summary":"SUSE Bug 1203013","url":"https://bugzilla.suse.com/1203013"},{"category":"self","summary":"SUSE Bug 1203098","url":"https://bugzilla.suse.com/1203098"},{"category":"self","summary":"SUSE Bug 1203107","url":"https://bugzilla.suse.com/1203107"},{"category":"self","summary":"SUSE Bug 1203126","url":"https://bugzilla.suse.com/1203126"},{"category":"self","summary":"SUSE CVE CVE-2021-4203 page","url":"https://www.suse.com/security/cve/CVE-2021-4203/"},{"category":"self","summary":"SUSE CVE CVE-2022-20368 page","url":"https://www.suse.com/security/cve/CVE-2022-20368/"},{"category":"self","summary":"SUSE CVE CVE-2022-20369 page","url":"https://www.suse.com/security/cve/CVE-2022-20369/"},{"category":"self","summary":"SUSE CVE CVE-2022-21385 page","url":"https://www.suse.com/security/cve/CVE-2022-21385/"},{"category":"self","summary":"SUSE CVE CVE-2022-2588 page","url":"https://www.suse.com/security/cve/CVE-2022-2588/"},{"category":"self","summary":"SUSE CVE CVE-2022-26373 page","url":"https://www.suse.com/security/cve/CVE-2022-26373/"},{"category":"self","summary":"SUSE CVE CVE-2022-2663 page","url":"https://www.suse.com/security/cve/CVE-2022-2663/"},{"category":"self","summary":"SUSE CVE CVE-2022-2977 page","url":"https://www.suse.com/security/cve/CVE-2022-2977/"},{"category":"self","summary":"SUSE CVE CVE-2022-3028 page","url":"https://www.suse.com/security/cve/CVE-2022-3028/"},{"category":"self","summary":"SUSE CVE CVE-2022-36879 page","url":"https://www.suse.com/security/cve/CVE-2022-36879/"},{"category":"self","summary":"SUSE CVE CVE-2022-39188 page","url":"https://www.suse.com/security/cve/CVE-2022-39188/"}],"title":"Security update for the Linux Kernel","tracking":{"current_release_date":"2022-09-27T06:50:03Z","generator":{"date":"2022-09-27T06:50:03Z","engine":{"name":"cve-database.git:bin/generate-csaf.pl","version":"1"}},"id":"SUSE-SU-2022:3422-1","initial_release_date":"2022-09-27T06:50:03Z","revision_history":[{"date":"2022-09-27T06:50:03Z","number":"1","summary":"Current version"}],"status":"final","version":"1"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_version","name":"kernel-devel-rt-4.12.14-10.100.1.noarch","product":{"name":"kernel-devel-rt-4.12.14-10.100.1.noarch","product_id":"kernel-devel-rt-4.12.14-10.100.1.noarch"}},{"category":"product_version","name":"kernel-source-rt-4.12.14-10.100.1.noarch","product":{"name":"kernel-source-rt-4.12.14-10.100.1.noarch","product_id":"kernel-source-rt-4.12.14-10.100.1.noarch"}}],"category":"architecture","name":"noarch"},{"branches":[{"category":"product_version","name":"cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","product":{"name":"cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","product_id":"cluster-md-kmp-rt-4.12.14-10.100.1.x86_64"}},{"category":"product_version","name":"cluster-md-kmp-rt_debug-4.12.14-10.100.1.x86_64","product":{"name":"cluster-md-kmp-rt_debug-4.12.14-10.100.1.x86_64","product_id":"cluster-md-kmp-rt_debug-4.12.14-10.100.1.x86_64"}},{"category":"product_version","name":"dlm-kmp-rt-4.12.14-10.100.1.x86_64","product":{"name":"dlm-kmp-rt-4.12.14-10.100.1.x86_64","product_id":"dlm-kmp-rt-4.12.14-10.100.1.x86_64"}},{"category":"product_version","name":"dlm-kmp-rt_debug-4.12.14-10.100.1.x86_64","product":{"name":"dlm-kmp-rt_debug-4.12.14-10.100.1.x86_64","product_id":"dlm-kmp-rt_debug-4.12.14-10.100.1.x86_64"}},{"category":"product_version","name":"gfs2-kmp-rt-4.12.14-10.100.1.x86_64","product":{"name":"gfs2-kmp-rt-4.12.14-10.100.1.x86_64","product_id":"gfs2-kmp-rt-4.12.14-10.100.1.x86_64"}},{"category":"product_version","name":"gfs2-kmp-rt_debug-4.12.14-10.100.1.x86_64","product":{"name":"gfs2-kmp-rt_debug-4.12.14-10.100.1.x86_64","product_id":"gfs2-kmp-rt_debug-4.12.14-10.100.1.x86_64"}},{"category":"product_version","name":"kernel-rt-4.12.14-10.100.1.x86_64","product":{"name":"kernel-rt-4.12.14-10.100.1.x86_64","product_id":"kernel-rt-4.12.14-10.100.1.x86_64"}},{"category":"product_version","name":"kernel-rt-base-4.12.14-10.100.1.x86_64","product":{"name":"kernel-rt-base-4.12.14-10.100.1.x86_64","product_id":"kernel-rt-base-4.12.14-10.100.1.x86_64"}},{"category":"product_version","name":"kernel-rt-devel-4.12.14-10.100.1.x86_64","product":{"name":"kernel-rt-devel-4.12.14-10.100.1.x86_64","product_id":"kernel-rt-devel-4.12.14-10.100.1.x86_64"}},{"category":"product_version","name":"kernel-rt-extra-4.12.14-10.100.1.x86_64","