{"document":{"aggregate_severity":{"namespace":"https://www.suse.com/support/security/rating/","text":"important"},"category":"csaf_security_advisory","csaf_version":"2.0","distribution":{"text":"Copyright 2023 SUSE LLC. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"Security update for the Linux Kernel","title":"Title of the patch"},{"category":"description","text":"\nThe SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2022-36946: Fixed an incorrect packet trucation operation which could lead to denial of service (bnc#1201940).\n- CVE-2022-29581: Fixed improper update of reference count in net/sched that could cause root privilege escalation (bnc#1199665).\n- CVE-2022-20166: Fixed several possible memory safety issues due to unsafe operations (bsc#1200598).\n- CVE-2020-36558: Fixed a race condition involving VT_RESIZEX which could lead to a NULL pointer dereference and general protection fault (bnc#1200910).\n- CVE-2020-36557: Fixed a race condition between the VT_DISALLOCATE ioctl and closing/opening of TTYs that could lead to a use-after-free (bnc#1201429).\n- CVE-2021-33655: Fixed an out of bounds write by ioctl cmd FBIOPUT_VSCREENINFO (bnc#1201635).\n- CVE-2021-33656: Fixed an out of bounds write related to ioctl cmd PIO_FONT (bnc#1201636).\n- CVE-2022-21505: Fixed a kernel lockdown bypass via IMA policy (bsc#1201458).\n- CVE-2022-1462: Fixed an out-of-bounds read flaw in the TTY subsystem (bnc#1198829).\n- CVE-2022-1116: Fixed an integer overflow vulnerability in io_uring which allowed a local attacker to escalate privileges to root (bnc#1199647).- CVE-2022-2318: Fixed a use-after-free vulnerability in the timer handler in Rose subsystem that allowed unprivileged attackers to crash the system (bsc#1201251).\n- CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-33742: Fixed multiple potential data leaks with Block and Network devices when using untrusted backends (bsc#1200762).\n\nThe following non-security bugs were fixed:\n\n- Fixed a system crash related to the recent RETBLEED mitigation (bsc#1201644, bsc#1201664, bsc#1201672, bsc#1201673, bsc#1201676).\n- qla2xxx: drop patch which prevented nvme port discovery (bsc#1200651 bsc#1200644 bsc#1201954 bsc#1201958).\n- kvm: emulate: do not adjust size of fastop and setcc subroutines (bsc#1201930).\n- bpf, cpumap: Remove rcpu pointer from cpu_map_build_skb signature (bsc#1199364).\n- bpf: enable BPF type format (BTF) (jsc#SLE-24559).\n- nfs: avoid NULL pointer dereference when there is unflushed data (bsc#1201196).\n- hv_netvsc: Add (more) validation for untrusted Hyper-V values (bsc#1199364).\n- hv_netvsc: Add comment of netvsc_xdp_xmit() (bsc#1199364).\n- hv_netvsc: Add support for XDP_REDIRECT (bsc#1199364).\n- hv_netvsc: Copy packets sent by Hyper-V out of the receive buffer (bsc#1199364).\n- hv_netvsc: Fix validation in netvsc_linkstatus_callback() (bsc#1199364).\n- kvm/emulate: Fix SETcc emulation function offsets with SLS (bsc#1201930).\n- lkdtm: Disable return thunks in rodata.c (bsc#1178134).\n- net, xdp: Introduce __xdp_build_skb_from_frame utility routine (bsc#1199364).\n- net, xdp: Introduce xdp_build_skb_from_frame utility routine (bsc#1199364).\n- nvme: consider also host_iface when checking ip options (bsc#1199670).\n- powerpc/mobility: wait for memory transfer to complete (bsc#1201846 ltc#198761).\n- powerpc/pseries/mobility: set NMI watchdog factor during an LPM (bsc#1201846 ltc#198761).\n- powerpc/watchdog: introduce a NMI watchdog's factor (bsc#1201846 ltc#198761).\n- scsi: lpfc: Copyright updates for 14.2.0.5 patches (bsc#1201956).\n- scsi: lpfc: Fix attempted FA-PWWN usage after feature disable (bsc#1201956).\n- scsi: lpfc: Fix lost NVMe paths during LIF bounce stress test (bsc#1201956 bsc#1200521).\n- scsi: lpfc: Fix possible memory leak when failing to issue CMF WQE (bsc#1201956).\n- scsi: lpfc: Fix uninitialized cqe field in lpfc_nvme_cancel_iocb() (bsc#1201956).\n- scsi: lpfc: Prevent buffer overflow crashes in debugfs with malformed user input (bsc#1201956).\n- scsi: lpfc: Refactor lpfc_nvmet_prep_abort_wqe() into lpfc_sli_prep_abort_xri() (bsc#1201956).\n- scsi: lpfc: Remove Menlo/Hornet related code (bsc#1201956).\n- scsi: lpfc: Remove extra atomic_inc on cmd_pending in queuecommand after VMID (bsc#1201956).\n- scsi: lpfc: Revert RSCN_MEMENTO workaround for misbehaved configuration (bsc#1201956).\n- scsi: lpfc: Set PU field when providing D_ID in XMIT_ELS_RSP64_CX iocb (bsc#1201956).\n- scsi: lpfc: Update lpfc version to 14.2.0.5 (bsc#1201956).\n- scsi: qla2xxx: Check correct variable in qla24xx_async_gffid() (bsc#1201958).