CVE-2022-50014 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-50014 Interim 1 3 2025-12-23T02:30:17Z current 2025-06-18T23:41:18Z 2025-12-23T02:30:17Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-50014 In the Linux kernel, the following vulnerability has been resolved: mm/gup: fix FOLL_FORCE COW security issue and remove FOLL_COW Ever since the Dirty COW (CVE-2016-5195) security issue happened, we know that FOLL_FORCE can be possibly dangerous, especially if there are races that can be exploited by user space. Right now, it would be sufficient to have some code that sets a PTE of a R/O-mapped shared page dirty, in order for it to erroneously become writable by FOLL_FORCE. The implications of setting a write-protected PTE dirty might not be immediately obvious to everyone. And in fact ever since commit 9ae0f87d009c ("mm/shmem: unconditionally set pte dirty in mfill_atomic_install_pte"), we can use UFFDIO_CONTINUE to map a shmem page R/O while marking the pte dirty. This can be used by unprivileged user space to modify tmpfs/shmem file content even if the user does not have write permissions to the file, and to bypass memfd write sealing -- Dirty COW restricted to tmpfs/shmem (CVE-2022-2590). To fix such security issues for good, the insight is that we really only need that fancy retry logic (FOLL_COW) for COW mappings that are not writable (!VM_WRITE). And in a COW mapping, we really only broke COW if we have an exclusive anonymous page mapped. If we have something else mapped, or the mapped anonymous page might be shared (!PageAnonExclusive), we have to trigger a write fault to break COW. If we don't find an exclusive anonymous page when we retry, we have to trigger COW breaking once again because something intervened. Let's move away from this mandatory-retry + dirty handling and rely on our PageAnonExclusive() flag for making a similar decision, to use the same COW logic as in other kernel parts here as well. In case we stumble over a PTE in a COW mapping that does not map an exclusive anonymous page, COW was not properly broken and we have to trigger a fake write-fault to break COW. Just like we do in can_change_pte_writable() added via commit 64fe24a3e05e ("mm/mprotect: try avoiding write faults for exclusive anonymous pages when changing protection") and commit 76aefad628aa ("mm/mprotect: fix soft-dirty check in can_change_pte_writable()"), take care of softdirty and uffd-wp manually. For example, a write() via /proc/self/mem to a uffd-wp-protected range has to fail instead of silently granting write access and bypassing the userspace fault handler. Note that FOLL_FORCE is not only used for debug access, but also triggered by applications without debug intentions, for example, when pinning pages via RDMA. This fixes CVE-2022-2590. Note that only x86_64 and aarch64 are affected, because only those support CONFIG_HAVE_ARCH_USERFAULTFD_MINOR. Fortunately, FOLL_COW is no longer required to handle FOLL_FORCE. So let's just get rid of it. Thanks to Nadav Amit for pointing out that the pte_dirty() check in FOLL_FORCE code is problematic and might be exploitable. Note 1: We don't check for the PTE being dirty because it doesn't matter for making a "was COWed" decision anymore, and whoever modifies the page has to set the page dirty either way. Note 2: Kernels before extended uffd-wp support and before PageAnonExclusive (< 5.19) can simply revert the problematic commit instead and be safe regarding UFFDIO_CONTINUE. A backport to v5.19 requires minor adjustments due to lack of vma_soft_dirty_enabled(). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SLES-LTSS-TERADATA 15 SP2 SUSE Liberty Linux 9 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Linux Enterprise High Availability Extension 15 SP7 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Public Cloud 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Module for Legacy 15 SP7 SUSE Linux Enterprise Module for Public Cloud 15 SP7 SUSE Linux Enterprise Live Patching 12 SP5 SUSE Linux Enterprise Live Patching 15 SP3 SUSE Linux Enterprise Live Patching 15 SP4 SUSE Linux Enterprise Live Patching 15 SP5 SUSE Linux Enterprise Live Patching 15 SP6 SUSE Linux Enterprise Live Patching 15 SP7 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Real Time Module 15 SP6 SUSE Real Time Module 15 SP7 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Server 15 SP5-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Public Cloud 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Module for Legacy 15 SP7 SUSE Linux Enterprise Module for Public Cloud 15 SP7 SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Public Cloud 15 SP6 SUSE Linux Enterprise Workstation Extension 15 SP6 SUSE Linux Enterprise Module for Basesystem 15 SP7 SUSE Linux Enterprise Module for Development