CVE-2024-47711 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2024-47711 Interim 1 13 2025-05-16T23:43:43Z current 2024-10-21T23:12:02Z 2025-05-16T23:43:43Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2024-47711 In the Linux kernel, the following vulnerability has been resolved: af_unix: Don't return OOB skb in manage_oob(). syzbot reported use-after-free in unix_stream_recv_urg(). [0] The scenario is 1. send(MSG_OOB) 2. recv(MSG_OOB) -> The consumed OOB remains in recv queue 3. send(MSG_OOB) 4. recv() -> manage_oob() returns the next skb of the consumed OOB -> This is also OOB, but unix_sk(sk)->oob_skb is not cleared 5. recv(MSG_OOB) -> unix_sk(sk)->oob_skb is used but already freed The recent commit 8594d9b85c07 ("af_unix: Don't call skb_get() for OOB skb.") uncovered the issue. If the OOB skb is consumed and the next skb is peeked in manage_oob(), we still need to check if the skb is OOB. Let's do so by falling back to the following checks in manage_oob() and add the test case in selftest. Note that we need to add a similar check for SIOCATMARK. [0]: BUG: KASAN: slab-use-after-free in unix_stream_read_actor+0xa6/0xb0 net/unix/af_unix.c:2959 Read of size 4 at addr ffff8880326abcc4 by task syz-executor178/5235 CPU: 0 UID: 0 PID: 5235 Comm: syz-executor178 Not tainted 6.11.0-rc5-syzkaller-00742-gfbdaffe41adc #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Call Trace: <TASK> __dump_stack lib/dump_stack.c:93 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119 print_address_description mm/kasan/report.c:377 [inline] print_report+0x169/0x550 mm/kasan/report.c:488 kasan_report+0x143/0x180 mm/kasan/report.c:601 unix_stream_read_actor+0xa6/0xb0 net/unix/af_unix.c:2959 unix_stream_recv_urg+0x1df/0x320 net/unix/af_unix.c:2640 unix_stream_read_generic+0x2456/0x2520 net/unix/af_unix.c:2778 unix_stream_recvmsg+0x22b/0x2c0 net/unix/af_unix.c:2996 sock_recvmsg_nosec net/socket.c:1046 [inline] sock_recvmsg+0x22f/0x280 net/socket.c:1068 ____sys_recvmsg+0x1db/0x470 net/socket.c:2816 ___sys_recvmsg net/socket.c:2858 [inline] __sys_recvmsg+0x2f0/0x3e0 net/socket.c:2888 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f5360d6b4e9 Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff29b3a458 EFLAGS: 00000246 ORIG_RAX: 000000000000002f RAX: ffffffffffffffda RBX: 00007fff29b3a638 RCX: 00007f5360d6b4e9 RDX: 0000000000002001 RSI: 0000000020000640 RDI: 0000000000000003 RBP: 00007f5360dde610 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fff29b3a628 R14: 0000000000000001 R15: 0000000000000001 </TASK> Allocated by task 5235: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 unpoison_slab_object mm/kasan/common.c:312 [inline] __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:338 kasan_slab_alloc include/linux/kasan.h:201 [inline] slab_post_alloc_hook mm/slub.c:3988 [inline] slab_alloc_node mm/slub.c:4037 [inline] kmem_cache_alloc_node_noprof+0x16b/0x320 mm/slub.c:4080 __alloc_skb+0x1c3/0x440 net/core/skbuff.c:667 alloc_skb include/linux/skbuff.h:1320 [inline] alloc_skb_with_frags+0xc3/0x770 net/core/skbuff.c:6528 sock_alloc_send_pskb+0x91a/0xa60 net/core/sock.c:2815 sock_alloc_send_skb include/net/sock.h:1778 [inline] queue_oob+0x108/0x680 net/unix/af_unix.c:2198 unix_stream_sendmsg+0xd24/0xf80 net/unix/af_unix.c:2351 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 ____sys_sendmsg+0x525/0x7d0 net/socket.c:2597 ___sys_sendmsg net/socket.c:2651 [inline] __sys_sendmsg+0x2b0/0x3a0 net/socket.c:2680 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 5235: kasan_save_stack mm/kasan/common.c:47 ---truncated--- The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2NO44GTYBSPPWKFDREFWHITK4XKTNVLP/ E-Mail link for openSUSE-SU-2024:14500-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/T7LN2FDZYBYZRLX5LOA3REDAXV7VKGW4/ E-Mail link for openSUSE-SU-2025:14705-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise High Availability Extension 12 SP5 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Public Cloud 15 SP6 SUSE Linux Enterprise Live Patching 12 SP5 SUSE Linux Enterprise Live Patching 15 SP2 SUSE Linux Enterprise Live Patching 15 SP3 SUSE Linux Enterprise Live Patching 15 SP4 SUSE Linux Enterprise Live Patching 15 SP5 SUSE Linux Enterprise Live Patching 15 SP6 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Micro 5.1 SUSE Linux Enterprise Micro 5.2 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Micro 5.5 SUSE Linux Enterprise Real Time 12 SP5 SUSE Real Time Module 15 SP5 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Server 12 SP5-LTSS SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Server 15 SP4-LTSS SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Public Cloud 15 SP6 SUSE Linux Enterprise Server 15-LTSS SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server Teradata 12 SP3-LTSS SUSE Linux Enterprise Server Teradata 