\n- scsi: qla2xxx: Fix discovery issues in FC-AL topology (bsc#1201958).\n- scsi: qla2xxx: Fix imbalance vha->vref_count (bsc#1201958).\n- scsi: qla2xxx: Fix incorrect display of max frame size (bsc#1201958).\n- scsi: qla2xxx: Fix response queue handler reading stale packets (bsc#1201958).\n- scsi: qla2xxx: Fix sparse warning for dport_data (bsc#1201958).\n- scsi: qla2xxx: Update manufacturer details (bsc#1201958).\n- scsi: qla2xxx: Update version to 10.02.07.800-k (bsc#1201958).\n- scsi: qla2xxx: Zero undefined mailbox IN registers (bsc#1201958).\n- scsi: qla2xxx: edif: Fix dropped IKE message (bsc#1201958).\n- watchdog: export lockup_detector_reconfigure (bsc#1201846 ltc#198761).\n- x86/bugs: Remove apostrophe typo (bsc#1178134).\n- x86/entry: Remove skip_r11rcx (bsc#1201644).\n- x86/retbleed: Add fine grained Kconfig knobs (bsc#1178134).\n- xen/netback: avoid entering xenvif_rx_next_skb() with an empty rx queue (bsc#1201381).\n","title":"Description of the patch"},{"category":"details","text":"SUSE-2022-2741,SUSE-SLE-Module-Public-Cloud-15-SP3-2022-2741,openSUSE-SLE-15.3-2022-2741","title":"Patchnames"},{"category":"legal_disclaimer","text":"CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).","title":"Terms of use"}],"publisher":{"category":"vendor","contact_details":"https://www.suse.com/support/security/contact/","name":"SUSE Product Security Team","namespace":"https://www.suse.com/"},"references":[{"category":"self","summary":"URL for SUSE-SU-2022:2741-1","url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222741-1/"},{"category":"external","summary":"SUSE ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"self","summary":"URL of this CSAF notice","url":"https://ftp.suse.com/pub/projects/security/csaf/suse-su-2022_2741-1.json"},{"category":"self","summary":"E-Mail link for SUSE-SU-2022:2741-1","url":"https://lists.suse.com/pipermail/sle-security-updates/2022-August/011866.html"},{"category":"self","summary":"SUSE Bug 1178134","url":"https://bugzilla.suse.com/1178134"},{"category":"self","summary":"SUSE Bug 1198829","url":"https://bugzilla.suse.com/1198829"},{"category":"self","summary":"SUSE Bug 1199364","url":"https://bugzilla.suse.com/1199364"},{"category":"self","summary":"SUSE Bug 1199647","url":"https://bugzilla.suse.com/1199647"},{"category":"self","summary":"SUSE Bug 1199665","url":"https://bugzilla.suse.com/1199665"},{"category":"self","summary":"SUSE Bug 1199670","url":"https://bugzilla.suse.com/1199670"},{"category":"self","summary":"SUSE Bug 1200521","url":"https://bugzilla.suse.com/1200521"},{"category":"self","summary":"SUSE Bug 1200598","url":"https://bugzilla.suse.com/1200598"},{"category":"self","summary":"SUSE Bug 1200644","url":"https://bugzilla.suse.com/1200644"},{"category":"self","summary":"SUSE Bug 1200651","url":"https://bugzilla.suse.com/1200651"},{"category":"self","summary":"SUSE Bug 1200762","url":"https://bugzilla.suse.com/1200762"},{"category":"self","summary":"SUSE Bug 1200910","url":"https://bugzilla.suse.com/1200910"},{"category":"self","summary":"SUSE Bug 1201196","url":"https://bugzilla.suse.com/1201196"},{"category":"self","summary":"SUSE Bug 1201206","url":"https://bugzilla.suse.com/1201206"},{"category":"self","summary":"SUSE Bug 1201251","url":"https://bugzilla.suse.com/1201251"},{"category":"self","summary":"SUSE Bug 1201381","url":"https://bugzilla.suse.com/1201381"},{"category":"self","summary":"SUSE Bug 1201429","url":"https://bugzilla.suse.com/1201429"},{"category":"self","summary":"SUSE Bug 1201458","url":"https://bugzilla.suse.com/1201458"},{"category":"self","summary":"SUSE Bug 1201635","url":"https://bugzilla.suse.com/1201635"},{"category":"self","summary":"SUSE Bug 1201636","url":"https://bugzilla.suse.com/1201636"},{"category":"self","summary":"SUSE Bug 1201644","url":"https://bugzilla.suse.com/1201644"},{"category":"self","summary":"SUSE Bug 1201664","url":"https://bugzilla.suse.com/1201664"},{"category":"self","summary":"SUSE Bug 1201672","url":"https://bugzilla.suse.com/1201672"},{"category":"self","summary":"SUSE Bug 1201673","url":"https://bugzilla.suse.com/1201673"},{"category":"self","summary":"SUSE Bug 1201676","url":"https://bugzilla.suse.com/1201676"},{"category":"self","summary":"SUSE Bug 1201846","url":"https://bugzilla.suse.com/1201846"},{"category":"self","summary":"SUSE Bug 1201930","url":"https://bugzilla.suse.com/1201930"},{"category":"self","summary":"SUSE Bug 1201940","url":"https://bugzilla.suse.com/1201940"},{"category":"self","summary":"SUSE Bug 1201954","url":"https://bugzilla.suse.com/1201954"},{"category":"self","summary":"SUSE