Tools 15 SP7 SUSE Linux Enterprise Module for Legacy 15 SP7 SUSE Linux Enterprise Module for Public Cloud 15 SP7 SUSE Linux Enterprise Workstation Extension 15 SP7 SUSE Linux Micro 6.0 SUSE Linux Micro 6.1 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.6 bpftool-7.0.0-284.11.1.el9_2 cluster-md-kmp-default dlm-kmp-default gfs2-kmp-default kernel-5.14.0-284.11.1.el9_2 kernel-abi-stablelists-5.14.0-284.11.1.el9_2 kernel-core-5.14.0-284.11.1.el9_2 kernel-cross-headers-5.14.0-284.11.1.el9_2 kernel-debug-5.14.0-284.11.1.el9_2 kernel-debug-core-5.14.0-284.11.1.el9_2 kernel-debug-devel-5.14.0-284.11.1.el9_2 kernel-debug-devel-matched-5.14.0-284.11.1.el9_2 kernel-debug-modules-5.14.0-284.11.1.el9_2 kernel-debug-modules-core-5.14.0-284.11.1.el9_2 kernel-debug-modules-extra-5.14.0-284.11.1.el9_2 kernel-debug-uki-virt-5.14.0-284.11.1.el9_2 kernel-default kernel-default-base kernel-default-devel kernel-default-extra kernel-default-kgraft kernel-default-kgraft-devel kernel-default-livepatch kernel-default-livepatch-devel kernel-default-man kernel-default-optional kernel-default-vdso kernel-devel kernel-devel-5.14.0-284.11.1.el9_2 kernel-devel-azure kernel-devel-matched-5.14.0-284.11.1.el9_2 kernel-devel-rt kernel-doc-5.14.0-284.11.1.el9_2 kernel-headers-5.14.0-284.11.1.el9_2 kernel-macros kernel-modules-5.14.0-284.11.1.el9_2 kernel-modules-core-5.14.0-284.11.1.el9_2 kernel-modules-extra-5.14.0-284.11.1.el9_2 kernel-rt kernel-source kernel-source-azure kernel-source-rt kernel-source-vanilla kernel-tools-5.14.0-284.11.1.el9_2 kernel-tools-libs-5.14.0-284.11.1.el9_2 kernel-tools-libs-devel-5.14.0-284.11.1.el9_2 kernel-uki-virt-5.14.0-284.11.1.el9_2 kselftests-kmp-default ocfs2-kmp-default perf-5.14.0-284.11.1.el9_2 python3-perf-5.14.0-284.11.1.el9_2 reiserfs-kmp-default rtla-5.14.0-284.11.1.el9_2 bpftool-7.0.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-abi-stablelists-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-core-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-cross-headers-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-debug-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-debug-core-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-debug-devel-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-debug-devel-matched-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-debug-modules-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-debug-modules-core-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-debug-modules-extra-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-debug-uki-virt-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-devel-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-devel-matched-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-doc-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-headers-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-modules-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-modules-core-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-modules-extra-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-tools-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-tools-libs-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-tools-libs-devel-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-uki-virt-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 perf-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 python3-perf-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 rtla-5.14.0-284.11.1.el9_2 as a component of SUSE Liberty Linux 9 kernel-default as a component of SLES-LTSS-TERADATA 15 SP2 kernel-source as a component of SLES-LTSS-TERADATA 15 SP2 cluster-md-kmp-default as a component of SUSE Linux Enterprise High Availability Extension 15 SP7 dlm-kmp-default as a component of SUSE Linux Enterprise High Availability Extension 15 SP7 gfs2-kmp-default as a component of SUSE Linux Enterprise High Availability Extension 15 SP7 ocfs2-kmp-default as a component of SUSE Linux Enterprise High Availability Extension 15 SP7 kernel-default as a component of SUSE Linux Enterprise High Availability Extension 15 SP7 kernel-source as a component of SUSE Linux Enterprise High Availability Extension 15 SP7 kernel-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-macros as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-source as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-macros as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-source as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS cluster-md-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS dlm-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS gfs2-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-default-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS ocfs2-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-macros