15 SP4 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Workstation Extension 12 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Server for SAP Applications 15 SP4 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP6 SUSE Linux Enterprise Module for Development Tools 15 SP6 SUSE Linux Enterprise Module for Public Cloud 15 SP6 SUSE Linux Micro 6.0 SUSE Manager Proxy 4.3 SUSE Manager Retail Branch Server 4.3 SUSE Manager Server 4.3 openSUSE Leap 15.5 openSUSE Leap 15.6 openSUSE Tumbleweed cluster-md-kmp-default dlm-kmp-default gfs2-kmp-default kernel-default kernel-default-base kernel-default-devel kernel-default-extra kernel-default-kgraft kernel-default-kgraft-devel kernel-default-livepatch kernel-default-livepatch-devel kernel-default-man kernel-default-optional kernel-default-vdso kernel-devel kernel-devel-6.11.8-1.1 kernel-devel-azure kernel-devel-longterm-6.12.11-1.1 kernel-devel-rt kernel-macros kernel-macros-6.11.8-1.1 kernel-rt kernel-source kernel-source-6.11.8-1.1 kernel-source-azure kernel-source-longterm-6.12.11-1.1 kernel-source-rt kernel-source-vanilla kernel-source-vanilla-6.11.8-1.1 kselftests-kmp-default ocfs2-kmp-default reiserfs-kmp-default kernel-devel-6.11.8-1.1 as a component of openSUSE Tumbleweed kernel-devel-longterm-6.12.11-1.1 as a component of openSUSE Tumbleweed kernel-macros-6.11.8-1.1 as a component of openSUSE Tumbleweed kernel-source-6.11.8-1.1 as a component of openSUSE Tumbleweed kernel-source-longterm-6.12.11-1.1 as a component of openSUSE Tumbleweed kernel-source-vanilla-6.11.8-1.1 as a component of openSUSE Tumbleweed kernel-default as a component of SUSE Linux Enterprise High Availability Extension 12 SP5 kernel-source as a component of SUSE Linux Enterprise High Availability Extension 12 SP5 kernel-default as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 kernel-source as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 kernel-source-azure as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 kernel-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-default-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-macros as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-source as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-macros as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-source as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-default-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS reiserfs-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-macros as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-source as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-devel as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-macros as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-source as a component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default-kgraft as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-default-kgraft-devel as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-default as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-source as a component of SUSE Linux Enterprise Live Patching 12 SP5 kernel-default-livepatch as a component of SUSE Linux Enterprise Live Patching 15 SP2 kernel-default-livepatch-devel as a component of SUSE Linux Enterprise Live Patching 15 SP2 kernel-default as a component of SUSE Linux Enterprise Live Patching 15 SP2 kernel-source as a component of SUSE Linux Enterprise Live Patching 15 SP2 kernel-default-livepatch as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-default-livepatch-devel as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-default as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-source as a component of SUSE Linux Enterprise Live Patching 15 SP3 kernel-default-livepatch as a component of SUSE Linux Enterprise Live Patching 15 SP4 kernel-default-livepatch-devel as a component of SUSE Linux Enterprise Live Patching 15 SP4 kernel-default as a component of SUSE Linux Enterprise Live Patching 15 SP4 kernel-source as a component of SUSE Linux Enterprise Live Patching 15 SP4 kernel-default-livepatch as a component of SUSE Linux Enterprise Live Patching 15 SP5 kernel-default-livepatch-devel as a component of SUSE Linux Enterprise Live Patching 15 SP5 kernel-default as a component of SUSE Linux Enterprise Live Patching 15 SP5 kernel-source as a component of SUSE Linux Enterprise Live Patching 15 SP5 kernel-default-livepatch as a component of SUSE Linux Enterprise Live Patching 15 SP6 kernel-default-livepatch-devel as a component of SUSE Linux Enterprise Live Patching 15 SP6 kernel-default as a component of SUSE Linux Enterprise Live Patching 15 SP6 kernel-source as a component of SUSE Linux Enterprise Live Patching 15 SP6 kernel-default as a component of SUSE Linux Enterprise Micro 5.0 kernel-default as a component of SUSE Linux Enterprise Micro 5.1 kernel-rt as a component of SUSE Linux