Upstream information

CVE-2024-26991 at MITRE

Description

In the Linux kernel, the following vulnerability has been resolved:

KVM: x86/mmu: x86: Don't overflow lpage_info when checking attributes

Fix KVM_SET_MEMORY_ATTRIBUTES to not overflow lpage_info array and trigger
KASAN splat, as seen in the private_mem_conversions_test selftest.

When memory attributes are set on a GFN range, that range will have
specific properties applied to the TDP. A huge page cannot be used when
the attributes are inconsistent, so they are disabled for those the
specific huge pages. For internal KVM reasons, huge pages are also not
allowed to span adjacent memslots regardless of whether the backing memory
could be mapped as huge.

What GFNs support which huge page sizes is tracked by an array of arrays
'lpage_info' on the memslot, of 'kvm_lpage_info' structs. Each index of
lpage_info contains a vmalloc allocated array of these for a specific
supported page size. The kvm_lpage_info denotes whether a specific huge
page (GFN and page size) on the memslot is supported. These arrays include
indices for unaligned head and tail huge pages.

Preventing huge pages from spanning adjacent memslot is covered by
incrementing the count in head and tail kvm_lpage_info when the memslot is
allocated, but disallowing huge pages for memory that has mixed attributes
has to be done in a more complicated way. During the
KVM_SET_MEMORY_ATTRIBUTES ioctl KVM updates lpage_info for each memslot in
the range that has mismatched attributes. KVM does this a memslot at a
time, and marks a special bit, KVM_LPAGE_MIXED_FLAG, in the kvm_lpage_info
for any huge page. This bit is essentially a permanently elevated count.
So huge pages will not be mapped for the GFN at that page size if the
count is elevated in either case: a huge head or tail page unaligned to
the memslot or if KVM_LPAGE_MIXED_FLAG is set because it has mixed
attributes.

To determine whether a huge page has consistent attributes, the
KVM_SET_MEMORY_ATTRIBUTES operation checks an xarray to make sure it
consistently has the incoming attribute. Since level - 1 huge pages are
aligned to level huge pages, it employs an optimization. As long as the
level - 1 huge pages are checked first, it can just check these and assume
that if each level - 1 huge page contained within the level sized huge
page is not mixed, then the level size huge page is not mixed. This
optimization happens in the helper hugepage_has_attrs().

Unfortunately, although the kvm_lpage_info array representing page size
'level' will contain an entry for an unaligned tail page of size level,
the array for level - 1 will not contain an entry for each GFN at page
size level. The level - 1 array will only contain an index for any
unaligned region covered by level - 1 huge page size, which can be a
smaller region. So this causes the optimization to overflow the level - 1
kvm_lpage_info and perform a vmalloc out of bounds read.

In some cases of head and tail pages where an overflow could happen,
callers skip the operation completely as KVM_LPAGE_MIXED_FLAG is not
required to prevent huge pages as discussed earlier. But for memslots that
are smaller than the 1GB page size, it does call hugepage_has_attrs(). In
this case the huge page is both the head and tail page. The issue can be
observed simply by compiling the kernel with CONFIG_KASAN_VMALLOC and
running the selftest "private_mem_conversions_test", which produces the
output like the following:

BUG: KASAN: vmalloc-out-of-bounds in hugepage_has_attrs+0x7e/0x110
Read of size 4 at addr ffffc900000a3008 by task private_mem_con/169
Call Trace:
dump_stack_lvl
print_report
? __virt_addr_valid
? hugepage_has_attrs
? hugepage_has_attrs
kasan_report
? hugepage_has_attrs
hugepage_has_attrs
kvm_arch_post_set_memory_attributes
kvm_vm_ioctl

It is a little ambiguous whether the unaligned head page (in the bug case
also the tail page) should be expected to have KVM_LPAGE_MIXED_FLAG set.
It is not functionally required, as the unal
---truncated---

SUSE information

Overall state of this security issue: Pending

This issue is currently rated as having moderate severity.

CVSS v3 Scores
  SUSE
Base Score 5.5
Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality Impact None
Integrity Impact None
Availability Impact High
CVSSv3 Version 3.1

Note from the SUSE Security Team on the kernel-default package

SUSE will no longer fix all CVEs in the Linux Kernel anymore, but declare some bug classes as won't fix. Please refer to TID 21496 for more details.

