Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:SUSE-SU-2024:3249-1
HistorySep 16, 2024 - 8:56 a.m.

Security update for the Linux Kernel

2024-09-1608:56:37
Google
osv.dev

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

JSON

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security bugfixes.

The following security bugs were fixed:

  • CVE-2024-44947: Initialize beyond-EOF page contents before setting uptodate (bsc#1229454).
  • CVE-2022-48919: Fix double free race when mount fails in cifs_get_root() (bsc#1229657).
  • CVE-2023-52854: Fix refcnt handling in padata_free_shell() (bsc#1225584).
  • CVE-2024-43883: Do not drop references before new references are gained (bsc#1229707).
  • CVE-2024-41062: Sync sock recv cb and release (bsc#1228576).
  • CVE-2024-43861: Fix memory leak for not ip packets (bsc#1229500).
  • CVE-2024-43882: Fixed ToCToU between perm check and set-uid/gid usage. (bsc#1229503)
  • CVE-2022-48912: Fix use-after-free in __nf_register_net_hook() (bsc#1229641)
  • CVE-2022-48872: Fix use-after-free race condition for maps (bsc#1229510).
  • CVE-2022-48873: Do not remove map on creater_process and device_release (bsc#1229512).
  • CVE-2024-42271: Fixed a use after free in iucv_sock_close(). (bsc#1229400)
  • CVE-2024-42232: Fixed a race between delayed_work() and ceph_monc_stop(). (bsc#1228959)
  • CVE-2024-40910: Fix refcount imbalance on inbound connections (bsc#1227832).
  • CVE-2022-48686: Fixed UAF when detecting digest errors (bsc#1223948).
  • CVE-2024-41009: bpf: Fix overrunning reservations in ringbuf (bsc#1228020).
  • CVE-2022-48791: Fix use-after-free for aborted TMF sas_task (bsc#1228002)

The following non-security bugs were fixed:

  • Bluetooth: L2CAP: Fix deadlock (git-fixes).
  • powerpc: Remove support for PowerPC 601 (Remove unused and malformed assembly causing build error).
  • sched/psi: use kernfs polling functions for PSI trigger polling (bsc#1209799 bsc#1225109).
  • scsi: pm80xx: Fix TMF task completion race condition (bsc#1228002).

References

Related

nessus 7
osv 25
redos 1
nvd 21
prion 1
cve 20
amazon 1
ubuntucve 27
redhatcve 26
vulnrichment 22
githubexploit 1
cvelist 20
debiancve 27
nessus
nessus
SUSE SLES15 Security Update : kernel (SUSE-SU-2024:3249-1)
2024-09-17 00:00:00
Amazon Linux 2 : kernel (ALASKERNEL-5.15-2024-043)
2024-05-20 00:00:00
Amazon Linux 2 : kernel (ALAS-2022-1768)
2022-04-06 00:00:00
osv
osv
Security update for the Linux Kernel
2024-09-12 12:12:38
Security update for the Linux Kernel
2024-09-12 13:26:12
CVE-2022-48926
2024-08-22 04:15:15
redos
redos
ROS-20240830-01
2024-08-30 00:00:00
nvd
nvd
CVE-2022-28748
2022-11-10 22:15:13
CVE-2022-48873
2024-08-21 07:15:04
CVE-2022-48917
2024-08-22 02:15:05
prion
prion
Design/Logic Flaw
2022-11-10 22:15:00
cve
cve
CVE-2022-28748
2022-11-10 22:15:13
CVE-2022-48917
2024-08-22 02:15:05
CVE-2022-48928
2024-08-22 04:15:15
amazon
amazon
Important: kernel
2022-04-04 23:21:00
ubuntucve
ubuntucve
CVE-2022-48934
2024-08-22 00:00:00
CVE-2022-48933
2024-08-22 00:00:00
CVE-2022-48917
2024-08-22 00:00:00
redhatcve
redhatcve
CVE-2022-48901
2024-08-22 15:15:13
CVE-2022-48933
2024-08-22 15:16:31
CVE-2024-44947
2024-09-03 06:41:44
vulnrichment
vulnrichment
CVE-2022-48926 usb: gadget: rndis: add spinlock for rndis response list
2024-08-22 03:31:18
CVE-2022-48933 netfilter: nf_tables: fix memory leak during stateful obj update
2024-08-22 03:31:27
CVE-2022-48917 ASoC: ops: Shift tested values in snd_soc_put_volsw() by +min
2024-08-22 01:32:20
githubexploit
githubexploit
Exploit for Improper Initialization in Linux Linux Kernel
2024-09-03 18:37:40
cvelist
cvelist
CVE-2024-44947 fuse: Initialize beyond-EOF page contents before setting uptodate
2024-09-02 17:36:15
CVE-2022-48872 misc: fastrpc: Fix use-after-free race condition for maps
2024-08-21 06:10:02
CVE-2022-48933 netfilter: nf_tables: fix memory leak during stateful obj update
2024-08-22 03:31:27
debiancve
debiancve
CVE-2022-48872
2024-08-21 07:15:04
CVE-2022-48912
2024-08-22 02:15:05
CVE-2024-44947
2024-09-02 18:15:36

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

JSON
Related for OSV:SUSE-SU-2024:3249-1
nessus7osv25redos1nvd21prion1cve20amazon1ubuntucve27redhatcve26vulnrichment22githubexploit1cvelist20debiancve27