Enterprise Micro 5.1 kernel-source as a component of SUSE Linux Enterprise Micro 5.1 kernel-source-rt as a component of SUSE Linux Enterprise Micro 5.1 kernel-default as a component of SUSE Linux Enterprise Micro 5.2 kernel-rt as a component of SUSE Linux Enterprise Micro 5.2 kernel-source as a component of SUSE Linux Enterprise Micro 5.2 kernel-source-rt as a component of SUSE Linux Enterprise Micro 5.2 kernel-default as a component of SUSE Linux Enterprise Micro 5.3 kernel-rt as a component of SUSE Linux Enterprise Micro 5.3 kernel-source as a component of SUSE Linux Enterprise Micro 5.3 kernel-source-rt as a component of SUSE Linux Enterprise Micro 5.3 kernel-default as a component of SUSE Linux Enterprise Micro 5.4 kernel-rt as a component of SUSE Linux Enterprise Micro 5.4 kernel-source as a component of SUSE Linux Enterprise Micro 5.4 kernel-source-rt as a component of SUSE Linux Enterprise Micro 5.4 kernel-default as a component of SUSE Linux Enterprise Micro 5.5 kernel-macros as a component of SUSE Linux Enterprise Micro 5.5 kernel-source as a component of SUSE Linux Enterprise Micro 5.5 kernel-devel-rt as a component of SUSE Linux Enterprise Micro 5.5 kernel-source-rt as a component of SUSE Linux Enterprise Micro 5.5 kernel-default as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-default-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-macros as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-source as a component of SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-default as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-default-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-devel as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-macros as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-source as a component of SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-default as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 kernel-source as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 kernel-default as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-source as a component of SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-default as a component of SUSE Linux Enterprise Module for Public Cloud 12 kernel-source as a component of SUSE Linux Enterprise Module for Public Cloud 12 kernel-devel-azure as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP5 kernel-source-azure as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP5 kernel-devel-azure as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP6 kernel-source-azure as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP6 kernel-devel-rt as a component of SUSE Linux Enterprise Real Time 12 SP5 kernel-source-rt as a component of SUSE Linux Enterprise Real Time 12 SP5 kernel-default as a component of SUSE Linux Enterprise Server 11 SP4 LTSS kernel-source as a component of SUSE Linux Enterprise Server 11 SP4 LTSS kernel-default as a component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-default-base as a component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-default-devel as a component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-source as a component of SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-default as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-source as a component of SUSE Linux Enterprise Server 12 SP2-LTSS kernel-default as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-source as a component of SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default as a component of SUSE Linux Enterprise Server 12 SP5 kernel-default-base as a component of SUSE Linux Enterprise Server 12 SP5 kernel-default-devel as a component of SUSE Linux Enterprise Server 12 SP5 kernel-default-man as a component of SUSE Linux Enterprise Server 12 SP5 kernel-devel as a component of SUSE Linux Enterprise Server 12 SP5 kernel-macros as a component of SUSE Linux Enterprise Server 12 SP5 kernel-source as a component of SUSE Linux Enterprise Server 12 SP5 kernel-devel-azure as a component of SUSE Linux Enterprise Server 12 SP5 kernel-source-azure as a component of SUSE Linux Enterprise Server 12 SP5 cluster-md-kmp-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS dlm-kmp-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS gfs2-kmp-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 12 SP5-LTSS ocfs2-kmp-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-source as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-devel-azure as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-source-azure as a component of SUSE Linux Enterprise Server 12 SP5-LTSS kernel-default as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security kernel-source as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security kernel-source-azure as a component of SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security