SUSE Bugzilla entry: 1223695 [IN_PROGRESS]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
Container bci/bci-sle15-kernel-module-devel:15.6.17.6
  • kernel-default-devel >= 6.4.0-150600.23.7.3
  • kernel-devel >= 6.4.0-150600.23.7.2
  • kernel-macros >= 6.4.0-150600.23.7.2
  • kernel-syms >= 6.4.0-150600.23.7.1
Container suse/hpc/warewulf4-x86_64/sle-hpc-node:15.6.17.5.5
Image SLES15-SP6
Image SLES15-SP6-BYOS
Image SLES15-SP6-BYOS-Azure
Image SLES15-SP6-BYOS-EC2
Image SLES15-SP6-BYOS-GCE
Image SLES15-SP6-CHOST-BYOS
Image SLES15-SP6-CHOST-BYOS-Aliyun
Image SLES15-SP6-CHOST-BYOS-Azure
Image SLES15-SP6-CHOST-BYOS-EC2
Image SLES15-SP6-CHOST-BYOS-GCE
Image SLES15-SP6-CHOST-BYOS-SAP-CCloud
Image SLES15-SP6-EC2
Image SLES15-SP6-EC2-ECS-HVM
Image SLES15-SP6-GCE
Image SLES15-SP6-HPC-BYOS
Image SLES15-SP6-HPC-BYOS-Azure
Image SLES15-SP6-HPC-BYOS-EC2
Image SLES15-SP6-HPC-BYOS-GCE
Image SLES15-SP6-HPC-EC2
Image SLES15-SP6-HPC-GCE
Image SLES15-SP6-Hardened-BYOS
Image SLES15-SP6-Hardened-BYOS-Azure
Image SLES15-SP6-Hardened-BYOS-EC2
Image SLES15-SP6-Hardened-BYOS-GCE
Image SLES15-SP6-SAP
Image SLES15-SP6-SAP-Azure
Image SLES15-SP6-SAP-EC2
Image SLES15-SP6-SAP-GCE
Image SLES15-SP6-SAPCAL
Image SLES15-SP6-SAPCAL-Azure
Image SLES15-SP6-SAPCAL-EC2
Image SLES15-SP6-SAPCAL-GCE
  • kernel-default >= 6.4.0-150600.23.7.3
Container suse/sl-micro/6.0/kvm-os-container:2.1.1-3.34
  • kernel-default-base >= 6.4.0-17.1.1.51
Container suse/sl-micro/6.0/rt-os-container:2.1.2-4.6
  • kernel-rt >= 6.4.0-9.1
Image SLE-Micro
Image SLE-Micro-Azure
Image SLE-Micro-BYOS
Image SLE-Micro-BYOS-Azure
Image SLE-Micro-BYOS-EC2
Image SLE-Micro-BYOS-GCE
Image SLE-Micro-GCE
  • kernel-default >= 6.4.0-18.1
Image SLES15-SP6-Azure-Basic
Image SLES15-SP6-Azure-Standard
Image SLES15-SP6-HPC
Image SLES15-SP6-HPC-Azure
  • kernel-azure >= 6.4.0-150600.8.5.4
Image SLES15-SP6-SAP-Azure-LI-BYOS
Image SLES15-SP6-SAP-Azure-LI-BYOS-Production
Image SLES15-SP6-SAP-Azure-VLI-BYOS
Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production
Image SLES15-SP6-SAP-BYOS
Image SLES15-SP6-SAP-BYOS-Azure
Image SLES15-SP6-SAP-BYOS-EC2
Image SLES15-SP6-SAP-BYOS-GCE
Image SLES15-SP6-SAP-Hardened
Image SLES15-SP6-SAP-Hardened-Azure
Image SLES15-SP6-SAP-Hardened-BYOS
Image SLES15-SP6-SAP-Hardened-BYOS-Azure
Image SLES15-SP6-SAP-Hardened-BYOS-EC2
Image SLES15-SP6-SAP-Hardened-BYOS-GCE
Image SLES15-SP6-SAP-Hardened-EC2
Image SLES15-SP6-SAP-Hardened-GCE
  • cluster-md-kmp-default >= 6.4.0-150600.23.7.3
  • dlm-kmp-default >= 6.4.0-150600.23.7.3
  • gfs2-kmp-default >= 6.4.0-150600.23.7.3
  • kernel-default >= 6.4.0-150600.23.7.3
  • ocfs2-kmp-default >= 6.4.0-150600.23.7.3
SUSE Linux Enterprise Desktop 15 SP6
  • kernel-64kb >= 6.4.0-150600.23.7.3
  • kernel-64kb-devel >= 6.4.0-150600.23.7.3
  • kernel-default >= 6.4.0-150600.23.7.3
  • kernel-default-base >= 6.4.0-150600.23.7.3.150600.12.2.7
  • kernel-default-devel >= 6.4.0-150600.23.7.3
  • kernel-default-extra >= 6.4.0-150600.23.7.3
  • kernel-devel >= 6.4.0-150600.23.7.2
  • kernel-docs >= 6.4.0-150600.23.7.4
  • kernel-macros >= 6.4.0-150600.23.7.2
  • kernel-obs-build >= 6.4.0-150600.23.7.3
  • kernel-source >= 6.4.0-150600.23.7.2
  • kernel-syms >= 6.4.0-150600.23.7.1
  • kernel-zfcpdump >= 6.4.0-150600.23.7.3
 Patchnames:
SUSE-SLE-Module-Basesystem-15-SP6-2024-2203
SUSE-SLE-Module-Development-Tools-15-SP6-2024-2203