Bug 1201956","url":"https://bugzilla.suse.com/1201956"},{"category":"self","summary":"SUSE Bug 1201958","url":"https://bugzilla.suse.com/1201958"},{"category":"self","summary":"SUSE CVE CVE-2020-36557 page","url":"https://www.suse.com/security/cve/CVE-2020-36557/"},{"category":"self","summary":"SUSE CVE CVE-2020-36558 page","url":"https://www.suse.com/security/cve/CVE-2020-36558/"},{"category":"self","summary":"SUSE CVE CVE-2021-33655 page","url":"https://www.suse.com/security/cve/CVE-2021-33655/"},{"category":"self","summary":"SUSE CVE CVE-2021-33656 page","url":"https://www.suse.com/security/cve/CVE-2021-33656/"},{"category":"self","summary":"SUSE CVE CVE-2022-1116 page","url":"https://www.suse.com/security/cve/CVE-2022-1116/"},{"category":"self","summary":"SUSE CVE CVE-2022-1462 page","url":"https://www.suse.com/security/cve/CVE-2022-1462/"},{"category":"self","summary":"SUSE CVE CVE-2022-20166 page","url":"https://www.suse.com/security/cve/CVE-2022-20166/"},{"category":"self","summary":"SUSE CVE CVE-2022-21505 page","url":"https://www.suse.com/security/cve/CVE-2022-21505/"},{"category":"self","summary":"SUSE CVE CVE-2022-2318 page","url":"https://www.suse.com/security/cve/CVE-2022-2318/"},{"category":"self","summary":"SUSE CVE CVE-2022-26365 page","url":"https://www.suse.com/security/cve/CVE-2022-26365/"},{"category":"self","summary":"SUSE CVE CVE-2022-29581 page","url":"https://www.suse.com/security/cve/CVE-2022-29581/"},{"category":"self","summary":"SUSE CVE CVE-2022-32250 page","url":"https://www.suse.com/security/cve/CVE-2022-32250/"},{"category":"self","summary":"SUSE CVE CVE-2022-33740 page","url":"https://www.suse.com/security/cve/CVE-2022-33740/"},{"category":"self","summary":"SUSE CVE CVE-2022-33741 page","url":"https://www.suse.com/security/cve/CVE-2022-33741/"},{"category":"self","summary":"SUSE CVE CVE-2022-33742 page","url":"https://www.suse.com/security/cve/CVE-2022-33742/"},{"category":"self","summary":"SUSE CVE CVE-2022-36946 page","url":"https://www.suse.com/security/cve/CVE-2022-36946/"}],"title":"Security update for the Linux Kernel","tracking":{"current_release_date":"2022-08-10T07:23:06Z","generator":{"date":"2022-08-10T07:23:06Z","engine":{"name":"cve-database.git:bin/generate-csaf.pl","version":"1"}},"id":"SUSE-SU-2022:2741-1","initial_release_date":"2022-08-10T07:23:06Z","revision_history":[{"date":"2022-08-10T07:23:06Z","number":"1","summary":"Current version"}],"status":"final","version":"1"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_version","name":"kernel-devel-azure-5.3.18-150300.38.75.1.noarch","product":{"name":"kernel-devel-azure-5.3.18-150300.38.75.1.noarch","product_id":"kernel-devel-azure-5.3.18-150300.38.75.1.noarch"}},{"category":"product_version","name":"kernel-source-azure-5.3.18-150300.38.75.1.noarch","product":{"name":"kernel-source-azure-5.3.18-150300.38.75.1.noarch","product_id":"kernel-source-azure-5.3.18-150300.38.75.1.noarch"}}],"category":"architecture","name":"noarch"},{"branches":[{"category":"product_version","name":"cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","product":{"name":"cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","product_id":"cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64"}},{"category":"product_version","name":"dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","product":{"name":"dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","product_id":"dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64"}},{"category":"product_version","name":"gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","product":{"name":"gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","product_id":"gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64"}},{"category":"product_version","name":"kernel-azure-5.3.18-150300.38.75.1.x86_64","product":{"name":"kernel-azure-5.3.18-150300.38.75.1.x86_64","product_id":"kernel-azure-5.3.18-150300.38.75.1.x86_64"}},{"category":"product_version","name":"kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","product":{"name":"kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","product_id":"kernel-azure-devel-5.3.18-150300.38.75.1.x86_64"}},{"category":"product_version","name":"kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","product":{"name":"kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","product_id":"kernel-azure-extra-5.3.18-150300.38.75.1.x86_64"}},{"category":"product_version","name":"kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","product":{"name":"kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","product_id":"kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64"}},{"category":"product_version","name":"kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","product":{"name":"kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","product_id":"kernel-azure-optional-5.3.18-150300.38.75.1.x86_64"}},{"category":"product_version","name":"kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","product":{"name":"kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","product_id":"kernel-syms-azure-5.3.18-150300.38.75.1.x86_64"}},{"category":"product_version","name":"kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","product":{"name":"kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","product_id":"kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64"}},{"category":"product_version","name":"ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","product":{"name":"ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","product_id":"ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64"}},{"category":"product_version","name":"reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64","product":{"name":"reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64","product_id":"reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"}}],"category":"architecture","name":"x86_64"},{"branches":[{"category":"product_name","name":"SUSE Linux Enterprise Module for Public Cloud 15 SP3","product":{"name":"SUSE Linux Enterprise Module for Public Cloud 15 SP3","product_id":"SUSE Linux Enterprise Module for Public Cloud 15 SP3","product_identification_helper":{"cpe":"cpe:/o:suse:sle-module-public-cloud:15:sp3"}}},{"category":"product_name","name":"openSUSE Leap 15.3","product":{"name":"openSUSE Leap 15.3","product_id":"openSUSE Leap 15.3","product_identification_helper":{"cpe":"cpe:/o:opensuse:leap:15.3"}}}],"category":"product_family","name":"SUSE Linux Enterprise"}],"category":"vendor","name":"SUSE"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"kernel-azure-5.3.18-150300.38.75.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP3","product_id":"SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64"},"product_reference":"kernel-azure-5.3.18-150300.38.75.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Module for Public Cloud 15 SP3"},{"category":"default_component_of","full_product_name":{"name":"kernel-azure-devel-5.3.18-150300.38.75.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP3","product_id":"SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64"},"product_reference":"kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Module for Public Cloud 15 SP3"},{"category":"default_component_of","full_product_name":{"name":"kernel-devel-azure-5.3.18-150300.38.75.1.noarch as component of SUSE Linux Enterprise Module for Public Cloud 15 SP3","product_id":"SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch"},"product_reference":"kernel-devel-azure-5.3.18-150300.38.75.1.noarch","relates_to_product_reference":"SUSE Linux Enterprise Module for Public Cloud 15 SP3"},{"category":"default_component_of","full_product_name":{"name":"kernel-source-azure-5.3.18-150300.38.75.1.noarch as component of SUSE Linux Enterprise Module for Public Cloud 15 SP3","product_id":"SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch"},"product_reference":"kernel-source-azure-5.3.18-150300.38.75.1.noarch","relates_to_product_reference":"SUSE Linux Enterprise Module for Public Cloud 15 SP3"},{"category":"default_component_of","full_product_name":{"name":"kernel-syms-azure-5.3.18-150300.38.75.1.x86_64 as component of SUSE Linux Enterprise Module for Public Cloud 15 SP3","product_id":"SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64"},"product_reference":"kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","relates_to_product_reference":"SUSE Linux Enterprise Module for Public Cloud 15 SP3"},{"category":"default_component_of","full_product_name":{"name":"cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3","product_id":"openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64"},"product_reference":"cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","relates_to_product_reference":"openSUSE Leap 15.3"},{"category":"default_component_of","full_product_name":{"name":"dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3","product_id":"openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64"},"product_reference":"dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","relates_to_product_reference":"openSUSE Leap 