kernel-default as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 15 SP1-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kernel-default as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kernel-default as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15 SP4-LTSS kernel-default as a component of SUSE Linux Enterprise Server 15-LTSS kernel-default-base as a component of SUSE Linux Enterprise Server 15-LTSS kernel-default-devel as a component of SUSE Linux Enterprise Server 15-LTSS kernel-default-man as a component of SUSE Linux Enterprise Server 15-LTSS reiserfs-kmp-default as a component of SUSE Linux Enterprise Server 15-LTSS kernel-devel as a component of SUSE Linux Enterprise Server 15-LTSS kernel-macros as a component of SUSE Linux Enterprise Server 15-LTSS kernel-source as a component of SUSE Linux Enterprise Server 15-LTSS kernel-default as a component of SUSE Linux Enterprise Server Teradata 12 SP3 kernel-source as a component of SUSE Linux Enterprise Server Teradata 12 SP3 kernel-default as a component of SUSE Linux Enterprise Server Teradata 12 SP3-LTSS kernel-source as a component of SUSE Linux Enterprise Server Teradata 12 SP3-LTSS kernel-default as a component of SUSE Linux Enterprise Server Teradata 15 SP4 kernel-source as a component of SUSE Linux Enterprise Server Teradata 15 SP4 kernel-source-azure as a component of SUSE Linux Enterprise Server Teradata 15 SP4 kernel-default as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-source as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-source-azure as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-default-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 reiserfs-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-macros as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-source as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-default-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 reiserfs-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-macros as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-source as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-default-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 reiserfs-kmp-default as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-devel as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-macros as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-source as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-default as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 kernel-source as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 kernel-default-extra as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 kernel-default as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 kernel-source as a component of SUSE Linux Enterprise Workstation Extension 12 SP5 kernel-default as a component of SUSE Linux Micro 6.0 kernel-devel as a component of SUSE Linux Micro 6.0 kernel-macros as a component of SUSE Linux Micro 6.0 kernel-source as a component of SUSE Linux Micro 6.0 kernel-devel-rt as a component of SUSE Linux Micro 6.0 kernel-source-rt as a component of SUSE Linux Micro 6.0 kernel-default as a component of SUSE Manager Proxy 4.3 kernel-default-devel as a component of SUSE Manager Proxy 4.3 kernel-devel as a component of SUSE Manager Proxy 4.3 kernel-macros as a component of SUSE Manager Proxy 4.3 kernel-source as a component of SUSE Manager Proxy 4.3 kernel-default as a component of SUSE Manager Retail Branch Server 4.3 kernel-default-devel as a component of SUSE Manager Retail Branch Server 4.3 kernel-devel as a component of SUSE Manager Retail Branch Server 4.3 kernel-macros as a component of SUSE Manager Retail Branch Server 4.3 kernel-source as a component of SUSE Manager Retail Branch Server 4.3 kernel-default as a component of SUSE Manager Server 4.3 kernel-default-devel as a component of SUSE Manager Server 4.3 kernel-devel as a component of SUSE Manager Server 4.3 kernel-macros as a component of SUSE Manager Server 4.3 kernel-source as a component of SUSE Manager Server 4.3 kernel-devel-rt as a component of SUSE Real Time Module 15 SP5 kernel-source-rt as a component of SUSE Real Time Module 15 SP5 cluster-md-kmp-default as a component of openSUSE Leap 15.5 dlm-kmp-default as a component of openSUSE Leap 15.5 gfs2-kmp-default as a component of openSUSE Leap 15.5 kernel-default as a component of openSUSE Leap 15.5 kernel-default-devel as a component of openSUSE Leap 15.5 kernel-default-extra as a component of openSUSE Leap 15.5 kernel-default-livepatch as a component of openSUSE Leap 15.5 kernel-default-livepatch-devel as a component of openSUSE Leap 15.5 kernel-default-optional as a component of openSUSE Leap 15.5 kernel-default-vdso as a component of openSUSE Leap 15.5 kselftests-kmp-default as a component of openSUSE Leap 15.5 ocfs2-kmp-default as a component of openSUSE