SUSE-SLE-Product-WE-15-SP6-2024-2203
SUSE Linux Enterprise High Availability Extension 15 SP6
  • cluster-md-kmp-default >= 6.4.0-150600.23.7.3
  • dlm-kmp-default >= 6.4.0-150600.23.7.3
  • gfs2-kmp-default >= 6.4.0-150600.23.7.3
  • ocfs2-kmp-default >= 6.4.0-150600.23.7.3
 Patchnames:
SUSE-SLE-Product-HA-15-SP6-2024-2203
SUSE Linux Enterprise High Performance Computing 15 SP6
  • kernel-64kb >= 6.4.0-150600.23.7.3
  • kernel-64kb-devel >= 6.4.0-150600.23.7.3
  • kernel-azure >= 6.4.0-150600.8.5.4
  • kernel-azure-devel >= 6.4.0-150600.8.5.4
  • kernel-default >= 6.4.0-150600.23.7.3
  • kernel-default-base >= 6.4.0-150600.23.7.3.150600.12.2.7
  • kernel-default-devel >= 6.4.0-150600.23.7.3
  • kernel-devel >= 6.4.0-150600.23.7.2
  • kernel-devel-azure >= 6.4.0-150600.8.5.4
  • kernel-docs >= 6.4.0-150600.23.7.4
  • kernel-macros >= 6.4.0-150600.23.7.2
  • kernel-obs-build >= 6.4.0-150600.23.7.3
  • kernel-source >= 6.4.0-150600.23.7.2
  • kernel-source-azure >= 6.4.0-150600.8.5.4
  • kernel-syms >= 6.4.0-150600.23.7.1
  • kernel-syms-azure >= 6.4.0-150600.8.5.1
  • kernel-zfcpdump >= 6.4.0-150600.23.7.3
  • reiserfs-kmp-default >= 6.4.0-150600.23.7.3
 Patchnames:
SUSE-SLE-Module-Basesystem-15-SP6-2024-2203
SUSE-SLE-Module-Development-Tools-15-SP6-2024-2203
SUSE-SLE-Module-Legacy-15-SP6-2024-2203
SUSE-SLE-Module-Public-Cloud-15-SP6-2024-2135
SUSE Linux Enterprise Live Patching 15 SP6
    		Patchnames:
    SUSE-SLE-Module-Live-Patching-15-SP6-2024-2203
    SUSE-SLE-Module-Live-Patching-15-SP6-2024-2973
    SUSE Linux Enterprise Micro 6.0
    • kernel-default >= 6.4.0-18.1
    • kernel-default-base >= 6.4.0-17.1.1.51
    • kernel-default-extra >= 6.4.0-18.1
    • kernel-devel >= 6.4.0-18.1
    • kernel-devel-rt >= 6.4.0-9.1
    • kernel-kvmsmall >= 6.4.0-18.1
    • kernel-macros >= 6.4.0-18.1
    • kernel-rt >= 6.4.0-9.1
    • kernel-source >= 6.4.0-18.1
    • kernel-source-rt >= 6.4.0-9.1
    		 Patchnames:
    SUSE-SLE-Micro-6.0-14
    SUSE-SLE-Micro-6.0-19
    SUSE Linux Enterprise Module for Basesystem 15 SP6
    • kernel-64kb >= 6.4.0-150600.23.7.3
    • kernel-64kb-devel >= 6.4.0-150600.23.7.3
    • kernel-default >= 6.4.0-150600.23.7.3
    • kernel-default-base >= 6.4.0-150600.23.7.3.150600.12.2.7
    • kernel-default-devel >= 6.4.0-150600.23.7.3
    • kernel-devel >= 6.4.0-150600.23.7.2
    • kernel-macros >= 6.4.0-150600.23.7.2
    • kernel-zfcpdump >= 6.4.0-150600.23.7.3
    		 Patchnames:
    SUSE-SLE-Module-Basesystem-15-SP6-2024-2203
    SUSE Linux Enterprise Module for Development Tools 15 SP6
    • kernel-docs >= 6.4.0-150600.23.7.4
    • kernel-obs-build >= 6.4.0-150600.23.7.3
    • kernel-source >= 6.4.0-150600.23.7.2
    • kernel-syms >= 6.4.0-150600.23.7.1
    		 Patchnames:
    SUSE-SLE-Module-Development-Tools-15-SP6-2024-2203
    SUSE Linux Enterprise Module for Legacy 15 SP6
    • reiserfs-kmp-default >= 6.4.0-150600.23.7.3
    		 Patchnames:
    SUSE-SLE-Module-Legacy-15-SP6-2024-2203
    SUSE Linux Enterprise Module for Public Cloud 15 SP6
    • kernel-azure >= 6.4.0-150600.8.5.4
    • kernel-azure-devel >= 6.4.0-150600.8.5.4
    • kernel-devel-azure >= 6.4.0-150600.8.5.4
    • kernel-source-azure >= 6.4.0-150600.8.5.4
    • kernel-syms-azure >= 6.4.0-150600.8.5.1
    		 Patchnames:
    SUSE-SLE-Module-Public-Cloud-15-SP6-2024-2135
    SUSE Linux Enterprise Real Time 15 SP6
    SUSE Real Time Module 15 SP6