product":{"name":"kernel-rt-extra-4.12.14-10.100.1.x86_64","product_id":"kernel-rt-extra-4.12.14-10.100.1.x86_64"}},{"category":"product_version","name":"kernel-rt-kgraft-devel-4.12.14-10.100.1.x86_64","product":{"name":"kernel-rt-kgraft-devel-4.12.14-10.100.1.x86_64","product_id":"kernel-rt-kgraft-devel-4.12.14-10.100.1.x86_64"}},{"category":"product_version","name":"kernel-rt_debug-4.12.14-10.100.1.x86_64","product":{"name":"kernel-rt_debug-4.12.14-10.100.1.x86_64","product_id":"kernel-rt_debug-4.12.14-10.100.1.x86_64"}},{"category":"product_version","name":"kernel-rt_debug-base-4.12.14-10.100.1.x86_64","product":{"name":"kernel-rt_debug-base-4.12.14-10.100.1.x86_64","product_id":"kernel-rt_debug-base-4.12.14-10.100.1.x86_64"}},{"category":"product_version","name":"kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","product":{"name":"kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","product_id":"kernel-rt_debug-devel-4.12.14-10.100.1.x86_64"}},{"category":"product_version","name":"kernel-rt_debug-extra-4.12.14-10.100.1.x86_64","product":{"name":"kernel-rt_debug-extra-4.12.14-10.100.1.x86_64","product_id":"kernel-rt_debug-extra-4.12.14-10.100.1.x86_64"}},{"category":"product_version","name":"kernel-rt_debug-kgraft-devel-4.12.14-10.100.1.x86_64","product":{"name":"kernel-rt_debug-kgraft-devel-4.12.14-10.100.1.x86_64","product_id":"kernel-rt_debug-kgraft-devel-4.12.14-10.100.1.x86_64"}},{"category":"product_version","name":"kernel-syms-rt-4.12.14-10.100.1.x86_64","product":{"name":"kernel-syms-rt-4.12.14-10.100.1.x86_64","product_id":"kernel-syms-rt-4.12.14-10.100.1.x86_64"}},{"category":"product_version","name":"kselftests-kmp-rt-4.12.14-10.100.1.x86_64","product":{"name":"kselftests-kmp-rt-4.12.14-10.100.1.x86_64","product_id":"kselftests-kmp-rt-4.12.14-10.100.1.x86_64"}},{"category":"product_version","name":"kselftests-kmp-rt_debug-4.12.14-10.100.1.x86_64","product":{"name":"kselftests-kmp-rt_debug-4.12.14-10.100.1.x86_64","product_id":"kselftests-kmp-rt_debug-4.12.14-10.100.1.x86_64"}},{"category":"product_version","name":"ocfs2-kmp-rt-4.12.14-10.100.1.x86_64","product":{"name":"ocfs2-kmp-rt-4.12.14-10.100.1.x86_64","product_id":"ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"}},{"category":"product_version","name":"ocfs2-kmp-rt_debug-4.12.14-10.100.1.x86_64","product":{"name":"ocfs2-kmp-rt_debug-4.12.14-10.100.1.x86_64","product_id":"ocfs2-kmp-rt_debug-4.12.14-10.100.1.x86_64"}}],"category":"architecture","name":"x86_64"},{"branches":[{"category":"product_name","name":"SUSE Linux Enterprise Real Time 12 SP5","product":{"name":"SUSE Linux Enterprise Real Time 12 SP5","product_id":"SUSE Linux Enterprise Real Time 12 SP5","product_identification_helper":{"cpe":"cpe:/o:suse:suse-linux-enterprise-rt:12:sp5"}}}],"category":"product_family","name":"SUSE Linux Enterprise"}],"category":"vendor","name":"SUSE"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"cluster-md-kmp-rt-4.12.14-10.100.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5","product_id":"SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64"},"product_reference":"cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Real Time 12 SP5"},{"category":"default_component_of","full_product_name":{"name":"dlm-kmp-rt-4.12.14-10.100.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5","product_id":"SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64"},"product_reference":"dlm-kmp-rt-4.12.14-10.100.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Real Time 12 SP5"},{"category":"default_component_of","full_product_name":{"name":"gfs2-kmp-rt-4.12.14-10.100.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5","product_id":"SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64"},"product_reference":"gfs2-kmp-rt-4.12.14-10.100.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Real Time 12 SP5"},{"category":"default_component_of","full_product_name":{"name":"kernel-devel-rt-4.12.14-10.100.1.noarch as component of SUSE Linux Enterprise Real Time 12 SP5","product_id":"SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch"},"product_reference":"kernel-devel-rt-4.12.14-10.100.1.noarch","relates_to_product_reference":"SUSE Linux Enterprise Real Time 12 SP5"},{"category":"default_component_of","full_product_name":{"name":"kernel-rt-4.12.14-10.100.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5","product_id":"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64"},"product_reference":"kernel-rt-4.12.14-10.100.