Leap 15.5 reiserfs-kmp-default as a component of openSUSE Leap 15.5 kernel-devel as a component of openSUSE Leap 15.5 kernel-macros as a component of openSUSE Leap 15.5 kernel-source as a component of openSUSE Leap 15.5 kernel-source-vanilla as a component of openSUSE Leap 15.5 kernel-devel-azure as a component of openSUSE Leap 15.5 kernel-source-azure as a component of openSUSE Leap 15.5 kernel-devel-rt as a component of openSUSE Leap 15.5 kernel-source-rt as a component of openSUSE Leap 15.5 cluster-md-kmp-default as a component of openSUSE Leap 15.6 dlm-kmp-default as a component of openSUSE Leap 15.6 gfs2-kmp-default as a component of openSUSE Leap 15.6 kernel-default as a component of openSUSE Leap 15.6 kernel-default-devel as a component of openSUSE Leap 15.6 kernel-default-extra as a component of openSUSE Leap 15.6 kernel-default-livepatch as a component of openSUSE Leap 15.6 kernel-default-livepatch-devel as a component of openSUSE Leap 15.6 kernel-default-optional as a component of openSUSE Leap 15.6 kernel-default-vdso as a component of openSUSE Leap 15.6 kselftests-kmp-default as a component of openSUSE Leap 15.6 ocfs2-kmp-default as a component of openSUSE Leap 15.6 reiserfs-kmp-default as a component of openSUSE Leap 15.6 kernel-devel as a component of openSUSE Leap 15.6 kernel-macros as a component of openSUSE Leap 15.6 kernel-source as a component of openSUSE Leap 15.6 kernel-source-vanilla as a component of openSUSE Leap 15.6 kernel-devel-azure as a component of openSUSE Leap 15.6 kernel-source-azure as a component of openSUSE Leap 15.6 kernel-devel-rt as a component of openSUSE Leap 15.6 kernel-source-rt as a component of openSUSE Leap 15.6 In the Linux kernel, the following vulnerability has been resolved: af_unix: Don't return OOB skb in manage_oob(). syzbot reported use-after-free in unix_stream_recv_urg(). [0] The scenario is 1. send(MSG_OOB) 2. recv(MSG_OOB) -> The consumed OOB remains in recv queue 3. send(MSG_OOB) 4. recv() -> manage_oob() returns the next skb of the consumed OOB -> This is also OOB, but unix_sk(sk)->oob_skb is not cleared 5. recv(MSG_OOB) -> unix_sk(sk)->oob_skb is used but already freed The recent commit 8594d9b85c07 ("af_unix: Don't call skb_get() for OOB skb.") uncovered the issue. If the OOB skb is consumed and the next skb is peeked in manage_oob(), we still need to check if the skb is OOB. Let's do so by falling back to the following checks in manage_oob() and add the test case in selftest. Note that we need to add a similar check for SIOCATMARK. [0]: BUG: KASAN: slab-use-after-free in unix_stream_read_actor+0xa6/0xb0 net/unix/af_unix.c:2959 Read of size 4 at addr ffff8880326abcc4 by task syz-executor178/5235 CPU: 0 UID: 0 PID: 5235 Comm: syz-executor178 Not tainted 6.11.0-rc5-syzkaller-00742-gfbdaffe41adc #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 Call Trace: <TASK> __dump_stack lib/dump_stack.c:93 [inline] dump_stack_lvl+0x241/0x360 lib/dump_stack.c:119 print_address_description mm/kasan/report.c:377 [inline] print_report+0x169/0x550 mm/kasan/report.c:488 kasan_report+0x143/0x180 mm/kasan/report.c:601 unix_stream_read_actor+0xa6/0xb0 net/unix/af_unix.c:2959 unix_stream_recv_urg+0x1df/0x320 net/unix/af_unix.c:2640 unix_stream_read_generic+0x2456/0x2520 net/unix/af_unix.c:2778 unix_stream_recvmsg+0x22b/0x2c0 net/unix/af_unix.c:2996 sock_recvmsg_nosec net/socket.c:1046 [inline] sock_recvmsg+0x22f/0x280 net/socket.c:1068 ____sys_recvmsg+0x1db/0x470 net/socket.c:2816 ___sys_recvmsg net/socket.c:2858 [inline] __sys_recvmsg+0x2f0/0x3e0 net/socket.c:2888 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f5360d6b4e9 Code: 48 83 c4 28 c3 e8 37 17 00 00 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fff29b3a458 EFLAGS: 00000246 ORIG_RAX: 000000000000002f RAX: ffffffffffffffda RBX: 00007fff29b3a638 RCX: 00007f5360d6b4e9 RDX: 0000000000002001 RSI: 0000000020000640 RDI: 0000000000000003 RBP: 00007f5360dde610 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 R13: 00007fff29b3a628 R14: 0000000000000001 R15: 0000000000000001 </TASK> Allocated by task 5235: kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 unpoison_slab_object mm/kasan/common.c:312 [inline] __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:338 kasan_slab_alloc include/linux/kasan.h:201 [inline] slab_post_alloc_hook mm/slub.c:3988 [inline] slab_alloc_node mm/slub.c:4037 [inline] kmem_cache_alloc_node_noprof+0x16b/0x320 mm/slub.c:4080 __alloc_skb+0x1c3/0x440 net/core/skbuff.c:667 alloc_skb include/linux/skbuff.h:1320 [inline] alloc_skb_with_frags+0xc3/0x770 net/core/skbuff.c:6528 sock_alloc_send_pskb+0x91a/0xa60 net/core/sock.c:2815 sock_alloc_send_skb include/net/sock.h:1778 [inline] queue_oob+0x108/0x680 net/unix/af_unix.c:2198 unix_stream_sendmsg+0xd24/0xf80 net/unix/af_unix.c:2351 sock_sendmsg_nosec net/socket.c:730 [inline] __sock_sendmsg+0x221/0x270 