    • cluster-md-kmp-rt >= 6.4.0-150600.10.5.1
    • dlm-kmp-rt >= 6.4.0-150600.10.5.1
    • gfs2-kmp-rt >= 6.4.0-150600.10.5.1
    • kernel-devel-rt >= 6.4.0-150600.10.5.1
    • kernel-rt >= 6.4.0-150600.10.5.1
    • kernel-rt-devel >= 6.4.0-150600.10.5.1
    • kernel-rt_debug >= 6.4.0-150600.10.5.1
    • kernel-rt_debug-devel >= 6.4.0-150600.10.5.1
    • kernel-source-rt >= 6.4.0-150600.10.5.1
    • kernel-syms-rt >= 6.4.0-150600.10.5.1
    • ocfs2-kmp-rt >= 6.4.0-150600.10.5.1
    		 Patchnames:
    SUSE-SLE-Module-RT-15-SP6-2024-2973
    SUSE Linux Enterprise Server 15 SP6
    SUSE Linux Enterprise Server for SAP Applications 15 SP6
    • kernel-64kb >= 6.4.0-150600.23.7.3
    • kernel-64kb-devel >= 6.4.0-150600.23.7.3
    • kernel-azure >= 6.4.0-150600.8.5.4
    • kernel-azure-devel >= 6.4.0-150600.8.5.4
    • kernel-default >= 6.4.0-150600.23.7.3
    • kernel-default-base >= 6.4.0-150600.23.7.3.150600.12.2.7
    • kernel-default-devel >= 6.4.0-150600.23.7.3
    • kernel-default-extra >= 6.4.0-150600.23.7.3
    • kernel-devel >= 6.4.0-150600.23.7.2
    • kernel-devel-azure >= 6.4.0-150600.8.5.4
    • kernel-docs >= 6.4.0-150600.23.7.4
    • kernel-macros >= 6.4.0-150600.23.7.2
    • kernel-obs-build >= 6.4.0-150600.23.7.3
    • kernel-source >= 6.4.0-150600.23.7.2
    • kernel-source-azure >= 6.4.0-150600.8.5.4
    • kernel-syms >= 6.4.0-150600.23.7.1
    • kernel-syms-azure >= 6.4.0-150600.8.5.1
    • kernel-zfcpdump >= 6.4.0-150600.23.7.3
    • reiserfs-kmp-default >= 6.4.0-150600.23.7.3
    		 Patchnames:
    SUSE-SLE-Module-Basesystem-15-SP6-2024-2203
    SUSE-SLE-Module-Development-Tools-15-SP6-2024-2203
    SUSE-SLE-Module-Legacy-15-SP6-2024-2203
    SUSE-SLE-Module-Public-Cloud-15-SP6-2024-2135
    SUSE-SLE-Product-WE-15-SP6-2024-2203
    SUSE Linux Enterprise Workstation Extension 15 SP6
    • kernel-default-extra >= 6.4.0-150600.23.7.3
    		 Patchnames:
    SUSE-SLE-Product-WE-15-SP6-2024-2203
    openSUSE Leap 15.6
    • cluster-md-kmp-64kb >= 6.4.0-150600.23.7.3
    • cluster-md-kmp-azure >= 6.4.0-150600.8.5.4
    • cluster-md-kmp-default >= 6.4.0-150600.23.7.3
    • cluster-md-kmp-rt >= 6.4.0-150600.10.5.1
    • dlm-kmp-64kb >= 6.4.0-150600.23.7.3
    • dlm-kmp-azure >= 6.4.0-150600.8.5.4
    • dlm-kmp-default >= 6.4.0-150600.23.7.3
    • dlm-kmp-rt >= 6.4.0-150600.10.5.1
    • dtb-allwinner >= 6.4.0-150600.23.7.1
    • dtb-altera >= 6.4.0-150600.23.7.1
    • dtb-amazon >= 6.4.0-150600.23.7.1
    • dtb-amd >= 6.4.0-150600.23.7.1
    • dtb-amlogic >= 6.4.0-150600.23.7.1
    • dtb-apm >= 6.4.0-150600.23.7.1
    • dtb-apple >= 6.4.0-150600.23.7.1
    • dtb-arm >= 6.4.0-150600.23.7.1
    • dtb-broadcom >= 6.4.0-150600.23.7.1
    • dtb-cavium >= 6.4.0-150600.23.7.1
    • dtb-exynos >= 6.4.0-150600.23.7.1
    • dtb-freescale >= 6.4.0-150600.23.7.1
    • dtb-hisilicon >= 6.4.0-150600.23.7.1
    • dtb-lg >= 6.4.0-150600.23.7.1
    • dtb-marvell >= 6.4.0-150600.23.7.1
    • dtb-mediatek >= 6.4.0-150600.23.7.1
    • dtb-nvidia >= 6.4.0-150600.23.7.1
    • dtb-qcom >= 6.4.0-150600.23.7.1
    • dtb-renesas >= 6.4.0-150600.23.7.1
    • dtb-rockchip >= 6.4.0-150600.23.7.1
    • dtb-socionext >= 6.4.0-150600.23.7.1
    • dtb-sprd >= 6.4.0-150600.23.7.1
    • dtb-xilinx >= 6.4.0-150600.23.7.1
    • gfs2-kmp-64kb >= 6.4.0-150600.23.7.3
    • gfs2-kmp-azure >= 6.4.0-150600.8.5.4