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Real Time 12 SP5"},{"category":"default_component_of","full_product_name":{"name":"kernel-rt-base-4.12.14-10.100.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5","product_id":"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64"},"product_reference":"kernel-rt-base-4.12.14-10.100.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Real Time 12 SP5"},{"category":"default_component_of","full_product_name":{"name":"kernel-rt-devel-4.12.14-10.100.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5","product_id":"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64"},"product_reference":"kernel-rt-devel-4.12.14-10.100.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Real Time 12 SP5"},{"category":"default_component_of","full_product_name":{"name":"kernel-rt_debug-4.12.14-10.100.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5","product_id":"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64"},"product_reference":"kernel-rt_debug-4.12.14-10.100.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Real Time 12 SP5"},{"category":"default_component_of","full_product_name":{"name":"kernel-rt_debug-devel-4.12.14-10.100.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5","product_id":"SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64"},"product_reference":"kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Real Time 12 SP5"},{"category":"default_component_of","full_product_name":{"name":"kernel-source-rt-4.12.14-10.100.1.noarch as component of SUSE Linux Enterprise Real Time 12 SP5","product_id":"SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch"},"product_reference":"kernel-source-rt-4.12.14-10.100.1.noarch","relates_to_product_reference":"SUSE Linux Enterprise Real Time 12 SP5"},{"category":"default_component_of","full_product_name":{"name":"kernel-syms-rt-4.12.14-10.100.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5","product_id":"SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64"},"product_reference":"kernel-syms-rt-4.12.14-10.100.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Real Time 12 SP5"},{"category":"default_component_of","full_product_name":{"name":"ocfs2-kmp-rt-4.12.14-10.100.1.x86_64 as component of SUSE Linux Enterprise Real Time 12 SP5","product_id":"SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"},"product_reference":"ocfs2-kmp-rt-4.12.14-10.100.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Real Time 12 SP5"}]},"vulnerabilities":[{"cve":"CVE-2021-4203","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2021-4203"}],"notes":[{"category":"general","text":"A use-after-free read flaw was found in sock_getsockopt() in net/core/sock.c due to SO_PEERCRED and SO_PEERGROUPS race with listen() (and connect()) in the Linux kernel. In this flaw, an attacker with a user privileges may crash the system or leak internal kernel information.","title":"CVE description"}],"product_status":{"recommended":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2021-4203","url":"https://www.suse.com/security/cve/CVE-2021-4203"},{"category":"external","summary":"SUSE Bug 1194535 for CVE-2021-4203","url":"https://bugzilla.suse.com/1194535"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":5.8,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L","version":"3.1"},"products":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-09-27T06:50:03Z","details":"moderate"}],"title":"CVE-2021-4203"},{"cve":"CVE-2022-20368","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2022-20368"}],"notes":[{"category":"general","text":"Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel","title":"CVE description"}],"product_status":{"recommended":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2022-20368","url":"https://www.suse.com/security/cve/CVE-2022-20368"},{"category":"external","summary":"SUSE Bug 1202346 for CVE-2022-20368","url":"https://bugzilla.suse.com/1202346"},{"category":"external","summary":"SUSE Bug 1212311 for CVE-2022-20368","url":"https://bugzilla.suse.com/1212311"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":5.