openSUSE security advisory for Linux Kernel addressing multiple critical vulnerabilities.
# SPDX-FileCopyrightText: 2024 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only
if(description)
{
script_oid("1.3.6.1.4.1.25623.1.0.856847");
script_version("2024-12-20T15:39:18+0000");
script_cve_id("CVE-2023-52778", "CVE-2023-52920", "CVE-2023-52921", "CVE-2023-52922", "CVE-2024-26596", "CVE-2024-26703", "CVE-2024-26741", "CVE-2024-26782", "CVE-2024-26864", "CVE-2024-26953", "CVE-2024-27017", "CVE-2024-27407", "CVE-2024-35888", "CVE-2024-36000", "CVE-2024-36031", "CVE-2024-36484", "CVE-2024-36883", "CVE-2024-36886", "CVE-2024-36905", "CVE-2024-36920", "CVE-2024-36927", "CVE-2024-36954", "CVE-2024-36968", "CVE-2024-38589", "CVE-2024-40914", "CVE-2024-41023", "CVE-2024-42102", "CVE-2024-44995", "CVE-2024-46680", "CVE-2024-46681", "CVE-2024-46765", "CVE-2024-46788", "CVE-2024-46800", "CVE-2024-46828", "CVE-2024-46845", "CVE-2024-47666", "CVE-2024-47679", "CVE-2024-47701", "CVE-2024-47703", "CVE-2024-49868", "CVE-2024-49884", "CVE-2024-49888", "CVE-2024-49899", "CVE-2024-49905", "CVE-2024-49908", "CVE-2024-49911", "CVE-2024-49912", "CVE-2024-49921", "CVE-2024-49922", "CVE-2024-49923", "CVE-2024-49925", "CVE-2024-49933", "CVE-2024-49934", "CVE-2024-49944", "CVE-2024-49945", "CVE-2024-49952", "CVE-2024-49968", "CVE-2024-49975", "CVE-2024-49976", "CVE-2024-49983", "CVE-2024-49987", "CVE-2024-49989", "CVE-2024-50003", "CVE-2024-50004", "CVE-2024-50006", "CVE-2024-50009", "CVE-2024-50012", "CVE-2024-50014", "CVE-2024-50026", "CVE-2024-50067", "CVE-2024-50082", "CVE-2024-50084", "CVE-2024-50087", "CVE-2024-50088", "CVE-2024-50089", "CVE-2024-50093", "CVE-2024-50095", "CVE-2024-50096", "CVE-2024-50098", "CVE-2024-50099", "CVE-2024-50100", "CVE-2024-50101", "CVE-2024-50102", "CVE-2024-50103", "CVE-2024-50108", "CVE-2024-50110", "CVE-2024-50115", "CVE-2024-50116", "CVE-2024-50117", "CVE-2024-50121", "CVE-2024-50124", "CVE-2024-50125", "CVE-2024-50127", "CVE-2024-50128", "CVE-2024-50130", "CVE-2024-50131", "CVE-2024-50134", "CVE-2024-50135", "CVE-2024-50136", "CVE-2024-50138", "CVE-2024-50139", "CVE-2024-50141", "CVE-2024-50145", "CVE-2024-50146", "CVE-2024-50147", "CVE-2024-50148", "CVE-2024-50150", "CVE-2024-50153", "CVE-2024-50154", "CVE-2024-50155", "CVE-2024-50156", "CVE-2024-50157", "CVE-2024-50158", "CVE-2024-50159", "CVE-2024-50160", "CVE-2024-50166", "CVE-2024-50167", "CVE-2024-50169", "CVE-2024-50171", "CVE-2024-50172", "CVE-2024-50175", "CVE-2024-50176", "CVE-2024-50177", "CVE-2024-50179", "CVE-2024-50180", "CVE-2024-50181", "CVE-2024-50182", "CVE-2024-50183", "CVE-2024-50184", "CVE-2024-50186", "CVE-2024-50187", "CVE-2024-50188", "CVE-2024-50189", "CVE-2024-50192", "CVE-2024-50194", "CVE-2024-50195", "CVE-2024-50196", "CVE-2024-50198", "CVE-2024-50200", "CVE-2024-50201", "CVE-2024-50205", "CVE-2024-50208", "CVE-2024-50209", "CVE-2024-50210", "CVE-2024-50215", "CVE-2024-50216", "CVE-2024-50218", "CVE-2024-50221", "CVE-2024-50224", "CVE-2024-50225", "CVE-2024-50228", "CVE-2024-50229", "CVE-2024-50230", "CVE-2024-50231", "CVE-2024-50232", "CVE-2024-50233", "CVE-2024-50234", "CVE-2024-50235", "CVE-2024-50236", "CVE-2024-50237", "CVE-2024-50240", "CVE-2024-50245", "CVE-2024-50246", "CVE-2024-50248", "CVE-2024-50249", "CVE-2024-50250", "CVE-2024-50252", "CVE-2024-50255", "CVE-2024-50257", "CVE-2024-50261", "CVE-2024-50264", "CVE-2024-50265", "CVE-2024-50267", "CVE-2024-50268