    • gfs2-kmp-default >= 6.4.0-150600.23.7.3
    • gfs2-kmp-rt >= 6.4.0-150600.10.5.1
    • kernel-64kb >= 6.4.0-150600.23.7.3
    • kernel-64kb-devel >= 6.4.0-150600.23.7.3
    • kernel-64kb-extra >= 6.4.0-150600.23.7.3
    • kernel-64kb-livepatch-devel >= 6.4.0-150600.23.7.3
    • kernel-64kb-optional >= 6.4.0-150600.23.7.3
    • kernel-azure >= 6.4.0-150600.8.5.4
    • kernel-azure-devel >= 6.4.0-150600.8.5.4
    • kernel-azure-extra >= 6.4.0-150600.8.5.4
    • kernel-azure-livepatch-devel >= 6.4.0-150600.8.5.4
    • kernel-azure-optional >= 6.4.0-150600.8.5.4
    • kernel-azure-vdso >= 6.4.0-150600.8.5.4
    • kernel-debug >= 6.4.0-150600.23.7.3
    • kernel-debug-devel >= 6.4.0-150600.23.7.3
    • kernel-debug-livepatch-devel >= 6.4.0-150600.23.7.3
    • kernel-debug-vdso >= 6.4.0-150600.23.7.3
    • kernel-default >= 6.4.0-150600.23.7.3
    • kernel-default-base >= 6.4.0-150600.23.7.3.150600.12.2.7
    • kernel-default-base-rebuild >= 6.4.0-150600.23.7.3.150600.12.2.7
    • kernel-default-devel >= 6.4.0-150600.23.7.3
    • kernel-default-extra >= 6.4.0-150600.23.7.3
    • kernel-default-livepatch >= 6.4.0-150600.23.7.3
    • kernel-default-livepatch-devel >= 6.4.0-150600.23.7.3
    • kernel-default-optional >= 6.4.0-150600.23.7.3
    • kernel-default-vdso >= 6.4.0-150600.23.7.3
    • kernel-devel >= 6.4.0-150600.23.7.2
    • kernel-devel-azure >= 6.4.0-150600.8.5.4
    • kernel-devel-rt >= 6.4.0-150600.10.5.1
    • kernel-docs >= 6.4.0-150600.23.7.4
    • kernel-docs-html >= 6.4.0-150600.23.7.4
    • kernel-kvmsmall >= 6.4.0-150600.23.7.3
    • kernel-kvmsmall-devel >= 6.4.0-150600.23.7.3
    • kernel-kvmsmall-livepatch-devel >= 6.4.0-150600.23.7.3
    • kernel-kvmsmall-vdso >= 6.4.0-150600.23.7.3
    • kernel-macros >= 6.4.0-150600.23.7.2
    • kernel-obs-build >= 6.4.0-150600.23.7.3
    • kernel-obs-qa >= 6.4.0-150600.23.7.1
    • kernel-rt >= 6.4.0-150600.10.5.1
    • kernel-rt-devel >= 6.4.0-150600.10.5.1
    • kernel-rt-extra >= 6.4.0-150600.10.5.1
    • kernel-rt-livepatch-devel >= 6.4.0-150600.10.5.1
    • kernel-rt-optional >= 6.4.0-150600.10.5.1
    • kernel-rt-vdso >= 6.4.0-150600.10.5.1
    • kernel-rt_debug >= 6.4.0-150600.10.5.1
    • kernel-rt_debug-devel >= 6.4.0-150600.10.5.1
    • kernel-rt_debug-livepatch-devel >= 6.4.0-150600.10.5.1
    • kernel-rt_debug-vdso >= 6.4.0-150600.10.5.1
    • kernel-source >= 6.4.0-150600.23.7.2
    • kernel-source-azure >= 6.4.0-150600.8.5.4
    • kernel-source-rt >= 6.4.0-150600.10.5.1
    • kernel-source-vanilla >= 6.4.0-150600.23.7.2
    • kernel-syms >= 6.4.0-150600.23.7.1
    • kernel-syms-azure >= 6.4.0-150600.8.5.1
    • kernel-syms-rt >= 6.4.0-150600.10.5.1
    • kernel-zfcpdump >= 6.4.0-150600.23.7.3
    • kselftests-kmp-64kb >= 6.4.0-150600.23.7.3
    • kselftests-kmp-azure >= 6.4.0-150600.8.5.4
    • kselftests-kmp-default >= 6.4.0-150600.23.7.3
    • kselftests-kmp-rt >= 6.4.0-150600.10.5.1
    • ocfs2-kmp-64kb >= 6.4.0-150600.23.7.3
    • ocfs2-kmp-azure >= 6.4.0-150600.8.5.4
    • ocfs2-kmp-default >= 6.4.0-150600.23.7.3
    • ocfs2-kmp-rt >= 6.4.0-150600.10.5.1
    • reiserfs-kmp-64kb >= 6.4.0-150600.23.7.3
    • reiserfs-kmp-azure >= 6.4.0-150600.8.5.4
    • reiserfs-kmp-default >= 6.4.0-150600.23.7.3
    • reiserfs-kmp-rt >= 6.4.0-150600.10.5.1
    		 Patchnames:
    openSUSE-SLE-15.6-2024-2135
    openSUSE-SLE-15.6-2024-2203
    openSUSE-SLE-15.6-2024-2973