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-09-27T06:50:03Z","details":"moderate"}],"title":"CVE-2022-20368"},{"cve":"CVE-2022-20369","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2022-20369"}],"notes":[{"category":"general","text":"In v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-223375145References: Upstream kernel","title":"CVE description"}],"product_status":{"recommended":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2022-20369","url":"https://www.suse.com/security/cve/CVE-2022-20369"},{"category":"external","summary":"SUSE Bug 1202347 for CVE-2022-20369","url":"https://bugzilla.suse.com/1202347"},{"category":"external","summary":"SUSE Bug 1212321 for CVE-2022-20369","url":"https://bugzilla.suse.com/1212321"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":5.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-09-27T06:50:03Z","details":"moderate"}],"title":"CVE-2022-20369"},{"cve":"CVE-2022-21385","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2022-21385"}],"notes":[{"category":"general","text":"A flaw in net_rds_alloc_sgs() in Oracle Linux kernels allows unprivileged local users to crash the machine. CVSS 3.1 Base Score 6.2 (Availability impacts). CVSS Vector (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)","title":"CVE description"}],"product_status":{"recommended":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2022-21385","url":"https://www.suse.com/security/cve/CVE-2022-21385"},{"category":"external","summary":"SUSE Bug 1202897 for CVE-2022-21385","url":"https://bugzilla.suse.com/1202897"},{"category":"external","summary":"SUSE Bug 1212285 for CVE-2022-21385","url":"https://bugzilla.suse.com/1212285"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":6.2,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-09-27T06:50:03Z","details":"moderate"}],"title":"CVE-2022-21385"},{"cve":"CVE-2022-2588","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2022-2588"}],"notes":[{"category":"general","text":"It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.","title":"CVE description"}],"product_status":{"recommended":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2022-2588","url":"https://www.suse.com/security/cve/CVE-2022-2588"},{"category":"external","summary":"SUSE Bug 1202096 for CVE-2022-2588","url":"https://bugzilla.suse.com/1202096"},{"category":"external","summary":"SUSE Bug 1203613 for CVE-2022-2588","url":"https://bugzilla.suse.com/1203613"},{"category":"external","summary":"SUSE Bug 1204183 for CVE-2022-2588","url":"https://bugzilla.suse.com/1204183"},{"category":"external","summary":"SUSE Bug 1209225 for CVE-2022-2588","url":"https://bugzilla.suse.com/1209225"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-09-27T06:50:03Z","details":"important"}],"title":"CVE-2022-2588"},{"cve":"CVE-2022-26373","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2022-26373"}],"notes":[{"category":"general","text":"Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.","title":"CVE description"}],"product_status":{"recommended":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2022-26373","url":"https://www.suse.com/security/cve/CVE-2022-26373"},{"category":"external","summary":"SUSE Bug 1201726 for CVE-2022-26373","url":"https://bugzilla.suse.com/1201726"},{"category":"external","summary":"SUSE Bug 1209619 for CVE-2022-26373","url":"https://bugzilla.suse.com/1209619"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":5.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"products":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-09-27T06:50:03Z","details":"moderate"}],"title":"CVE-2022-26373"},{"cve":"CVE-2022-2663","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2022-2663"}],"notes":[{"category":"general","text":"An issue was found in the Linux kernel in nf_conntrack_irc where the message handling can be confused and incorrectly matches the message. A firewall may be able to be bypassed when users are using unencrypted IRC with nf_conntrack_irc configured.","title":"CVE description"}],"product_status":{"recommended":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2022-2663","url":"https://www.suse.com/security/cve/CVE-2022-2663"},{"category":"external","summary":"SUSE Bug 1202097 for CVE-2022-2663","url":"https://bugzilla.suse.com/1202097"},{"category":"external","summary":"SUSE Bug 1212299 for