as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS kernel-source as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS cluster-md-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS dlm-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS gfs2-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-default-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS ocfs2-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-macros as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-source as a component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS kernel-default-kgraft as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-default-kgraft-devel as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-default as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-source as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-default-livepatch as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-default-livepatch-devel as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-default as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-source as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-default-livepatch as a component of SUSE Linux Enterprise Live Patching 15 SP4 kernel-default-livepatch-devel as a component of SUSE Linux Enterprise Live Patching 15 SP4 kernel-default as a component of SUSE Linux Enterprise Live Patching 15 SP4 kernel-source as a component of SUSE Linux Enterprise Live Patching 15 SP4 kernel-default-livepatch as a component of SUSE Linux Enterprise Live Patching 15 SP5 kernel-default-livepatch-devel as a component of SUSE Linux Enterprise Live Patching 15 SP5 kernel-default as a component of SUSE Linux Enterprise Live Patching 15 SP5 kernel-source as a component of SUSE Linux Enterprise Live Patching 15 SP5 kernel-default-livepatch as a component of SUSE Linux Enterprise Live Patching 15 SP6 kernel-default-livepatch-devel as a component of SUSE Linux Enterprise Live Patching 15 SP6 kernel-default as a component of SUSE Linux Enterprise Live Patching 15 SP6 kernel-source as a component of SUSE Linux Enterprise Live Patching 15 SP6 kernel-default-livepatch as a component of SUSE Linux Enterprise Live Patching 15 SP7 kernel-default-livepatch-devel as a component of SUSE Linux Enterprise Live Patching 15 SP7 kernel-default as a component of SUSE Linux Enterprise Live Patching 15 SP7 kernel-source as a component of SUSE Linux Enterprise Live Patching 15 SP7 kernel-default as a component of SUSE Linux Enterprise Micro 5.0 kernel-default as a component of SUSE Linux Enterprise Micro 5.1 kernel-rt as a component of SUSE Linux Enterprise Micro 5.1 kernel-source as a component of SUSE Linux Enterprise Micro 5.1 kernel-source-rt as a component of SUSE Linux Enterprise Micro 5.1 kernel-default as a component of SUSE Linux Enterprise Micro 5.2 kernel-rt as a component of SUSE Linux Enterprise Micro 5.2 kernel-source as a component of SUSE Linux Enterprise Micro 5.2 kernel-source-rt as a component of SUSE Linux Enterprise Micro 5.2 kernel-default as a component of SUSE Linux Enterprise Micro 5.3 kernel-rt as a component of SUSE Linux Enterprise Micro 5.3 kernel-source as a component of SUSE Linux Enterprise Micro 5.3 kernel-source-rt as a component of SUSE Linux Enterprise Micro 5.3 kernel-default as a component of SUSE Linux Enterprise Micro 5.4 kernel-rt as a component of SUSE Linux Enterprise Micro 5.4 kernel-source as a component of SUSE Linux Enterprise Micro 5.4 kernel-source-rt as a component of SUSE Linux Enterprise Micro 5.4 kernel-default as a component of SUSE Linux Enterprise Micro 5.5 kernel-macros as a component of SUSE Linux Enterprise Micro 5.5 kernel-source as a component of SUSE Linux Enterprise Micro 5.5 kernel-devel-rt as a component of SUSE Linux Enterprise Micro 5.5 kernel-source-rt as a component of SUSE Linux Enterprise Micro 5.5 kernel-default as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-default-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-macros as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-source as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-default as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-default-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-macros as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-source as a component of SUSE Linux Enterprise Module for Basesystem 15 SP7 kernel-default as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-source as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-default as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 kernel-source as a component of SUSE Linux Enterprise Module for Development Tools 15 SP7 reiserfs-kmp-default as a component of SUSE Linux Enterprise Module for Legacy 15 SP7 kernel-default as a component of SUSE Linux Enterprise Module for Legacy 15 