", "CVE-2024-50269", "CVE-2024-50271", "CVE-2024-50273", "CVE-2024-50274", "CVE-2024-50275", "CVE-2024-50276", "CVE-2024-50279", "CVE-2024-50282", "CVE-2024-50287", "CVE-2024-50289", "CVE-2024-50290", "CVE-2024-50292", "CVE-2024-50295", "CVE-2024-50296", "CVE-2024-50298", "CVE-2024-50301", "CVE-2024-50302", "CVE-2024-53042", "CVE-2024-53043", "CVE-2024-53045", "CVE-2024-53048", "CVE-2024-53051", "CVE-2024-53052", "CVE-2024-53055", "CVE-2024-53056", "CVE-2024-53058", "CVE-2024-53059", "CVE-2024-53060", "CVE-2024-53061", "CVE-2024-53063", "CVE-2024-53066", "CVE-2024-53068", "CVE-2024-53072", "CVE-2024-53074", "CVE-2024-53076", "CVE-2024-53079", "CVE-2024-53081", "CVE-2024-53082", "CVE-2024-53085", "CVE-2024-53088", "CVE-2024-53093", "CVE-2024-53094", "CVE-2024-53095", "CVE-2024-53096", "CVE-2024-53100", "CVE-2024-53101", "CVE-2024-53104", "CVE-2024-53106", "CVE-2024-53108", "CVE-2024-53110", "CVE-2024-53112", "CVE-2024-53114", "CVE-2024-53121", "CVE-2024-53138");
script_tag(name:"cvss_base", value:"6.8");
script_tag(name:"cvss_base_vector", value:"AV:L/AC:L/Au:S/C:C/I:C/A:C");
script_tag(name:"last_modification", value:"2024-12-20 15:39:18 +0000 (Fri, 20 Dec 2024)");
script_tag(name:"severity_vector", value:"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
script_tag(name:"severity_origin", value:"NVD");
script_tag(name:"severity_date", value:"2024-11-14 18:24:41 +0000 (Thu, 14 Nov 2024)");
script_tag(name:"creation_date", value:"2024-12-14 05:00:21 +0000 (Sat, 14 Dec 2024)");
script_name("openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2024:4316-1)");
script_category(ACT_GATHER_INFO);
script_copyright("Copyright (C) 2024 Greenbone AG");
script_family("SuSE Local Security Checks");
script_dependencies("gather-package-list.nasl");
script_mandatory_keys("ssh/login/suse", "ssh/login/rpms", re:"ssh/login/release=openSUSELeap15\.6");
script_xref(name:"Advisory-ID", value:"SUSE-SU-2024:4316-1");
script_xref(name:"URL", value:"https://lists.opensuse.org/archives/list/[email protected]/thread/S4I5Z6ALCJLHTP25U3HMJHEXN4DR2USM");
script_tag(name:"summary", value:"The remote host is missing an update for the 'the Linux Kernel'
package(s) announced via the SUSE-SU-2024:4316-1 advisory.");
script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");
script_tag(name:"insight", value:"The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various
security bugfixes.
The following security bugs were fixed:
* CVE-2023-52778: mptcp: deal with large GSO size (bsc#1224948).
* CVE-2023-52920: bpf: support non-r10 register spill/fill to/from stack in
precision tracking (bsc#1232823).
* CVE-2024-26596: net: dsa: fix netdev_priv() dereference before check on non-
DSA netdevice events (bsc#1220355).
* CVE-2024-26741: dccp/tcp: Unhash sk from ehash for tb2 alloc failure after
check_estalblished() (bsc#1222587).
* CVE-2024-26782: mptcp: fix double-free on socket dismantle (bsc#1222590).
* CVE-2024-26953: net: esp: fix bad handling of pages from page_pool
(bsc#1223656).
* CVE-2024-27017: netfilter: nft_set_pipapo: walk over current view on netlink
dump (bsc#1223733).
* CVE-2024-35888: erspan: make sure erspan_base_hdr is present in skb->head
(bsc#1224518).
* CVE-2024-36000: mm/hugetlb: fix missing hugetlb_lock for resv uncharge
(bsc#1224548).
* CVE-2024-36883: net: fix out-of-bounds access in ops_init (bsc#1225725).
* CVE-2024-36886: tipc: fix UAF in error path (bsc#1225730).