    First public cloud image revisions this CVE is fixed in:

    Status of this issue by product and package

    Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.

    Product(s) Source package State
    Products under general support and receiving all security fixes.
    SUSE Linux Enterprise Desktop 15 SP5 kernel-default Not affected
    SUSE Linux Enterprise Desktop 15 SP5 kernel-source Not affected
    SUSE Linux Enterprise Desktop 15 SP6 kernel-64kb Released
    SUSE Linux Enterprise Desktop 15 SP6 kernel-default Released
    SUSE Linux Enterprise Desktop 15 SP6 kernel-default-base Released
    SUSE Linux Enterprise Desktop 15 SP6 kernel-docs Released
    SUSE Linux Enterprise Desktop 15 SP6 kernel-obs-build Released
    SUSE Linux Enterprise Desktop 15 SP6 kernel-source Released
    SUSE Linux Enterprise Desktop 15 SP6 kernel-syms Released
    SUSE Linux Enterprise Desktop 15 SP6 kernel-zfcpdump Released
    SUSE Linux Enterprise High Availability Extension 15 SP6 kernel-default Released
    SUSE Linux Enterprise High Performance Computing 12 SP5 kernel-default Not affected
    SUSE Linux Enterprise High Performance Computing 12 SP5 kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 12 SP5 kernel-source-azure Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP5 kernel-default Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP5 kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP5 kernel-source-azure Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-64kb Released
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-azure Released
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-default Released
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-default-base Released
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-docs Released
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-obs-build Released
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-source Released
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-source-azure Released
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-syms Released
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-syms-azure Released
    SUSE Linux Enterprise High Performance Computing 15 SP6 kernel-zfcpdump Released
    SUSE Linux Enterprise Live Patching 15 SP6 kernel-default Released
    SUSE Linux Enterprise Live Patching 15 SP6 kernel-livepatch-SLE15-SP6-RT_Update_1 Released
    SUSE Linux Enterprise Live Patching 15 SP6 kernel-livepatch-SLE15-SP6_Update_1 Released
    SUSE Linux Enterprise Micro 5.1 kernel-default Not affected
    SUSE Linux Enterprise Micro 5.1 kernel-rt Not affected
    SUSE Linux Enterprise Micro 5.1 kernel-source-rt Not affected
    SUSE Linux Enterprise Micro 5.2 kernel-default Not affected
    SUSE Linux Enterprise Micro 5.2 kernel-rt Not affected
    SUSE Linux Enterprise Micro 5.2 kernel-source-rt Not affected
    SUSE Linux Enterprise Micro 5.3 kernel-default Not affected
    SUSE Linux Enterprise Micro 5.3 kernel-rt Not affected
    SUSE Linux Enterprise Micro 5.3 kernel-source-rt Not affected
    SUSE Linux Enterprise Micro 5.4 kernel-default Not affected
    SUSE Linux Enterprise Micro 5.4 kernel-rt Not affected
    SUSE Linux Enterprise Micro 5.4 kernel-source-rt Not affected
    SUSE Linux Enterprise Micro 5.5 kernel-source-rt Not affected
    SUSE Linux Enterprise Micro 6.0 kernel-default Released
    SUSE Linux Enterprise Micro 6.0 kernel-default-base Released
    SUSE Linux Enterprise Micro 6.0 kernel-kvmsmall Released
    SUSE Linux Enterprise Micro 6.0 kernel-rt Released
    SUSE Linux Enterprise Micro 6.0 kernel-source Released
    SUSE Linux Enterprise Micro 6.0 kernel-source-rt Released
    SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-default Not affected
    SUSE Linux Enterprise Module for Basesystem 15 SP5 kernel-source Not affected
    SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-64kb Released
    SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-default Released
    SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-default-base Released
    SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-source Released
    SUSE Linux Enterprise Module for Basesystem 15 SP6 kernel-zfcpdump Released
    SUSE Linux Enterprise Module for Development Tools 15 SP5 kernel-default Not affected
    SUSE Linux Enterprise Module for Development Tools 15 SP5 kernel-source Not affected
    SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-default Released
    SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-docs Released
    SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-obs-build Released
    SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-source Released
    SUSE Linux Enterprise Module for Development Tools 15 SP6 kernel-syms Released
    SUSE Linux Enterprise Module for Legacy 15 SP6 kernel-default Released
    SUSE Linux Enterprise Module for Public Cloud 15 SP5 kernel-source-azure Not affected
    SUSE Linux Enterprise Module for Public Cloud 15 SP6 kernel-azure Released
    SUSE Linux Enterprise Module for Public Cloud 15 SP6 kernel-source-azure Released
    SUSE Linux Enterprise Module for Public Cloud 15 SP6 kernel-syms-azure Released
    SUSE Linux Enterprise Real Time 12 SP5 kernel-source-rt Not affected
    SUSE Linux Enterprise Real Time 15 SP5 kernel-source-rt Not affected