SP7 kernel-source as a component of SUSE Linux Enterprise Module for Legacy 15 SP7 kernel-devel-azure as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP6 kernel-source-azure as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP6 kernel-devel-azure as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP7 kernel-source-azure as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP7 kernel-default as a component of SUSE Linux Enterprise Server 11 SP4 LTSS kernel-source as a component of SUSE Linux Enterprise Server 11 SP4 LTSS kernel-default as a component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-default-base as a component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-default-devel as a component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-source as a component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-default as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-source as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-source as a component of SUSE Linux Enterprise Server 12 SP4-LTSS cluster-md-kmp-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS dlm-kmp-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS gfs2-kmp-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 12 SP5-LTSS ocfs2-kmp-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-source as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security kernel-source as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security kernel-default as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 15 SP1-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-default as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-default as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15 SP4-LTSS cluster-md-kmp-default as a component of SUSE Linux Enterprise Server 15 SP5-LTSS dlm-kmp-default as a component of SUSE Linux Enterprise Server 15 SP5-LTSS gfs2-kmp-default as a component of SUSE Linux Enterprise Server 15 SP5-LTSS kernel-default as a component of SUSE Linux Enterprise Server 15 SP5-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15 SP5-LTSS ocfs2-kmp-default as a component of SUSE Linux Enterprise Server 15 SP5-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15 SP5-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15 SP5-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15 SP5-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15 SP5-LTSS kernel-default as a component of SUSE Linux Enterprise Server 15-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 15-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 15-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15-LTSS kernel-default as a component of SUSE Linux Enterprise Server Teradata 12 SP3 kernel-source as a component of SUSE Linux Enterprise Server Teradata 12 SP3 kernel-default as a component of SUSE Linux Enterprise Server Teradata 15 SP4 kernel-source as a component of SUSE Linux Enterprise Server Teradata 15 SP4 kernel-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-default-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 reiserfs-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-macros as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-source as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-default-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 reiserfs-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-macros as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-source as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 cluster-md-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 dlm-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 gfs2-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-default-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 ocfs2-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 reiserfs-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-macros as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-source as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-default-extra as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 kernel-default as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 kernel-source as a component of SUSE Linux Enterprise Workstation Extension 15 SP6 kernel-default-extra as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 kernel-default as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 kernel-source as a component of SUSE Linux Enterprise Workstation Extension 15 SP7 kernel-default as a component of SUSE Linux Micro 6.0 kernel-devel as a component of SUSE Linux Micro 6.0 kernel-macros as a component of SUSE Linux Micro 6.0 kernel-source as a component of SUSE Linux Micro 6.0 kernel-devel-rt as a component of SUSE Linux Micro 6.0 kernel-source-rt as a component of SUSE Linux Micro 6.0 kernel-default