15.3"},{"category":"default_component_of","full_product_name":{"name":"gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3","product_id":"openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64"},"product_reference":"gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","relates_to_product_reference":"openSUSE Leap 15.3"},{"category":"default_component_of","full_product_name":{"name":"kernel-azure-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3","product_id":"openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64"},"product_reference":"kernel-azure-5.3.18-150300.38.75.1.x86_64","relates_to_product_reference":"openSUSE Leap 15.3"},{"category":"default_component_of","full_product_name":{"name":"kernel-azure-devel-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3","product_id":"openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64"},"product_reference":"kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","relates_to_product_reference":"openSUSE Leap 15.3"},{"category":"default_component_of","full_product_name":{"name":"kernel-azure-extra-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3","product_id":"openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64"},"product_reference":"kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","relates_to_product_reference":"openSUSE Leap 15.3"},{"category":"default_component_of","full_product_name":{"name":"kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3","product_id":"openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64"},"product_reference":"kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","relates_to_product_reference":"openSUSE Leap 15.3"},{"category":"default_component_of","full_product_name":{"name":"kernel-azure-optional-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3","product_id":"openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64"},"product_reference":"kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","relates_to_product_reference":"openSUSE Leap 15.3"},{"category":"default_component_of","full_product_name":{"name":"kernel-devel-azure-5.3.18-150300.38.75.1.noarch as component of openSUSE Leap 15.3","product_id":"openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch"},"product_reference":"kernel-devel-azure-5.3.18-150300.38.75.1.noarch","relates_to_product_reference":"openSUSE Leap 15.3"},{"category":"default_component_of","full_product_name":{"name":"kernel-source-azure-5.3.18-150300.38.75.1.noarch as component of openSUSE Leap 15.3","product_id":"openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch"},"product_reference":"kernel-source-azure-5.3.18-150300.38.75.1.noarch","relates_to_product_reference":"openSUSE Leap 15.3"},{"category":"default_component_of","full_product_name":{"name":"kernel-syms-azure-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3","product_id":"openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64"},"product_reference":"kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","relates_to_product_reference":"openSUSE Leap 15.3"},{"category":"default_component_of","full_product_name":{"name":"kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3","product_id":"openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64"},"product_reference":"kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","relates_to_product_reference":"openSUSE Leap 15.3"},{"category":"default_component_of","full_product_name":{"name":"ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3","product_id":"openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64"},"product_reference":"ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","relates_to_product_reference":"openSUSE Leap 15.3"},{"category":"default_component_of","full_product_name":{"name":"reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64 as component of openSUSE Leap 15.3","product_id":"openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"},"product_reference":"reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64","relates_to_product_reference":"openSUSE Leap 15.3"}]},"vulnerabilities":[{"cve":"CVE-2020-36557","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2020-36557"}],"notes":[{"category":"general","text":"A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-free.","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2020-36557","url":"https://www.suse.com/security/cve/CVE-2020-36557"},{"category":"external","summary":"SUSE Bug 1201429 for CVE-2020-36557","url":"https://bugzilla.suse.com/1201429"},{"category":"external","summary":"SUSE Bug 1201742 for CVE-2020-36557","url":"https://bugzilla.suse.com/1201742"},{"category":"external","summary":"SUSE Bug 1202874 for