CVE-2022-2663","url":"https://bugzilla.suse.com/1212299"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":5.9,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N","version":"3.1"},"products":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-09-27T06:50:03Z","details":"moderate"}],"title":"CVE-2022-2663"},{"cve":"CVE-2022-2977","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2022-2977"}],"notes":[{"category":"general","text":"A flaw was found in the Linux kernel implementation of proxied virtualized TPM devices. On a system where virtualized TPM devices are configured (this is not the default) a local attacker can create a use-after-free and create a situation where it may be possible to escalate privileges on the system.","title":"CVE description"}],"product_status":{"recommended":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2022-2977","url":"https://www.suse.com/security/cve/CVE-2022-2977"},{"category":"external","summary":"SUSE Bug 1202672 for CVE-2022-2977","url":"https://bugzilla.suse.com/1202672"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":4.2,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-09-27T06:50:03Z","details":"moderate"}],"title":"CVE-2022-2977"},{"cve":"CVE-2022-3028","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2022-3028"}],"notes":[{"category":"general","text":"A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket.","title":"CVE description"}],"product_status":{"recommended":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2022-3028","url":"https://www.suse.com/security/cve/CVE-2022-3028"},{"category":"external","summary":"SUSE Bug 1202898 for CVE-2022-3028","url":"https://bugzilla.suse.com/1202898"},{"category":"external","summary":"SUSE Bug 1212296 for CVE-2022-3028","url":"https://bugzilla.suse.com/1212296"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":6.7,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-09-27T06:50:03Z","details":"moderate"}],"title":"CVE-2022-3028"},{"cve":"CVE-2022-36879","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2022-36879"}],"notes":[{"category":"general","text":"An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.","title":"CVE description"}],"product_status":{"recommended":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2022-36879","url":"https://www.suse.com/security/cve/CVE-2022-36879"},{"category":"external","summary":"SUSE Bug 1201948 for CVE-2022-36879","url":"https://bugzilla.suse.com/1201948"},{"category":"external","summary":"SUSE Bug 1212327 for CVE-2022-36879","url":"https://bugzilla.suse.com/1212327"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":4.1,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-09-27T06:50:03Z","details":"moderate"}],"title":"CVE-2022-36879"},{"cve":"CVE-2022-39188","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2022-39188"}],"notes":[{"category":"general","text":"An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of a race condition (unmap_mapping_range versus munmap), a device driver can free a page while it still has stale TLB entries. This only occurs in situations with VM_PFNMAP VMAs.","title":"CVE description"}],"product_status":{"recommended":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2022-39188","url":"https://www.suse.com/security/cve/CVE-2022-39188"},{"category":"external","summary":"SUSE Bug 1203107 for CVE-2022-39188","url":"https://bugzilla.suse.com/1203107"},{"category":"external","summary":"SUSE Bug 1203116 for CVE-2022-39188","url":"https://bugzilla.suse.com/1203116"},{"category":"external","summary":"SUSE Bug 1205313 for CVE-2022-39188","url":"https://bugzilla.suse.com/1205313"},{"category":"external","summary":"SUSE Bug 1209225 for CVE-2022-39188","url":"https://bugzilla.suse.com/1209225"},{"category":"external","summary":"SUSE Bug 1212326 for CVE-2022-39188","url":"https://bugzilla.suse.com/1212326"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":7,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Real Time 12 SP5:cluster-md-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:dlm-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:gfs2-kmp-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-base-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-rt_debug-devel-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt-4.12.14-10.100.1.noarch","SUSE Linux Enterprise Real Time 12 SP5:kernel-syms-rt-4.12.14-10.100.1.x86_64","SUSE Linux Enterprise Real Time 12 SP5:ocfs2-kmp-rt-4.12.14-10.100.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-09-27T06:50:03Z","details":"important"}],"title":"CVE-2022-39188"}]}