as a component of SUSE Linux Micro 6.1 kernel-devel as a component of SUSE Linux Micro 6.1 kernel-macros as a component of SUSE Linux Micro 6.1 kernel-source as a component of SUSE Linux Micro 6.1 kernel-devel-rt as a component of SUSE Linux Micro 6.1 kernel-source-rt as a component of SUSE Linux Micro 6.1 kernel-default as a component of SUSE Manager Proxy 4.3 kernel-default-devel as a component of SUSE Manager Proxy 4.3 kernel-devel as a component of SUSE Manager Proxy 4.3 kernel-macros as a component of SUSE Manager Proxy 4.3 kernel-source as a component of SUSE Manager Proxy 4.3 kernel-default as a component of SUSE Manager Retail Branch Server 4.3 kernel-default-devel as a component of SUSE Manager Retail Branch Server 4.3 kernel-devel as a component of SUSE Manager Retail Branch Server 4.3 kernel-macros as a component of SUSE Manager Retail Branch Server 4.3 kernel-source as a component of SUSE Manager Retail Branch Server 4.3 kernel-default as a component of SUSE Manager Server 4.3 kernel-default-devel as a component of SUSE Manager Server 4.3 kernel-devel as a component of SUSE Manager Server 4.3 kernel-macros as a component of SUSE Manager Server 4.3 kernel-source as a component of SUSE Manager Server 4.3 kernel-devel-rt as a component of SUSE Real Time Module 15 SP6 kernel-source-rt as a component of SUSE Real Time Module 15 SP6 kernel-devel-rt as a component of SUSE Real Time Module 15 SP7 kernel-source-rt as a component of SUSE Real Time Module 15 SP7 cluster-md-kmp-default as a component of openSUSE Leap 15.6 dlm-kmp-default as a component of openSUSE Leap 15.6 gfs2-kmp-default as a component of openSUSE Leap 15.6 kernel-default as a component of openSUSE Leap 15.6 kernel-default-devel as a component of openSUSE Leap 15.6 kernel-default-extra as a component of openSUSE Leap 15.6 kernel-default-livepatch as a component of openSUSE Leap 15.6 kernel-default-livepatch-devel as a component of openSUSE Leap 15.6 kernel-default-optional as a component of openSUSE Leap 15.6 kernel-default-vdso as a component of openSUSE Leap 15.6 kselftests-kmp-default as a component of openSUSE Leap 15.6 ocfs2-kmp-default as a component of openSUSE Leap 15.6 reiserfs-kmp-default as a component of openSUSE Leap 15.6 kernel-devel as a component of openSUSE Leap 15.6 kernel-macros as a component of openSUSE Leap 15.6 kernel-source as a component of openSUSE Leap 15.6 kernel-source-vanilla as a component of openSUSE Leap 15.6 kernel-devel-azure as a component of openSUSE Leap 15.6 kernel-source-azure as a component of openSUSE Leap 15.6 kernel-devel-rt as a component of openSUSE Leap 15.6 kernel-source-rt as a component of openSUSE Leap 15.6 In the Linux kernel, the following vulnerability has been resolved: mm/gup: fix FOLL_FORCE COW security issue and remove FOLL_COW Ever since the Dirty COW (CVE-2016-5195) security issue happened, we know that FOLL_FORCE can be possibly dangerous, especially if there are races that can be exploited by user space. Right now, it would be sufficient to have some code that sets a PTE of a R/O-mapped shared page dirty, in order for it to erroneously become writable by FOLL_FORCE. The implications of setting a write-protected PTE dirty might not be immediately obvious to everyone. And in fact ever since commit 9ae0f87d009c ("mm/shmem: unconditionally set pte dirty in mfill_atomic_install_pte"), we can use UFFDIO_CONTINUE to map a shmem page R/O while marking the pte dirty. This can be used by unprivileged user space to modify tmpfs/shmem file content even if the user does not have write permissions to the file, and to bypass memfd write sealing -- Dirty COW restricted to tmpfs/shmem (CVE-2022-2590). To fix such security issues for good, the insight is that we really only need that fancy retry logic (FOLL_COW) for COW mappings that are not writable (!VM_WRITE). And in a COW mapping, we really only broke COW if we have an exclusive anonymous page mapped. If we have something else mapped, or the mapped anonymous page might be shared (!PageAnonExclusive), we have to trigger a write fault to break COW. If we don't find an exclusive anonymous page when we retry, we have to trigger COW breaking once again because something intervened. Let's move away from this mandatory-retry + dirty handling and rely on our PageAnonExclusive() flag for making a similar decision, to use the same COW logic as in other kernel parts here as well. In case we stumble over a PTE in a COW mapping that does not map an exclusive anonymous page, COW was not properly broken and we have to trigger a fake write-fault to break COW. Just like we do in can_change_pte_writable() added via commit 64fe24a3e05e ("mm/mprotect: try avoiding write faults for exclusive anonymous pages when changing protection") and commit 76aefad628aa ("mm/mprotect: fix soft-dirty check