CVE-2020-36557","url":"https://bugzilla.suse.com/1202874"},{"category":"external","summary":"SUSE Bug 1205313 for CVE-2020-36557","url":"https://bugzilla.suse.com/1205313"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-08-10T07:23:06Z","details":"important"}],"title":"CVE-2020-36557"},{"cve":"CVE-2020-36558","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2020-36558"}],"notes":[{"category":"general","text":"A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault.","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2020-36558","url":"https://www.suse.com/security/cve/CVE-2020-36558"},{"category":"external","summary":"SUSE Bug 1200910 for CVE-2020-36558","url":"https://bugzilla.suse.com/1200910"},{"category":"external","summary":"SUSE Bug 1201752 for CVE-2020-36558","url":"https://bugzilla.suse.com/1201752"},{"category":"external","summary":"SUSE Bug 1205313 for CVE-2020-36558","url":"https://bugzilla.suse.com/1205313"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-08-10T07:23:06Z","details":"important"}],"title":"CVE-2020-36558"},{"cve":"CVE-2021-33655","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2021-33655"}],"notes":[{"category":"general","text":"When sending malicous data to kernel by ioctl cmd FBIOPUT_VSCREENINFO,kernel will write memory out of bounds.","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2021-33655","url":"https://www.suse.com/security/cve/CVE-2021-33655"},{"category":"external","summary":"SUSE Bug 1201635 for CVE-2021-33655","url":"https://bugzilla.suse.com/1201635"},{"category":"external","summary":"SUSE Bug 1202087 for CVE-2021-33655","url":"https://bugzilla.suse.com/1202087"},{"category":"external","summary":"SUSE Bug 1205313 for CVE-2021-33655","url":"https://bugzilla.suse.com/1205313"},{"category":"external","summary":"SUSE Bug 1212291 for CVE-2021-33655","url":"https://bugzilla.suse.com/1212291"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-08-10T07:23:06Z","details":"important"}],"title":"CVE-2021-33655"},{"cve":"CVE-2021-33656","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2021-33656"}],"notes":[{"category":"general","text":"When setting font with malicous data by ioctl cmd PIO_FONT,kernel will write memory out of bounds.","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2021-33656","url":"https://www.suse.com/security/cve/CVE-2021-33656"},{"category":"external","summary":"SUSE Bug 1201636 for CVE-2021-33656","url":"https://bugzilla.suse.com/1201636"},{"category":"external","summary":"SUSE Bug 1212286 for CVE-2021-33656","url":"https://bugzilla.suse.com/1212286"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-08-10T07:23:06Z","details":"moderate"}],"title":"CVE-2021-33656"},{"cve":"CVE-2022-1116","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2022-1116"}],"notes":[{"category":"general","text":"Integer Overflow or Wraparound vulnerability in io_uring of Linux Kernel allows local attacker to cause memory corruption and escalate privileges to root. This issue affects: Linux Kernel versions prior to 5.4.189; version 5.4.24 and later versions.","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2022-1116","url":"https://www.suse.com/security/cve/CVE-2022-1116"},{"category":"external","summary":"SUSE Bug 1199647 for CVE-2022-1116","url":"https://bugzilla.suse.com/1199647"},{"category":"external","summary":"SUSE Bug 1199648 for CVE-2022-1116","url":"https://bugzilla.suse.com/1199648"},{"category":"external","summary":"SUSE Bug 1209225 for CVE-2022-1116","url":"https://bugzilla.suse.com/1209225"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-08-10T07:23:06Z","details":"important"}],"title":"CVE-2022-1116"},{"cve":"CVE-2022-1462","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2022-1462"}],"notes":[{"category":"general","text":"An out-of-bounds read flaw was found in the Linux kernel’s TeleTYpe subsystem. The issue occurs in how a user triggers a race condition using ioctls TIOCSPTLCK and TIOCGPTPEER and TIOCSTI and TCXONC with leakage of memory in the flush_to_ldisc function. This flaw allows a local user to crash the system or read unauthorized random data from memory.","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2022-1462","url":"https://www.suse.com/security/cve/CVE-2022-1462"},{"category":"external","summary":"SUSE Bug 1198829 for CVE-2022-1462","url":"https://bugzilla.suse.com/1198829"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":6.