net/socket.c:745 ____sys_sendmsg+0x525/0x7d0 net/socket.c:2597 ___sys_sendmsg net/socket.c:2651 [inline] __sys_sendmsg+0x2b0/0x3a0 net/socket.c:2680 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f Freed by task 5235: kasan_save_stack mm/kasan/common.c:47 ---truncated--- CVE-2024-47711 openSUSE Tumbleweed:kernel-devel-6.11.8-1.1 openSUSE Tumbleweed:kernel-devel-longterm-6.12.11-1.1 openSUSE Tumbleweed:kernel-macros-6.11.8-1.1 openSUSE Tumbleweed:kernel-source-6.11.8-1.1 openSUSE Tumbleweed:kernel-source-longterm-6.12.11-1.1 openSUSE Tumbleweed:kernel-source-vanilla-6.11.8-1.1 SUSE Linux Enterprise High Availability Extension 12 SP5:kernel-default SUSE Linux Enterprise High Availability Extension 12 SP5:kernel-source SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-default SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-source SUSE Linux Enterprise High Performance Computing 12 SP5:kernel-source-azure SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-default SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-default-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-devel SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-macros SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kernel-source SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-default-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-devel SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-macros SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kernel-source SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:reiserfs-kmp-default SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-default-devel SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-devel SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-macros SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:kernel-source SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:reiserfs-kmp-default SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-default-devel SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-devel SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-macros SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:kernel-source SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:reiserfs-kmp-default SUSE Linux Enterprise Live Patching 12 SP5:kernel-default SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft SUSE Linux Enterprise Live Patching 12 SP5:kernel-default-kgraft-devel SUSE Linux Enterprise Live Patching 12 SP5:kernel-source SUSE Linux Enterprise Live Patching 15 SP2:kernel-default SUSE Linux Enterprise Live Patching 15 SP2:kernel-default-livepatch SUSE Linux Enterprise Live Patching 15 SP2:kernel-default-livepatch-devel SUSE Linux Enterprise Live Patching 15 SP2:kernel-source SUSE Linux Enterprise Live Patching 15 SP3:kernel-default SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch SUSE Linux Enterprise Live Patching 15 SP3:kernel-default-livepatch-devel SUSE Linux Enterprise Live Patching 15 SP3:kernel-source SUSE Linux Enterprise Live Patching 15 SP4:kernel-default SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch SUSE Linux Enterprise Live Patching 15 SP4:kernel-default-livepatch-devel SUSE Linux Enterprise Live Patching 15 SP4:kernel-source SUSE Linux Enterprise Live Patching 15 SP5:kernel-default SUSE Linux Enterprise Live Patching 15 SP5:kernel-default-livepatch SUSE Linux Enterprise Live Patching 15 SP5:kernel-default-livepatch-devel SUSE Linux Enterprise Live Patching 15 SP5:kernel-source SUSE Linux Enterprise Live Patching 15 SP6:kernel-default SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch SUSE Linux Enterprise Live Patching 15 SP6:kernel-default-livepatch-devel SUSE Linux Enterprise Live Patching 15 SP6:kernel-source SUSE Linux Enterprise Micro 5.0:kernel-default SUSE Linux Enterprise Micro 5.1:kernel-default SUSE Linux Enterprise Micro 5.1:kernel-rt SUSE Linux Enterprise Micro 5.1:kernel-source SUSE Linux Enterprise Micro 5.1:kernel-source-rt SUSE Linux Enterprise Micro 5.2:kernel-default SUSE Linux Enterprise Micro 5.2:kernel-rt SUSE Linux Enterprise Micro 5.2:kernel-source SUSE Linux Enterprise Micro 5.2:kernel-source-rt SUSE Linux Enterprise Micro 5.3:kernel-default SUSE Linux Enterprise Micro 5.3:kernel-rt SUSE Linux Enterprise Micro 5.3:kernel-source SUSE Linux Enterprise Micro 5.3:kernel-source-rt SUSE Linux Enterprise Micro 5.4:kernel-default SUSE Linux Enterprise Micro 5.4:kernel-rt SUSE Linux Enterprise Micro 5.4:kernel-source SUSE Linux Enterprise Micro 5.4:kernel-source-rt SUSE Linux Enterprise Micro 5.5:kernel-default SUSE Linux Enterprise Micro 5.5:kernel-devel-rt SUSE Linux Enterprise Micro 5.5:kernel-macros SUSE Linux Enterprise Micro 5.5:kernel-source SUSE Linux Enterprise Micro 5.5:kernel-source-rt SUSE Linux Enterprise Module for Basesystem 15 SP5:kernel-default SUSE Linux Enterprise Module for Basesystem 15 SP5:kernel-default-devel SUSE Linux Enterprise Module for Basesystem 15 SP5:kernel-devel SUSE Linux Enterprise Module for Basesystem 15 SP5:kernel-macros SUSE Linux Enterprise Module for Basesystem 15 SP5:kernel-source SUSE Linux Enterprise Module for Basesystem 15 SP6:kernel-default SUSE Linux Enterprise Module for Basesystem 15 SP6:kernel-default-devel SUSE Linux Enterprise Module for Basesystem 15 SP6:kernel-devel SUSE Linux Enterprise Module for Basesystem 15 SP6:kernel-macros SUSE Linux Enterprise Module for Basesystem 15 SP6:kernel-source SUSE Linux Enterprise Module for Development Tools 15 SP5:kernel-default SUSE Linux Enterprise Module for Development Tools 15 SP5:kernel-source SUSE Linux Enterprise Module for Development Tools 15 SP6:kernel-default SUSE Linux Enterprise Module for Development Tools 15 SP6:kernel-source SUSE Linux Enterprise Module for Public Cloud 12:kernel-default SUSE Linux Enterprise Module for Public Cloud 12:kernel-source SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-devel-azure SUSE Linux Enterprise Module for Public Cloud 15 SP5:kernel-source-azure SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-devel-azure SUSE Linux Enterprise Module for Public Cloud 15 SP6:kernel-source-azure SUSE Linux Enterprise Real Time 12 SP5:kernel-devel-rt SUSE Linux Enterprise Real Time 12 SP5:kernel-source-rt SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-base SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-default-devel SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE:kernel-source SUSE Linux Enterprise Server 11 SP4 LTSS:kernel-default SUSE Linux Enterprise Server 11 SP4 LTSS:kernel-source SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-base SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-devel SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-default-man SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-devel SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-macros SUSE Linux Enterprise Server 12 SP2-LTSS:kernel-source SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:kernel-default SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:kernel-source SUSE Linux Enterprise Server 12 SP5-LTSS Extended Security:kernel-source-azure SUSE Linux Enterprise Server 12 SP5-LTSS:cluster-md-kmp-default SUSE Linux Enterprise Server 12 SP5-LTSS:dlm-kmp-default SUSE Linux Enterprise Server 12 SP5-LTSS:gfs2-kmp-default SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-base SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-devel SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-default-man SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-devel-azure SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-macros SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source SUSE Linux Enterprise Server 12 SP5-LTSS:kernel-source-azure SUSE Linux Enterprise Server 12 SP5-LTSS:ocfs2-kmp-default SUSE Linux Enterprise Server 12 SP5:kernel-default SUSE Linux Enterprise Server 12 SP5:kernel-default-base SUSE Linux Enterprise Server 12 SP5:kernel-default-devel SUSE Linux Enterprise Server 12 SP5:kernel-default-man SUSE Linux Enterprise Server 12 SP5:kernel-devel SUSE Linux Enterprise Server 12 SP5:kernel-devel-azure SUSE Linux Enterprise Server 12 SP5:kernel-macros SUSE Linux Enterprise Server 12 SP5:kernel-source SUSE Linux Enterprise Server 12 SP5:kernel-source-azure SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-base SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-devel SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-default-man SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-devel SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-macros SUSE Linux Enterprise Server 15 SP1-LTSS:kernel-source SUSE Linux Enterprise Server 15 SP1-LTSS:reiserfs-kmp-default SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-default-devel SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-devel SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-macros SUSE Linux Enterprise Server 15 SP2-LTSS:kernel-source SUSE Linux Enterprise Server 15 SP2-LTSS:reiserfs-kmp-default SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-default-devel SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-devel SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-macros SUSE Linux Enterprise Server 15 SP3-LTSS:kernel-source SUSE Linux Enterprise Server 15 SP3-LTSS:reiserfs-kmp-default SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-default-devel SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-devel SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-macros SUSE Linux Enterprise Server 15 SP4-LTSS:kernel-source SUSE Linux Enterprise Server 15 SP4-LTSS:reiserfs-kmp-default SUSE Linux Enterprise Server 15-LTSS:kernel-default SUSE Linux Enterprise Server 15-LTSS:kernel-default-base