in can_change_pte_writable()"), take care of softdirty and uffd-wp manually. For example, a write() via /proc/self/mem to a uffd-wp-protected range has to fail instead of silently granting write access and bypassing the userspace fault handler. Note that FOLL_FORCE is not only used for debug access, but also triggered by applications without debug intentions, for example, when pinning pages via RDMA. This fixes CVE-2022-2590. Note that only x86_64 and aarch64 are affected, because only those support CONFIG_HAVE_ARCH_USERFAULTFD_MINOR. Fortunately, FOLL_COW is no longer required to handle FOLL_FORCE. So let's just get rid of it. Thanks to Nadav Amit for pointing out that the pte_dirty() check in FOLL_FORCE code is problematic and might be exploitable. Note 1: We don't check for the PTE being dirty because it doesn't matter for making a "was COWed" decision anymore, and whoever modifies the page has to set the page dirty either way. Note 2: Kernels before extended uffd-wp support and before PageAnonExclusive (< 5.19) can simply revert the problematic commit instead and be safe regarding UFFDIO_CONTINUE. A backport to v5.19 requires minor adjustments due to lack of vma_soft_dirty_enabled(). CVE-2022-50014 SUSE Liberty Linux 9:bpftool-7.0.0-284.11.1.el9_2 SUSE Liberty Linux 9:kernel-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:kernel-abi-stablelists-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:kernel-core-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:kernel-cross-headers-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:kernel-debug-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:kernel-debug-core-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:kernel-debug-devel-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:kernel-debug-devel-matched-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:kernel-debug-modules-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:kernel-debug-modules-core-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:kernel-debug-modules-extra-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:kernel-debug-uki-virt-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:kernel-devel-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:kernel-devel-matched-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:kernel-doc-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:kernel-headers-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:kernel-modules-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:kernel-modules-core-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:kernel-modules-extra-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:kernel-tools-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:kernel-tools-libs-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:kernel-tools-libs-devel-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:kernel-uki-virt-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:perf-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:python3-perf-5.14.0-284.11.1.el9_2 SUSE Liberty Linux 9:rtla-5.14.0-284.11.1.el9_2 SLES-LTSS-TERADATA 15 SP2:kernel-default SLES-LTSS-TERADATA 15 SP2:kernel-source SUSE Linux Enterprise High Availability Extension 15 SP7:cluster-md-kmp-default SUSE Linux Enterprise High Availability Extension 15 SP7:dlm-kmp-default SUSE Linux Enterprise High Availability Extension 15 SP7:gfs2-kmp-default SUSE Linux Enterprise High Availability Extension 15 SP7:kernel-default SUSE Linux Enterprise High Availability Extension 15 SP7:kernel-source SUSE Linux Enterprise High Availability Extension 15 SP7:ocfs2-kmp-default SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-macros SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-source SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:reiserfs-kmp-default SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:cluster-md-kmp-default SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:dlm-kmp-default SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:gfs2-kmp-default SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:kernel-default SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:kernel-default-devel SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:kernel-devel SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:kernel-macros SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:kernel-source SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:ocfs2-kmp-default SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:cluster-md-kmp-default SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:dlm-kmp-default SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:gfs2-kmp-default SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:kernel-default SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:kernel-default-devel SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:kernel-devel SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:kernel-macros SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:kernel-source SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:ocfs2-kmp-default SUSE Linux Enterprise Live Patching 12 SP5:kernel-default SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel SUSE Linux Enterprise Live Patching 12 SP5:kernel-source SUSE Linux Enterprise Live Patching 15 SP3:kernel-default SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-devel SUSE Linux Enterprise Live Patching 15 SP3:kernel-source SUSE Linux Enterprise Live Patching 15 SP4:kernel-default SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel SUSE Linux Enterprise Live Patching 15 SP4:kernel-source SUSE Linux Enterprise Live Patching 15 SP5:kernel-default SUSE Linux Enterprise Live Patching 15 SP5:kernel-default-livepatch SUSE Linux Enterprise Live Patching 15 SP5:kernel-default-livepatch-devel SUSE Linux Enterprise Live Patching 15 SP5:kernel-source SUSE Linux Enterprise Live Patching 15 SP6:kernel-default SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel SUSE Linux Enterprise Live Patching 15 SP6:kernel-source SUSE Linux Enterprise Live Patching 15 SP7:kernel-default SUSE Linux Enterprise Live Patching 15 SP7:kernel-default-livepatch SUSE Linux Enterprise Live Patching 15 SP7:kernel-default-livepatch-devel SUSE Linux Enterprise Live Patching 15 SP7:kernel-source SUSE Linux Enterprise Micro 5.0:kernel-default SUSE Linux Enterprise Micro 5.1:kernel-default SUSE Linux Enterprise Micro 5.1:kernel-rt SUSE Linux Enterprise Micro 5.1:kernel-source SUSE Linux Enterprise Micro 5.1:kernel-source-rt SUSE Linux Enterprise Micro 5.2:kernel-default SUSE Linux Enterprise Micro 5.2:kernel-rt SUSE Linux Enterprise Micro 5.2:kernel-source SUSE Linux Enterprise Micro 5.2:kernel-source-rt SUSE Linux Enterprise Micro 5.3:kernel-default SUSE Linux Enterprise Micro 5.3:kernel-rt SUSE Linux Enterprise Micro 5.3:kernel-source SUSE Linux Enterprise Micro 5.3:kernel-source-rt SUSE Linux Enterprise Micro 5.4:kernel-default SUSE Linux Enterprise Micro 5.4:kernel-rt SUSE Linux Enterprise Micro 5.4:kernel-source SUSE Linux Enterprise Micro 5.4:kernel-source-rt SUSE Linux Enterprise Micro 5.5:kernel-default SUSE Linux Enterprise Micro 5.5:kernel-devel-rt SUSE Linux Enterprise Micro 5.5:kernel-macros SUSE Linux Enterprise Micro 5.5:kernel-source SUSE Linux Enterprise Micro 5.5:kernel-source-rt SUSE Linux Enterprise Module for Basesystem 15 SP6:kernel-default SUSE Linux Enterprise Module for Basesystem 15 SP6:kernel-default-devel SUSE Linux Enterprise Module for Basesystem 15 SP6:kernel-devel SUSE Linux Enterprise Module for Basesystem 15 SP6:kernel-macros SUSE Linux Enterprise Module for Basesystem 15 SP6:kernel-source SUSE Linux Enterprise Module for Basesystem 15 SP7:kernel-default SUSE Linux Enterprise Module for Basesystem 15 SP7:kernel-default-devel SUSE Linux Enterprise Module for Basesystem 15 SP7:kernel-devel SUSE Linux Enterprise Module for Basesystem 15 SP7:kernel-macros SUSE Linux Enterprise Module for Basesystem 15 SP7:kernel-source SUSE Linux Enterprise Module for Development Tools 15 SP6:kernel-default SUSE Linux Enterprise Module for Development Tools 15 SP6:kernel-source SUSE Linux Enterprise Module for Development Tools 15 SP7:kernel-default SUSE Linux Enterprise Module for Development Tools 15 SP7:kernel-source SUSE Linux Enterprise Module for Legacy 15 SP7:kernel-default SUSE Linux Enterprise Module for Legacy 15 SP7:kernel-source SUSE Linux Enterprise Module for Legacy 15 SP7:reiserfs-kmp-default SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure SUSE Linux Enterprise Module for Public Cloud 15 SP7:kernel-devel-azure SUSE Linux Enterprise Module for Public Cloud 15 SP7:kernel-source-azure SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source SUSE Linux Enterprise Server 11 SP4 LTSS:kernel-default SUSE Linux Enterprise Server 11 SP4 LTSS:kernel-source SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:kernel-default SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:kernel-source SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-devel SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-devel SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-macros SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-source SUSE Linux Enterprise Server 15 SP2-LTSS:reiserfs-kmp-default SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-devel SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-devel SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-macros SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-source SUSE Linux Enterprise Server 15 SP3-LTSS:reiserfs-kmp-default SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default