    SUSE Linux Enterprise Real Time 15 SP6 kernel-rt Released
    SUSE Linux Enterprise Real Time 15 SP6 kernel-rt_debug Released
    SUSE Linux Enterprise Real Time 15 SP6 kernel-source-rt Released
    SUSE Linux Enterprise Real Time 15 SP6 kernel-syms-rt Released
    SUSE Linux Enterprise Server 12 SP5 kernel-default Not affected
    SUSE Linux Enterprise Server 12 SP5 kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP5 kernel-source-azure Not affected
    SUSE Linux Enterprise Server 15 SP5 kernel-default Not affected
    SUSE Linux Enterprise Server 15 SP5 kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP5 kernel-source-azure Not affected
    SUSE Linux Enterprise Server 15 SP6 kernel-64kb Released
    SUSE Linux Enterprise Server 15 SP6 kernel-azure Released
    SUSE Linux Enterprise Server 15 SP6 kernel-default Released
    SUSE Linux Enterprise Server 15 SP6 kernel-default-base Released
    SUSE Linux Enterprise Server 15 SP6 kernel-docs Released
    SUSE Linux Enterprise Server 15 SP6 kernel-obs-build Released
    SUSE Linux Enterprise Server 15 SP6 kernel-source Released
    SUSE Linux Enterprise Server 15 SP6 kernel-source-azure Released
    SUSE Linux Enterprise Server 15 SP6 kernel-syms Released
    SUSE Linux Enterprise Server 15 SP6 kernel-syms-azure Released
    SUSE Linux Enterprise Server 15 SP6 kernel-zfcpdump Released
    SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-default Not affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP5 kernel-source-azure Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-default Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP5 kernel-source-azure Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-64kb Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-azure Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-default Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-default-base Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-docs Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-obs-build Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-source Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-source-azure Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-syms Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-syms-azure Released
    SUSE Linux Enterprise Server for SAP Applications 15 SP6 kernel-zfcpdump Released
    SUSE Linux Enterprise Workstation Extension 15 SP6 kernel-default Released
    SUSE Manager Proxy 4.3 kernel-default Not affected
    SUSE Manager Proxy 4.3 kernel-source Not affected
    SUSE Manager Retail Branch Server 4.3 kernel-default Not affected
    SUSE Manager Retail Branch Server 4.3 kernel-source Not affected
    SUSE Manager Server 4.3 kernel-default Not affected
    SUSE Manager Server 4.3 kernel-source Not affected
    SUSE Real Time Module 15 SP5 kernel-source-rt Not affected
    SUSE Real Time Module 15 SP6 kernel-rt Released
    SUSE Real Time Module 15 SP6 kernel-rt_debug Released
    SUSE Real Time Module 15 SP6 kernel-source-rt Released
    SUSE Real Time Module 15 SP6 kernel-syms-rt Released
    openSUSE Leap 15.5 kernel-default Not affected
    openSUSE Leap 15.5 kernel-source Not affected
    openSUSE Leap 15.5 kernel-source-azure Not affected
    openSUSE Leap 15.5 kernel-source-rt Not affected
    openSUSE Leap 15.6 kernel-default Released
    openSUSE Leap 15.6 kernel-source Released
    openSUSE Leap 15.6 kernel-source-azure Released
    openSUSE Leap 15.6 kernel-source-rt Released
    Products under Long Term Service Pack support and receiving important and critical security fixes.
    SUSE Linux Enterprise Desktop 15 SP4 kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP2 kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-ESPOS kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-default Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP3 kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-default Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP4 kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-default Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-default Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS kernel-source Not affected
    SUSE Linux Enterprise Module for Basesystem 15 SP2 kernel-source Not affected
    SUSE Linux Enterprise Module for Basesystem 15 SP3 kernel-source Not affected
    SUSE Linux Enterprise Module for Basesystem 15 SP4 kernel-source Not affected
    SUSE Linux Enterprise Module for Development Tools 15 SP2 kernel-source Not affected
    SUSE Linux Enterprise Module for Development Tools 15 SP3 kernel-source Not affected
    SUSE Linux Enterprise Module for Development Tools 15 SP4 kernel-source Not affected
    SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-default Not affected
    SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP2 kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP2-LTSS kernel-default Not affected
    SUSE Linux Enterprise Server 15 SP2-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP3 kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-default Not affected
    SUSE Linux Enterprise Server 15 SP3-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP4 kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP4-LTSS kernel-default Not affected