SUSE Linux Enterprise Server 15-LTSS:kernel-default-devel SUSE Linux Enterprise Server 15-LTSS:kernel-default-man SUSE Linux Enterprise Server 15-LTSS:kernel-devel SUSE Linux Enterprise Server 15-LTSS:kernel-macros SUSE Linux Enterprise Server 15-LTSS:kernel-source SUSE Linux Enterprise Server 15-LTSS:reiserfs-kmp-default SUSE Linux Enterprise Server Teradata 12 SP3-LTSS:kernel-default SUSE Linux Enterprise Server Teradata 12 SP3-LTSS:kernel-source SUSE Linux Enterprise Server Teradata 12 SP3:kernel-default SUSE Linux Enterprise Server Teradata 12 SP3:kernel-source SUSE Linux Enterprise Server Teradata 15 SP4:kernel-default SUSE Linux Enterprise Server Teradata 15 SP4:kernel-source SUSE Linux Enterprise Server Teradata 15 SP4:kernel-source-azure SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-default SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-azure SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-default SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-default-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-devel SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-macros SUSE Linux Enterprise Server for SAP Applications 15 SP2:kernel-source SUSE Linux Enterprise Server for SAP Applications 15 SP2:reiserfs-kmp-default SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-default-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-devel SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-macros SUSE Linux Enterprise Server for SAP Applications 15 SP3:kernel-source SUSE Linux Enterprise Server for SAP Applications 15 SP3:reiserfs-kmp-default SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-default-devel SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-devel SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-macros SUSE Linux Enterprise Server for SAP Applications 15 SP4:kernel-source SUSE Linux Enterprise Server for SAP Applications 15 SP4:reiserfs-kmp-default SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-default SUSE Linux Enterprise Software Development Kit 12 SP5:kernel-source SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-default-extra SUSE Linux Enterprise Workstation Extension 12 SP5:kernel-source SUSE Linux Micro 6.0:kernel-default SUSE Linux Micro 6.0:kernel-devel SUSE Linux Micro 6.0:kernel-devel-rt SUSE Linux Micro 6.0:kernel-macros SUSE Linux Micro 6.0:kernel-source SUSE Linux Micro 6.0:kernel-source-rt SUSE Manager Proxy 4.3:kernel-default SUSE Manager Proxy 4.3:kernel-default-devel SUSE Manager Proxy 4.3:kernel-devel SUSE Manager Proxy 4.3:kernel-macros SUSE Manager Proxy 4.3:kernel-source SUSE Manager Retail Branch Server 4.3:kernel-default SUSE Manager Retail Branch Server 4.3:kernel-default-devel SUSE Manager Retail Branch Server 4.3:kernel-devel SUSE Manager Retail Branch Server 4.3:kernel-macros SUSE Manager Retail Branch Server 4.3:kernel-source SUSE Manager Server 4.3:kernel-default SUSE Manager Server 4.3:kernel-default-devel SUSE Manager Server 4.3:kernel-devel SUSE Manager Server 4.3:kernel-macros SUSE Manager Server 4.3:kernel-source SUSE Real Time Module 15 SP5:kernel-devel-rt SUSE Real Time Module 15 SP5:kernel-source-rt openSUSE Leap 15.5:cluster-md-kmp-default openSUSE Leap 15.5:dlm-kmp-default openSUSE Leap 15.5:gfs2-kmp-default openSUSE Leap 15.5:kernel-default openSUSE Leap 15.5:kernel-default-devel openSUSE Leap 15.5:kernel-default-extra openSUSE Leap 15.5:kernel-default-livepatch openSUSE Leap 15.5:kernel-default-livepatch-devel openSUSE Leap 15.5:kernel-default-optional openSUSE Leap 15.5:kernel-default-vdso openSUSE Leap 15.5:kernel-devel openSUSE Leap 15.5:kernel-devel-azure openSUSE Leap 15.5:kernel-devel-rt openSUSE Leap 15.5:kernel-macros openSUSE Leap 15.5:kernel-source openSUSE Leap 15.5:kernel-source-azure openSUSE Leap 15.5:kernel-source-rt openSUSE Leap 15.5:kernel-source-vanilla openSUSE Leap 15.5:kselftests-kmp-default openSUSE Leap 15.5:ocfs2-kmp-default openSUSE Leap 15.5:reiserfs-kmp-default openSUSE Leap 15.6:cluster-md-kmp-default openSUSE Leap 15.6:dlm-kmp-default openSUSE Leap 15.6:gfs2-kmp-default openSUSE Leap 15.6:kernel-default openSUSE Leap 15.6:kernel-default-devel openSUSE Leap 15.6:kernel-default-extra openSUSE Leap 15.6:kernel-default-livepatch openSUSE Leap 15.6:kernel-default-livepatch-devel openSUSE Leap 15.6:kernel-default-optional openSUSE Leap 15.6:kernel-default-vdso openSUSE Leap 15.6:kernel-devel openSUSE Leap 15.6:kernel-devel-azure openSUSE Leap 15.6:kernel-devel-rt openSUSE Leap 15.6:kernel-macros openSUSE Leap 15.6:kernel-source openSUSE Leap 15.6:kernel-source-azure openSUSE Leap 15.6:kernel-source-rt openSUSE Leap 15.6:kernel-source-vanilla openSUSE Leap 15.6:kselftests-kmp-default openSUSE Leap 15.6:ocfs2-kmp-default openSUSE Leap 15.6:reiserfs-kmp-default important 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H