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-08-10T07:23:06Z","details":"moderate"}],"title":"CVE-2022-1462"},{"cve":"CVE-2022-20166","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2022-20166"}],"notes":[{"category":"general","text":"In various methods of kernel base drivers, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-182388481References: Upstream kernel","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2022-20166","url":"https://www.suse.com/security/cve/CVE-2022-20166"},{"category":"external","summary":"SUSE Bug 1200598 for CVE-2022-20166","url":"https://bugzilla.suse.com/1200598"},{"category":"external","summary":"SUSE Bug 1212284 for CVE-2022-20166","url":"https://bugzilla.suse.com/1212284"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":6.1,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-08-10T07:23:06Z","details":"moderate"}],"title":"CVE-2022-20166"},{"cve":"CVE-2022-21505","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2022-21505"}],"notes":[{"category":"general","text":"** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2022-21505","url":"https://www.suse.com/security/cve/CVE-2022-21505"},{"category":"external","summary":"SUSE Bug 1201458 for CVE-2022-21505","url":"https://bugzilla.suse.com/1201458"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":6.7,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-08-10T07:23:06Z","details":"moderate"}],"title":"CVE-2022-21505"},{"cve":"CVE-2022-2318","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2022-2318"}],"notes":[{"category":"general","text":"There are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of linux that allow attackers to crash linux kernel without any privileges.","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2022-2318","url":"https://www.suse.com/security/cve/CVE-2022-2318"},{"category":"external","summary":"SUSE Bug 1201251 for CVE-2022-2318","url":"https://bugzilla.suse.com/1201251"},{"category":"external","summary":"SUSE Bug 1212303 for CVE-2022-2318","url":"https://bugzilla.suse.com/1212303"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":5.5,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-08-10T07:23:06Z","details":"moderate"}],"title":"CVE-2022-2318"},{"cve":"CVE-2022-26365","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2022-26365"}],"notes":[{"category":"general","text":"Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2022-26365","url":"https://www.suse.com/security/cve/CVE-2022-26365"},{"category":"external","summary":"SUSE Bug 1200762 for CVE-2022-26365","url":"https://bugzilla.suse.com/1200762"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":6.6,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-08-10T07:23:06Z","details":"moderate"}],"title":"CVE-2022-26365"},{"cve":"CVE-2022-29581","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2022-29581"}],"notes":[{"category":"general","text":"Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects: Linux Kernel versions prior to 5.18; version 4.14 and later versions.","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2022-29581","url":"https://www.suse.com/security/cve/CVE-2022-29581"},{"category":"external","summary":"SUSE Bug 1199665 for CVE-2022-29581","url":"https://bugzilla.suse.com/1199665"},{"category":"external","summary":"SUSE Bug 1199695 for CVE-2022-29581","url":"https://bugzilla.suse.com/1199695"},{"category":"external","summary":"SUSE Bug 1205313 for CVE-2022-29581","url":"https://bugzilla.suse.com/1205313"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-08-10T07:23:06Z","details":"important"}],"title":"CVE-2022-29581"},{"cve":"CVE-2022-32250","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2022-32250"}],"notes":[{"category":"general","text":"net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privileges to root because an incorrect NFT_STATEFUL_EXPR check leads to a use-after-free.","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2022-32250","url":"https://www.suse.com/security/cve/CVE-2022-32250"},{"category":"external","summary":"SUSE Bug 1200015 for CVE-2022-32250","url":"https://bugzilla.suse.com/1200015"},{"category":"external","summary":"SUSE Bug 1200268 for CVE-2022-32250","url":"https://bugzilla.suse.com/1200268"},{"category":"external","summary":"SUSE Bug 1200494 for CVE-2022-32250","url":"https://bugzilla.suse.com/1200494"},{"category":"external","summary":"SUSE Bug 1202992 for CVE-2022-32250","url":"https://bugzilla.suse.com/1202992"},{"category":"external","summary":"SUSE Bug 1202993 for CVE-2022-32250","url":"https://bugzilla.suse.com/1202993"},{"category":"external","summary":"SUSE Bug 1203002 for