SUSE Linux Enterprise Server 15 SP5-LTSS:cluster-md-kmp-default SUSE Linux Enterprise Server 15 SP5-LTSS:dlm-kmp-default SUSE Linux Enterprise Server 15 SP5-LTSS:gfs2-kmp-default SUSE Linux Enterprise Server 15 SP5-LTSS:kernel-default SUSE Linux Enterprise Server 15 SP5-LTSS:kernel-default-devel SUSE Linux Enterprise Server 15 SP5-LTSS:kernel-devel SUSE Linux Enterprise Server 15 SP5-LTSS:kernel-macros SUSE Linux Enterprise Server 15 SP5-LTSS:kernel-source SUSE Linux Enterprise Server 15 SP5-LTSS:ocfs2-kmp-default SUSE Linux Enterprise Server 15 SP5-LTSS:reiserfs-kmp-default SUSE Linux Enterprise Server 15-LTSS:kernel-default SUSE Linux Enterprise Server 15-LTSS:kernel-default-base SUSE Linux Enterprise Server 15-LTSS:kernel-default-devel SUSE Linux Enterprise Server 15-LTSS:kernel-default-man SUSE Linux Enterprise Server 15-LTSS:kernel-devel SUSE Linux Enterprise Server 15-LTSS:kernel-macros SUSE Linux Enterprise Server 15-LTSS:kernel-source SUSE Linux Enterprise Server 15-LTSS:reiserfs-kmp-default SUSE Linux Enterprise Server Teradata 12 SP3:kernel-default SUSE Linux Enterprise Server Teradata 12 SP3:kernel-source SUSE Linux Enterprise Server Teradata 15 SP4:kernel-default SUSE Linux Enterprise Server Teradata 15 SP4:kernel-source SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-macros SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-source SUSE Linux Enterprise Server for SAP Applications 15 SP3:reiserfs-kmp-default SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default SUSE Linux Enterprise Server for SAP Applications 15 SP5:cluster-md-kmp-default SUSE Linux Enterprise Server for SAP Applications 15 SP5:dlm-kmp-default SUSE Linux Enterprise Server for SAP Applications 15 SP5:gfs2-kmp-default SUSE Linux Enterprise Server for SAP Applications 15 SP5:kernel-default SUSE Linux Enterprise Server for SAP Applications 15 SP5:kernel-default-devel SUSE Linux Enterprise Server for SAP Applications 15 SP5:kernel-devel SUSE Linux Enterprise Server for SAP Applications 15 SP5:kernel-macros SUSE Linux Enterprise Server for SAP Applications 15 SP5:kernel-source SUSE Linux Enterprise Server for SAP Applications 15 SP5:ocfs2-kmp-default SUSE Linux Enterprise Server for SAP Applications 15 SP5:reiserfs-kmp-default SUSE Linux Enterprise Workstation Extension 15 SP6:kernel-default SUSE Linux Enterprise Workstation Extension 15 SP6:kernel-default-extra SUSE Linux Enterprise Workstation Extension 15 SP6:kernel-source SUSE Linux Enterprise Workstation Extension 15 SP7:kernel-default SUSE Linux Enterprise Workstation Extension 15 SP7:kernel-default-extra SUSE Linux Enterprise Workstation Extension 15 SP7:kernel-source SUSE Linux Micro 6.0:kernel-default SUSE Linux Micro 6.0:kernel-devel SUSE Linux Micro 6.0:kernel-devel-rt SUSE Linux Micro 6.0:kernel-macros SUSE Linux Micro 6.0:kernel-source SUSE Linux Micro 6.0:kernel-source-rt SUSE Linux Micro 6.1:kernel-default SUSE Linux Micro 6.1:kernel-devel SUSE Linux Micro 6.1:kernel-devel-rt SUSE Linux Micro 6.1:kernel-macros SUSE Linux Micro 6.1:kernel-source SUSE Linux Micro 6.1:kernel-source-rt SUSE Manager Proxy 4.3:kernel-default SUSE Manager Proxy 4.3:kernel-default-devel SUSE Manager Proxy 4.3:kernel-devel SUSE Manager Proxy 4.3:kernel-macros SUSE Manager Proxy 4.3:kernel-source SUSE Manager Retail Branch Server 4.3:kernel-default SUSE Manager Retail Branch Server 4.3:kernel-default-devel SUSE Manager Retail Branch Server 4.3:kernel-devel SUSE Manager Retail Branch Server 4.3:kernel-macros SUSE Manager Retail Branch Server 4.3:kernel-source SUSE Manager Server 4.3:kernel-default SUSE Manager Server 4.3:kernel-default-devel SUSE Manager Server 4.3:kernel-devel SUSE Manager Server 4.3:kernel-macros SUSE Manager Server 4.3:kernel-source SUSE Real Time Module 15 SP6:kernel-devel-rt SUSE Real Time Module 15 SP6:kernel-source-rt SUSE Real Time Module 15 SP7:kernel-devel-rt SUSE Real Time Module 15 SP7:kernel-source-rt openSUSE Leap 15.6:cluster-md-kmp-default openSUSE Leap 15.6:dlm-kmp-default openSUSE Leap 15.6:gfs2-kmp-default openSUSE Leap 15.6:kernel-default openSUSE Leap 15.6:kernel-default-devel openSUSE Leap 15.6:kernel-default-extra openSUSE Leap 15.6:kernel-default-livepatch openSUSE Leap 15.6:kernel-default-livepatch-devel openSUSE Leap 15.6:kernel-default-optional openSUSE Leap 15.6:kernel-default-vdso openSUSE Leap 15.6:kernel-devel openSUSE Leap 15.6:kernel-devel-azure openSUSE Leap 15.6:kernel-devel-rt openSUSE Leap 15.6:kernel-macros openSUSE Leap 15.6:kernel-source openSUSE Leap 15.6:kernel-source-azure openSUSE Leap 15.6:kernel-source-rt openSUSE Leap 15.6:kernel-source-vanilla openSUSE Leap 15.6:kselftests-kmp-default openSUSE Leap 15.6:ocfs2-kmp-default openSUSE Leap 15.6:reiserfs-kmp-default moderate 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H