Linux · SUSE Linux Enterprise · Security advisory · August 7, 2024
SUSE-SU-2024:2802-1: Security update for 13 packages
SUSE-SU-2024:2802-1, released August 7, 2024, fixes 118 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: Urgent.
Urgent
CVEs closed
118
2 rated Critical
Exploited
0
None reported
Highest CVSS
9.6
Base score, 0 to 10
Highest EPSS
0.0097
62nd percentile
Priority of the 118 CVEs
Patch now 0
Urgent 2
High 43
Routine 73
Fixed package versions
| Product | Release | Fixed in |
|---|---|---|
| dtb-aarch64 | opensuse-leap 15.6 | 6.4.0-150600.23.17.1 |
| kernel-64kb | opensuse-leap 15.6 | 6.4.0-150600.23.17.1 |
| kernel-64kb | sles 15.6 | 6.4.0-150600.23.17.1 |
| kernel-debug | opensuse-leap 15.6 | 6.4.0-150600.23.17.1 |
| kernel-default | opensuse-leap 15.6 | 6.4.0-150600.23.17.1 |
| kernel-default | sles 15.6 | 6.4.0-150600.23.17.1 |
| kernel-default-base | opensuse-leap 15.6 | 6.4.0-150600.23.17.1.150600.12.6.2 |
| kernel-default-base | sles 15.6 | 6.4.0-150600.23.17.1.150600.12.6.2 |
| kernel-docs | opensuse-leap 15.6 | 6.4.0-150600.23.17.3 |
| kernel-docs | sles 15.6 | 6.4.0-150600.23.17.3 |
| kernel-kvmsmall | opensuse-leap 15.6 | 6.4.0-150600.23.17.1 |
| kernel-livepatch-SLE15-SP6_Update_3 | sles 15.6 | 1-150600.13.3.1 |
| kernel-obs-build | opensuse-leap 15.6 | 6.4.0-150600.23.17.1 |
| kernel-obs-build | sles 15.6 | 6.4.0-150600.23.17.1 |
| kernel-obs-qa | opensuse-leap 15.6 | 6.4.0-150600.23.17.1 |
| kernel-source | opensuse-leap 15.6 | 6.4.0-150600.23.17.1 |
| kernel-source | sles 15.6 | 6.4.0-150600.23.17.1 |
| kernel-syms | opensuse-leap 15.6 | 6.4.0-150600.23.17.1 |
| kernel-syms | sles 15.6 | 6.4.0-150600.23.17.1 |
| kernel-zfcpdump | opensuse-leap 15.6 | 6.4.0-150600.23.17.1 |
| kernel-zfcpdump | sles 15.6 | 6.4.0-150600.23.17.1 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| Urgent | CVE-2024-36912 | linux: In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Track decrypted status in vm... | 9.6 | 0.0097 | None reported |
| Urgent | CVE-2024-36913 | linux: In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Leak pages if set_memory_enc... | 9.3 | 0.0066 | None reported |
| High | CVE-2024-38558 | dtb-aarch64: net: openvswitch: fix overwriting ct original tuple for ICMPv6 (bsc#1226783). | 7.8 | 0.0082 | None reported |
| High | CVE-2024-35853 | bpftool: Important: kernel security and bug fix update | 7.0 | 0.0073 | None reported |
| High | CVE-2024-26665 | dtb-aarch64: tunnels: fix out of bounds access when building IPv6 PMTU error (bsc#1222328). | 7.8 | 0.0068 | None reported |
| High | CVE-2023-52775 | dtb-aarch64: net/smc: avoid data corruption caused by decline (bsc#1225088). | 7.8 | 0.0067 | None reported |
| High | CVE-2024-26826 | kernel-zfcpdump-modules-extra: kernel: mptcp: fix data re-injection from stale subflow | 7.0 | 0.0065 | None reported |
| High | CVE-2024-35854 | linux: In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrum_acl_tcam: Fix possible use-after... | 7.8 | 0.0058 | None reported |
| High | CVE-2023-51780 | dtb-aarch64: Security update for the Linux Kernel | 8.0 | 0.0051 | None reported |
| High | CVE-2024-36922 | wifi: iwlwifi: read txq->read_ptr under lock | 7.8 | 0.0035 | None reported |
| High | CVE-2024-40901 | dtb-aarch64: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762). | 7.8 | 0.0031 | None reported |
| High | CVE-2024-39502 | kernel-tools: RHSA-2024:5101: kernel security update (Important) | 7.8 | 0.0031 | None reported |
| High | CVE-2024-39494 | dtb-aarch64: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716). | 7.8 | 0.0031 | None reported |
| High | CVE-2024-40906 | dtb-aarch64: net/mlx5: Always stop health timer during driver removal (bsc#1227763). | 7.8 | 0.0031 | None reported |
| High | CVE-2024-39496 | dtb-aarch64: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719). | 7.8 | 0.0029 | None reported |
| High | CVE-2024-36902 | kernel-64kb: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (bsc#1225719). | 7.8 | 0.0029 | None reported |
| High | CVE-2024-36974 | dtb-aarch64: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1226519). | 7.8 | 0.0028 | None reported |
| High | CVE-2024-40998 | dtb-aarch64: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super() (bsc#1227866). | 7.8 | 0.0027 | None reported |
| High | CVE-2024-40960 | dtb-aarch64: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813). | 7.8 | 0.0027 | None reported |
| High | CVE-2024-27065 | kernel-rt: RHSA-2024:5102: kernel-rt security update (Important) | 7.8 | 0.0026 | None reported |
| High | CVE-2024-36901 | kernel-livepatch-SLE15-SP6-RT_Update_1: ipv6: prevent NULL dereference in ip6_output() (bsc#1225711) | 7.8 | 0.0026 | None reported |
| High | CVE-2024-40935 | dtb-aarch64: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797). | 7.8 | 0.0026 | None reported |
| High | CVE-2024-40940 | kernel-zfcpdump: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800). | 7.8 | 0.0026 | None reported |
| High | CVE-2024-41090 | kernel-uek: ELSA-2024-12546: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0026 | None reported |
| High | CVE-2024-41091 | kernel-uek: ELSA-2024-12546: Unbreakable Enterprise kernel security update (IMPORTANT) | 7.8 | 0.0026 | None reported |
Showing 1 to 25 of 118
1Next
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.