CVE-2022-32250","url":"https://bugzilla.suse.com/1203002"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-08-10T07:23:06Z","details":"important"}],"title":"CVE-2022-32250"},{"cve":"CVE-2022-33740","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2022-33740"}],"notes":[{"category":"general","text":"Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2022-33740","url":"https://www.suse.com/security/cve/CVE-2022-33740"},{"category":"external","summary":"SUSE Bug 1200762 for CVE-2022-33740","url":"https://bugzilla.suse.com/1200762"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":6.6,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-08-10T07:23:06Z","details":"moderate"}],"title":"CVE-2022-33740"},{"cve":"CVE-2022-33741","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2022-33741"}],"notes":[{"category":"general","text":"Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2022-33741","url":"https://www.suse.com/security/cve/CVE-2022-33741"},{"category":"external","summary":"SUSE Bug 1200762 for CVE-2022-33741","url":"https://bugzilla.suse.com/1200762"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":6.6,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-08-10T07:23:06Z","details":"moderate"}],"title":"CVE-2022-33741"},{"cve":"CVE-2022-33742","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2022-33742"}],"notes":[{"category":"general","text":"Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2022-33742","url":"https://www.suse.com/security/cve/CVE-2022-33742"},{"category":"external","summary":"SUSE Bug 1200762 for CVE-2022-33742","url":"https://bugzilla.suse.com/1200762"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":6.6,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-08-10T07:23:06Z","details":"moderate"}],"title":"CVE-2022-33742"},{"cve":"CVE-2022-36946","ids":[{"system_name":"SUSE CVE Page","text":"https://www.suse.com/security/cve/CVE-2022-36946"}],"notes":[{"category":"general","text":"nfqnl_mangle in net/netfilter/nfnetlink_queue.c in the Linux kernel through 5.18.14 allows remote attackers to cause a denial of service (panic) because, in the case of an nf_queue verdict with a one-byte nfta_payload attribute, an skb_pull can encounter a negative skb->len.","title":"Vulnerability description"}],"product_status":{"fixed":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]},"references":[{"category":"external","summary":"CVE-2022-36946","url":"https://www.suse.com/security/cve/CVE-2022-36946"},{"category":"external","summary":"SUSE Bug 1201940 for CVE-2022-36946","url":"https://bugzilla.suse.com/1201940"},{"category":"external","summary":"SUSE Bug 1201941 for CVE-2022-36946","url":"https://bugzilla.suse.com/1201941"},{"category":"external","summary":"SUSE Bug 1202312 for CVE-2022-36946","url":"https://bugzilla.suse.com/1202312"},{"category":"external","summary":"SUSE Bug 1202874 for CVE-2022-36946","url":"https://bugzilla.suse.com/1202874"},{"category":"external","summary":"SUSE Bug 1203208 for CVE-2022-36946","url":"https://bugzilla.suse.com/1203208"},{"category":"external","summary":"SUSE Bug 1204132 for CVE-2022-36946","url":"https://bugzilla.suse.com/1204132"},{"category":"external","summary":"SUSE Bug 1205313 for CVE-2022-36946","url":"https://bugzilla.suse.com/1205313"},{"category":"external","summary":"SUSE Bug 1212310 for CVE-2022-36946","url":"https://bugzilla.suse.com/1212310"}],"remediations":[{"category":"vendor_fix","details":"To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n","product_ids":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"scores":[{"cvss_v3":{"baseScore":7.5,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"products":["SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","SUSE Linux Enterprise Module for Public Cloud 15 SP3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:cluster-md-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:dlm-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:gfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-extra-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-livepatch-devel-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-azure-optional-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kernel-devel-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-source-azure-5.3.18-150300.38.75.1.noarch","openSUSE Leap 15.3:kernel-syms-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:kselftests-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:ocfs2-kmp-azure-5.3.18-150300.38.75.1.x86_64","openSUSE Leap 15.3:reiserfs-kmp-azure-5.3.18-150300.38.75.1.x86_64"]}],"threats":[{"category":"impact","date":"2022-08-10T07:23:06Z","details":"important"}],"title":"CVE-2022-36946"}]}