    SUSE Linux Enterprise Server 15 SP4-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-default Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP2 kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-default Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP3 kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-default Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP4 kernel-source Not affected
    Products past their end of life and not receiving proactive updates anymore.
    HPE Helion OpenStack 8 kernel-source Not affected
    SUSE CaaS Platform 4.0 kernel-source Not affected
    SUSE CaaS Platform Toolchain 3 kernel-source Not affected
    SUSE Enterprise Storage 6 kernel-source Not affected
    SUSE Enterprise Storage 7 kernel-source Not affected
    SUSE Enterprise Storage 7.1 kernel-default Not affected
    SUSE Enterprise Storage 7.1 kernel-source Not affected
    SUSE Linux Enterprise Desktop 11 SP4 kernel-source Not affected
    SUSE Linux Enterprise Desktop 12 SP3 kernel-source Not affected
    SUSE Linux Enterprise Desktop 12 SP4 kernel-source Not affected
    SUSE Linux Enterprise Desktop 15 kernel-source Not affected
    SUSE Linux Enterprise Desktop 15 SP1 kernel-source Not affected
    SUSE Linux Enterprise Desktop 15 SP2 kernel-source Not affected
    SUSE Linux Enterprise Desktop 15 SP3 kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP1 kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15-ESPOS kernel-source Not affected
    SUSE Linux Enterprise High Performance Computing 15-LTSS kernel-source Not affected
    SUSE Linux Enterprise Micro 5.0 kernel-default Not affected
    SUSE Linux Enterprise Module for Basesystem 15 kernel-source Not affected
    SUSE Linux Enterprise Module for Basesystem 15 SP1 kernel-source Not affected
    SUSE Linux Enterprise Module for Development Tools 15 kernel-source Not affected
    SUSE Linux Enterprise Module for Development Tools 15 SP1 kernel-source Not affected
    SUSE Linux Enterprise Real Time 15 SP2 kernel-source Not affected
    SUSE Linux Enterprise Real Time 15 SP3 kernel-source Not affected
    SUSE Linux Enterprise Real Time 15 SP3 kernel-source-rt Not affected
    SUSE Linux Enterprise Real Time 15 SP4 kernel-source Not affected
    SUSE Linux Enterprise Real Time 15 SP4 kernel-source-rt Not affected
    SUSE Linux Enterprise Server 11 SP4 kernel-source Not affected
    SUSE Linux Enterprise Server 11 SP4 LTSS kernel-default Not affected
    SUSE Linux Enterprise Server 11 SP4 LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 11 SP4-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP3 kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP3-BCL kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP3-ESPOS kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP3-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP4 kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP4-ESPOS kernel-source Not affected
    SUSE Linux Enterprise Server 12 SP4-LTSS kernel-default Not affected
    SUSE Linux Enterprise Server 12 SP4-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 15 kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP1 kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP1-BCL kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP1-LTSS kernel-default Not affected
    SUSE Linux Enterprise Server 15 SP1-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP2-BCL kernel-source Not affected
    SUSE Linux Enterprise Server 15 SP3-BCL kernel-source Not affected
    SUSE Linux Enterprise Server 15-LTSS kernel-default Not affected
    SUSE Linux Enterprise Server 15-LTSS kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP3 kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-default Not affected
    SUSE Linux Enterprise Server for SAP Applications 12 SP4 kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 kernel-source Not affected
    SUSE Linux Enterprise Server for SAP Applications 15 SP1 kernel-source Not affected
    SUSE Manager Proxy 4.0 kernel-source Not affected
    SUSE Manager Proxy 4.1 kernel-source Not affected
    SUSE Manager Proxy 4.2 kernel-source Not affected
    SUSE Manager Retail Branch Server 4.0 kernel-source Not affected
    SUSE Manager Retail Branch Server 4.1 kernel-source Not affected
    SUSE Manager Retail Branch Server 4.2 kernel-source Not affected
    SUSE Manager Server 4.0 kernel-source Not affected
    SUSE Manager Server 4.1 kernel-source Not affected
    SUSE Manager Server 4.2 kernel-source Not affected
    SUSE OpenStack Cloud 8 kernel-source Not affected
    SUSE OpenStack Cloud 9 kernel-default Not affected
    SUSE OpenStack Cloud 9 kernel-source Not affected
    SUSE OpenStack Cloud Crowbar 8 kernel-source Not affected
    SUSE OpenStack Cloud Crowbar 9 kernel-default Not affected
    SUSE OpenStack Cloud Crowbar 9 kernel-source Not affected
    SUSE Real Time Module 15 SP3 kernel-source-rt Not affected
    SUSE Real Time Module 15 SP4 kernel-source-rt Not affected
    openSUSE Leap 15.3 kernel-source Not affected
    openSUSE Leap 15.3 kernel-source-rt Not affected
    openSUSE Leap 15.4 kernel-source Not affected
    openSUSE Leap 15.4 kernel-source-azure Not affected
    openSUSE Leap 15.4 kernel-source-rt Not affected

    SUSE Timeline for this CVE

    CVE page created: Wed May 1 10:00:37 2024
    CVE page last modified: Tue Sep 17 18:54:08 2024