* CVE-2024-36905: tcp: defer shutdown(SEND_SHUTDOWN) for TCP_SYN_RECV sockets
(bsc#1225742).
* CVE-2024-36927: ipv4: Fix uninit-value access in __ip_make_skb()
(bsc#1225813).
* CVE-2024-36954: tipc: fix a possible memleak in tipc_buf_append
(bsc#1225764).
* CVE-2024-36968: Bluetooth: L2CAP: Fix div-by-zero in l2cap_le_flowctl_init()
(bsc#1226130).
* CVE-2024-38589: netrom: fix possible dead-lock in nr_rt_ioctl()
(bsc#1226748).
* CVE-2024-40914: mm/huge_memory: do not unpoison huge_zero_folio
(bsc#1227842).
* CVE-2024-41023: sched/deadline: Fix task_struct reference leak
(bsc#1228430).
* CVE-2024-42102: Revert 'mm/writeback: fix possible divide-by-zero in
wb_dirty_limits(), again' (bsc#1233132).
* CVE-2024-44995: net: hns3: fix a deadlock problem when config TC during
resetting (bsc#1230231).
* CVE-2024-46680: Bluetooth: btnxpuart: Fix random crash seen while removing
driver (bsc#1230557).
* CVE-2024-46681: pktgen: use cpus_read_lock() in pg_net_init() (bsc#1230558).
* CVE-2024-46765: ice: protect XDP configuration with a mutex (bsc#1230807).
* CVE-2024-46800: sch/netem: fix use after free in netem_dequeue
(bsc#1230827).
* CVE-2024-47679: vfs: fix race between evice_inodes() and find_inode() input()
(bsc#1231930).
* CVE-2024-47701: ext4: avoid OOB when system.data ...
Description truncated. Please see the references for more information.");
script_tag(name:"affected", value:"'the Linux Kernel' package(s) on openSUSE Leap 15.6.");
script_tag(name:"solution", value:"Please install the updated package(s).");
script_tag(name:"solution_type", value:"VendorFix");
script_tag(name:"qod_type", value:"package");
exit(0);
}
include("revisions-lib.inc");
include("pkg-lib-rpm.inc");
release = rpm_get_ssh_release();
if(!release)
exit(0);
res = "";
report = "";
if(release == "openSUSELeap15.6") {
if(!isnull(res = isrpmvuln(pkg:"kselftests-kmp-azure-debuginfo", rpm:"kselftests-kmp-azure-debuginfo~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"gfs2-kmp-azure", rpm:"gfs2-kmp-azure~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"reiserfs-kmp-azure-debuginfo", rpm:"reiserfs-kmp-azure-debuginfo~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-azure-extra-debuginfo", rpm:"kernel-azure-extra-debuginfo~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-azure-debuginfo", rpm:"kernel-azure-debuginfo~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kselftests-kmp-azure", rpm:"kselftests-kmp-azure~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-syms-azure", rpm:"kernel-syms-azure~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-azure-optional", rpm:"kernel-azure-optional~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"gfs2-kmp-azure-debuginfo", rpm:"gfs2-kmp-azure-debuginfo~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ocfs2-kmp-azure", rpm:"ocfs2-kmp-azure~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"ocfs2-kmp-azure-debuginfo", rpm:"ocfs2-kmp-azure-debuginfo~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-azure-devel", rpm:"kernel-azure-devel~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-azure-optional-debuginfo", rpm:"kernel-azure-optional-debuginfo~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"reiserfs-kmp-azure", rpm:"reiserfs-kmp-azure~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"cluster-md-kmp-azure", rpm:"cluster-md-kmp-azure~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-azure-debugsource", rpm:"kernel-azure-debugsource~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"dlm-kmp-azure", rpm:"dlm-kmp-azure~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"dlm-kmp-azure-debuginfo", rpm:"dlm-kmp-azure-debuginfo~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-azure-extra", rpm:"kernel-azure-extra~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"cluster-md-kmp-azure-debuginfo", rpm:"cluster-md-kmp-azure-debuginfo~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-azure-devel-debuginfo", rpm:"kernel-azure-devel-debuginfo~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-azure", rpm:"kernel-azure~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-azure-vdso", rpm:"kernel-azure-vdso~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-azure-vdso-debuginfo", rpm:"kernel-azure-vdso-debuginfo~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-devel-azure", rpm:"kernel-devel-azure~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(!isnull(res = isrpmvuln(pkg:"kernel-source-azure", rpm:"kernel-source-azure~6.4.0~150600.8.20.1", rls:"openSUSELeap15.6"))) {
report += res;
}
if(report != "") {
security_message(data:report);
} else if(__pkg_match) {
exit(99);
}
exit(0);
}
exit(0);
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo