The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2785-1 advisory.

    Update to version 20240728:

    * amdgpu: update DMCUB to v0.0.227.0 for DCN35 and DCN351
    * Revert 'iwlwifi: update ty/So/Ma firmwares for core89-58 release'
    * linux-firmware: update firmware for MT7922 WiFi device
    * linux-firmware: update firmware for MT7921 WiFi device
    * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
    * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
    * iwlwifi: add gl FW for core89-58 release
    * iwlwifi: update ty/So/Ma firmwares for core89-58 release
    * iwlwifi: update cc/Qu/QuZ firmwares for core89-58 release
    * mediatek: Update mt8195 SOF firmware and sof-tplg
    * ASoC: tas2781: fix the license issue for tas781 firmware
    * rtl_bt: Update RTL8852B BT USB FW to 0x048F_4008
    * i915: Update Xe2LPD DMC to v2.21
    * qcom: move signed x1e80100 signed firmware to the SoC subdir
    * qcom: add video firmware file for vpu-3.0
    * intel: avs: Add topology file for I2S Analog Devices 4567
    * intel: avs: Add topology file for I2S Nuvoton 8825
    * intel: avs: Add topology file for I2S Maxim 98927
    * intel: avs: Add topology file for I2S Maxim 98373
    * intel: avs: Add topology file for I2S Maxim 98357a
    * intel: avs: Add topology file for I2S Dialog 7219
    * intel: avs: Add topology file for I2S Realtek 5663
    * intel: avs: Add topology file for I2S Realtek 5640
    * intel: avs: Add topology file for I2S Realtek 5514
    * intel: avs: Add topology file for I2S Realtek 298
    * intel: avs: Add topology file for I2S Realtek 286
    * intel: avs: Add topology file for I2S Realtek 274
    * intel: avs: Add topology file for Digital Microphone Array
    * intel: avs: Add topology file for HDMI codecs
    * intel: avs: Add topology file for HDAudio codecs
    * intel: avs: Update AudioDSP base firmware for APL-based platforms

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2575-1 advisory.

    - CVE-2023-38417: Fixed improper input validation for some Intel(R) PROSet/Wireless WiFi software for     linux before version 23.20 (bsc#1225600)
    - CVE-2023-47210: Fixed improper input validation for some Intel(R) PROSet/Wireless WiFi software before     version 23.20 (bsc#1225601)

    - Update to version 20240712 (git commit ed874ed83cac):
      * amdgpu: update DMCUB to v0.0.225.0 for Various AMDGPU Asics
      * qcom: add gpu firmwares for x1e80100 chipset (bsc#1219458)
      * linux-firmware: add firmware for qat_402xx devices
      * amdgpu: update raven firmware
      * amdgpu: update SMU 13.0.10 firmware
      * amdgpu: update SDMA 6.0.3 firmware
      * amdgpu: update PSP 13.0.10 firmware
      * amdgpu: update GC 11.0.3 firmware
      * amdgpu: update vega20 firmware
      * amdgpu: update PSP 13.0.5 firmware
      * amdgpu: update PSP 13.0.8 firmware
      * amdgpu: update vega12 firmware
      * amdgpu: update vega10 firmware
      * amdgpu: update VCN 4.0.0 firmware
      * amdgpu: update SDMA 6.0.0 firmware
      * amdgpu: update PSP 13.0.0 firmware
      * amdgpu: update GC 11.0.0 firmware
      * amdgpu: update picasso firmware
      * amdgpu: update beige goby firmware
      * amdgpu: update vangogh firmware
      * amdgpu: update dimgrey cavefish firmware
      * amdgpu: update navy flounder firmware
      * amdgpu: update PSP 13.0.11 firmware
      * amdgpu: update GC 11.0.4 firmware
      * amdgpu: update green sardine firmware
      * amdgpu: update VCN 4.0.2 firmware
      * amdgpu: update SDMA 6.0.1 firmware
      * amdgpu: update PSP 13.0.4 firmware
      * amdgpu: update GC 11.0.1 firmware
      * amdgpu: update sienna cichlid firmware
      * amdgpu: update VPE 6.1.1 firmware
      * amdgpu: update VCN 4.0.6 firmware
      * amdgpu: update SDMA 6.1.1 firmware
      * amdgpu: update PSP 14.0.1 firmware
      * amdgpu: update GC 11.5.1 firmware
      * amdgpu: update VCN 4.0.5 firmware
      * amdgpu: update SDMA 6.1.0 firmware
      * amdgpu: update PSP 14.0.0 firmware
      * amdgpu: update GC 11.5.0 firmware
      * amdgpu: update navi14 firmware
      * amdgpu: update renoir firmware
      * amdgpu: update navi12 firmware
      * amdgpu: update PSP 13.0.6 firmware
      * amdgpu: update GC 9.4.3 firmware
      * amdgpu: update yellow carp firmware
      * amdgpu: update VCN 4.0.4 firmware
      * amdgpu: update SMU 13.0.7 firmware
      * amdgpu: update SDMA 6.0.2 firmware
      * amdgpu: update PSP 13.0.7 firmware
      * amdgpu: update GC 11.0.2 firmware
      * amdgpu: update navi10 firmware
      * amdgpu: update raven2 firmware
      * amdgpu: update aldebaran firmware
      * linux-firmware: Update AMD cpu microcode
      * linux-firmware: Add ISH firmware file for Intel Lunar Lake platform
      * amdgpu: update DMCUB to v0.0.224.0 for Various AMDGPU Asics
      * cirrus: cs35l41: Update various firmware for ASUS laptops using CS35L41
      * amdgpu: Update ISP FW for isp v4.1.1

    - Update to version 20240622 (git commit 7d931f8afa51):
      * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.2.0
      * qcom: Add AIC100 firmware files

    - Update to version 20240618 (git commit 7d931f8afa51):
      * amlogic: Update bluetooth firmware binary
      * linux-firmware: Update firmware file for Intel BlazarU core
      * linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
      * linux-firmware: Update firmware file for Intel Bluetooth Solar core
      * linux-firmware: Update firmware file for Intel Bluetooth Pulsar core
      * rtl_bt: Update RTL8822C BT UART firmware to 0xB5D6_6DCB
      * rtl_bt: Update RTL8822C BT USB firmware to 0xAED6_6DCB
      * amdgpu: update DMCUB to v0.0.222.0 for DCN314
      * iwlwifi: add ty/So/Ma firmwares for core88-87 release
      * iwlwifi: update cc/Qu/QuZ firmwares for core88-87 release
      * linux-firmware: add new cc33xx firmware for cc33xx chips
      * cirrus: cs35l56: Update firmware for Cirrus CS35L56 for ASUS UM5606 laptop
      * cirrus: cs35l56: Update firmware for Cirrus CS35L56 for various ASUS laptops
      * linux-firmware: Add firmware for Lenovo Thinkbooks
      * amdgpu: update yellow carp firmware
      * amdgpu: update VCN 4.0.4 firmware
      * amdgpu: update SDMA 6.0.2 firmware
      * amdgpu: update PSP 13.0.7 firmware
      * amdgpu: update GC 11.0.2 firmware
      * amdgpu: update navi10 firmware
      * amdgpu: update raven2 firmware
      * amdgpu: update raven firmware
      * amdgpu: update SMU 13.0.10 firmware
      * amdgpu: update SDMA 6.0.3 firmware
      * amdgpu: update PSP 13.0.10 firmware
      * amdgpu: update GC 11.0.3 firmware
      * amdgpu: update VCN 3.1.2 firmware
      * amdgpu: update PSP 13.0.5 firmware
      * amdgpu: update psp 13.0.8 firmware
      * amdgpu: update vega20 firmware
      * amdgpu: update vega12 firmware
      * amdgpu: update vega10 firmware
      * amdgpu: update VCN 4.0.0 firmware
      * amdgpu: update smu 13.0.0 firmware
      * amdgpu: update SDMA 6.0.0 firmware
      * amdgpu: update PSP 13.0.0 firmware
      * amdgpu: update GC 11.0.0 firmware
      * amdgpu: update picasso firmware
      * amdgpu: update beige goby firmware
      * amdgpu: update vangogh firmware
      * amdgpu: update dimgrey cavefish firmware
      * amdgpu: update green sardine firmware
      * amdgpu: update navy flounder firmware
      * amdgpu: update PSP 13.0.11 firmware
      * amdgpu: update GC 11.0.4 firmware
      * amdgpu: update VCN 4.0.2 firmware
      * amdgpu: update SDMA 6.0.1 firmware
      * amdgpu: update PSP 13.0.4 firmware
      * amdgpu: update GC 11.0.1 firmware
      * amdgpu: update sienna cichlid firmware
      * amdgpu: update VCN 4.0.5 firmware
      * amdgpu: update PSP 14.0.0 firmware
      * amdgpu: update GC 11.5.0 firmware
      * amdgpu: update navi14 firmware
      * amdgpu: update SMU 13.0.6 firmware
      * amdgpu: update PSP 13.0.6 firmware
      * amdgpu: update GC 9.4.3 firmware
      * amdgpu: update renoir firmware
      * amdgpu: update navi12 firmware
      * amdgpu: update aldebaran firmware
      * amdgpu: add support for PSP 14.0.1
      * amdgpu: add support for VPE 6.1.1
      * amdgpu: add support for VCN 4.0.6
      * amdgpu: add support for SDMA 6.1.1
      * amdgpu: add support for GC 11.5.1
      * amdgpu: Add support for DCN 3.5.1
      * QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00639
      * cnm: update chips&media wave521c firmware.
      * linux-firmware: Add ordinary firmware for RTL8821AU device

    - Update to version 20240519 (git commit aae8224390e2):
      * amdgpu: add new ISP 4.1.1 firmware

    - Update to version 20240510 (git commit 7c2303328d8e):
      * linux-firmware: Amphion: Update vpu firmware
      * linux-firmware: Update firmware file for Intel BlazarU core
      * linux-firmware: Update firmware file for Intel Bluetooth Magnetor core
      * linux-firmware: Update firmware file for Intel Bluetooth Solar core
      * linux-firmware: Update firmware file for Intel Bluetooth Solar core
      * i915: Add BMG DMC v2.06
      * linux-firmware: Add CS35L41 HDA Firmware for Asus HN7306
      * linux-firmware: Update firmware tuning for HP Consumer Laptop
      * amdgpu: DMCUB updates for various AMDGPU ASICs
      * rtl_bt: Update RTL8822C BT UART firmware to 0x0FD6_407B
      * rtl_bt: Update RTL8822C BT USB firmware to 0x0ED6_407B
      * cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various ASUS laptops
      * linux-firmware: Add firmware and tuning for Lenovo Y770S

    - Update to version 20240426 (git commit 2398d264f953):
      * amdgpu: DMCUB updates for various AMDGPU ASICs
      * linux-firmware: Add firmware for Cirrus CS35L56 for various HP laptops
      * i915: Update Xe2LPD DMC to v2.20
      * linux-firmware: Remove Calibration Firmware and Tuning for CS35L41
      * linux-firmware: Add firmware for Lenovo Thinkbook 13X
      * ASoC: tas2781: Add dsp firmware for Thinkpad ICE-1 laptop
      * amdgpu: add DMCUB 3.5 firmware
      * amdgpu: add VPE 6.1.0 firmware
      * amdgpu: add VCN 4.0.5 firmware
      * amdgpu: add UMSCH 4.0.0 firmware
      * amdgpu: add SDMA 6.1.0 firmware
      * amdgpu: add PSP 14.0.0  firmware
      * amdgpu: add GC 11.5.0 firmware
      * amdgpu: update license date

    - Update to version 20240419 (git commit 7eab37522984):
      * Montage: update firmware for Mont-TSSE
      * linux-firmware: Add tuning parameter configs for CS35L41 Firmware
      * linux-firmware: Fix firmware names for Laptop SSID 104316a3
      * linux-firmware: Add CS35L41 HDA Firmware for Lenovo Legion Slim 7 16ARHA7
      * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
      * linux-firmware: update firmware for MT7922 WiFi device
      * iwlwifi: add gl FW for core87-44 release
      * iwlwifi: add ty/So/Ma firmwares for core87-44 release
      * iwlwifi: update cc/Qu/QuZ firmwares for core87-44 release
      * nvidia: Update Tegra210 XUSB firmware to v50.29
      * amdgpu: update beige goby firmware
      * amdgpu: update dimgrey cavefish firmware
      * amdgpu: update psp 13.0.11 firmware
      * amdgpu: update gc 11.0.4 firmware
      * amdgpu: update navy flounder firmware
      * amdgpu: update renoir firmware
      * amdgpu: update vcn 4.0.2 firmware
      * amdgpu: update sdma 6.0.1 firmware
      * amdgpu: update psp 13.0.4 firmware
      * amdgpu: update gc 11.0.1 firmware
      * amdgpu: update sienna cichlid firmware
      * amdgpu: update vega20 firmware
      * amdgpu: update yellow carp firmware
      * amdgpu: update green sardine firmware
      * amdgpu: update vega12 firmware
      * amdgpu: update raven2 firmware
      * amdgpu: update vcn 4.0.4 firmware
      * amdgpu: update smu 13.0.7 firmware
      * amdgpu: update sdma 6.0.2 firmware
      * amdgpu: update ipsp 13.0.7 firmware
      * amdgpu: update gc 11.0.2 firmware
      * amdgpu: update vega10 firmware
      * amdgpu: update raven firmware
      * amdgpu: update navi14 firmware
      * amdgpu: update smu 13.0.10 firmware
      * amdgpu: update sdma 6.0.3 firmware
      * amdgpu: update psp 13.0.10 firmware
      * amdgpu: update gc 11.0.3 firmware
      * amdgpu: update vcn 3.1.2 firmware
      * amdgpu: update psp 13.0.5 firmware
      * amdgpu: update gc 10.3.6 firmware
      * amdgpu: update navi12 firmware
      * amdgpu: update arcturus firmware
      * amdgpu: update vangogh firmware
      * amdgpu: update navi10 firmware
      * amdgpu: update vcn 4.0.3 firmware
      * amdgpu: update smu 13.0.6 firmware
      * amdgpu: update psp 13.0.6 firmware
      * amdgpu: update gc 9.4.3 firmware
      * amdgpu: update vcn 4.0.0 firmware
      * amdgpu: update smu 13.0.0 firmware
      * amdgpu: update sdma 6.0.0 firmware
      * amdgpu: update psp 13.0.0 firmware
      * amdgpu: update gc 11.0.0 firmware
      * amdgpu: update  firmware
      * amdgpu: update aldebaran firmware
      * amdgpu: update psp 13.0.8 firmware
      * amdgpu: update gc 10.3.7 firmware
      * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.9
      * ath10k: WCN3990: hw1.0: add qcm2290 firmware API file
      * ath10k: WCN3990: hw1.0: move firmware back from qcom/ location
      * i915: Add DG2 HuC 7.10.15
      * amdgpu: DMCUB updates for various AMDGPU ASICs
      * linux-firmware: update firmware for en8811h 2.5G ethernet phy
      * rtw89: 8852c: update fw to v0.27.56.14
      * rtw89: 8922a: add firmware v0.35.18.0
      * rtw88: Add RTL8703B firmware v11.0.0

    - Drop duplicated WHENCE from kernel-firmware-* subpackages (bsc#1222319)

    - Update to version 20240322 (git commit 9a6a0cc195c1):
      * mekdiatek: Update mt8186 SOF firmware to v2.0.1
      * linux-firmware: Add firmware for Cirrus CS35L56 for Dell laptops
      * Montage: update firmware for Mont-TSSE
      * WHENCE: Link the Raspberry Pi CM4 and 5B to the 4B
      * Intel Bluetooth: Update firmware file for Intel Bluetooth BE200
      * Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX101
      * Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX203
      * Intel Bluetooth: Update firmware file for Magnetor Intel Bluetooth AX211
      * Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX101
      * Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX101
      * Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX203
      * Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX203
      * Intel Bluetooth: Update firmware file for SolarF Intel Bluetooth AX211
      * Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX211
      * Intel Bluetooth: Update firmware file for Solar Intel Bluetooth AX210
      * Intel Bluetooth: Update firmware file for Intel Bluetooth AX200
      * Intel Bluetooth: Update firmware file for Intel Bluetooth AX201
      * Intel Bluetooth: Update firmware file for Intel Bluetooth 9560
      * Intel Bluetooth: Update firmware file for Intel Bluetooth 9260
      * amdgpu: DMCUB updates for various AMDGPU ASICs
      * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.8
      * imx: sdma: update firmware to v3.6/v4.6

    - Update to version 20240312 (git commit 4a404b5bfdb9):
      * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
      * iwlwifi: update 9000-family firmwares to core85-89
      * rtl_bt: Update RTL8852A BT USB firmware to 0xD9D6_17DA
      * linux-firmware: update firmware for MT7921 WiFi device
      * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
      * linux-firmware: update firmware for MT7922 WiFi device
      * linux-firmware: Add CS35L41 HDA Firmware for Lenovo Thinkbook 16P Laptops

    - Update to version 20240229 (git commit 977332782302):
      * amdgpu: Update VCN firmware binaries
      * Intel IPU2: Add firmware files
      * brcm: Add nvram for the Acer Iconia One 7 B1-750 tablet
      * i915: Add Xe2LPD DMC v2.18
      * i915: Update MTL DMC v2.21

    - Update to version 20240220 (git commit 73b4429fae36):
      * linux-firmware: update firmware for en8811h 2.5G ethernet phy
      * linux-firmware: add firmware for MT7996
      * xe: First GuC release for LNL and Xe
      * i915: Add GuC v70.20.0 for ADL-P, DG1, DG2, MTL and TGL
      * linux-firmware: Add CS35L41 firmware for Lenovo Legion 7i gen7 laptop (16IAX7)
      * brcm: Add nvram for the Asus Memo Pad 7 ME176C tablet
      * ice: update ice DDP package to 1.3.36.0
      * Intel IPU3 ImgU: Move firmware file under intel/ipu
      * Intel IPU6: Move firmware binaries under ipu/
      * check_whence: Add a check for duplicate link entries
      * WHENCE: Clean up section separators
      * linux-firmware: Add CS35L41 firmware for additional ASUS Zenbook 2023 models
      * panthor: Add initial firmware for Gen10 Arm Mali GPUs
      * amdgpu: DMCUB Updates for DCN321: 7.0.38.0
      * amdgpu: DMCUB updates for Yellow Carp: 4.0.68.0
      * qcom: update venus firmware file for v5.4
      * Montage: add firmware for Mont-TSSE
      * amdgpu: update DMCUB to v0.0.203.0 for DCN314 and DCN32
      * linux-firmware: Remove 2 HP laptops using CS35L41 Audio Firmware
      * linux-firmware: Fix filenames for some CS35L41 firmwares for HP

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2802-1 advisory.

    The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601, bsc#1225600).
    - CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
    - CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
    - CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
    - CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
    - CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
    - CVE-2024-26633: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (bsc#1221647).
    - CVE-2024-26635: llc: Drop support for ETH_P_TR_802_2 (bsc#1221656).
    - CVE-2024-26636: llc: make llc_ui_sendmsg() more robust against bonding changes (bsc#1221659).
    - CVE-2024-26641: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (bsc#1221654).
    - CVE-2024-26663: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (bsc#1222326).
    - CVE-2024-26665: tunnels: fix out of bounds access when building IPv6 PMTU error (bsc#1222328).
    - CVE-2024-26691: KVM: arm64: Fix circular locking dependency (bsc#1222463).
    - CVE-2024-26734: devlink: fix possible use-after-free and memory leaks in devlink_init() (bsc#1222438).
    - CVE-2024-26785: iommufd: Fix protection fault in iommufd_test_syz_conv_iova (bsc#1222779).
    - CVE-2024-26826: mptcp: fix data re-injection from stale subflow (bsc#1223010).
    - CVE-2024-26863: hsr: Fix uninit-value access in hsr_get_node() (bsc#1223021).
    - CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
    - CVE-2024-27012: netfilter: nf_tables: restore set elements when delete set fails (bsc#1223804).
    - CVE-2024-27015: netfilter: flowtable: incorrect pppoe tuple (bsc#1223806).
    - CVE-2024-27016: netfilter: flowtable: validate pppoe header (bsc#1223807).
    - CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
    - CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
    - CVE-2024-27025: nbd: null check for nla_nest_start (bsc#1223778)
    - CVE-2024-27064: netfilter: nf_tables: Fix a memory leak in nf_tables_updchain (bsc#1223740).
    - CVE-2024-27065: netfilter: nf_tables: do not compare internal table flags on updates (bsc#1223836).
    - CVE-2024-27402: phonet/pep: fix racy skb_queue_empty() use (bsc#1224414).
    - CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
    - CVE-2024-35805: dm snapshot: fix lockup in dm_exception_table_exit (bsc#1224743).
    - CVE-2024-35853: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (bsc#1224604).
    - CVE-2024-35854: Fixed possible use-after-free during rehash (bsc#1224636).
    - CVE-2024-35890: gro: fix ownership transfer (bsc#1224516).
    - CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
    - CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
    - CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
    - CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
    - CVE-2024-35942: pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain (bsc#1224589).
    - CVE-2024-36003: ice: fix LAG and VF lock dependency in ice_reset_vf() (bsc#1224544).
    - CVE-2024-36004: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (bsc#1224545)
    - CVE-2024-36901: ipv6: prevent NULL dereference in ip6_output() (bsc#1225711)
    - CVE-2024-36902: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (bsc#1225719).
    - CVE-2024-36909: Drivers: hv: vmbus: Do not free ring buffers that couldn't be re-encrypted     (bsc#1225744).
    - CVE-2024-36910: uio_hv_generic: Do not free decrypted memory (bsc#1225717).
    - CVE-2024-36911: hv_netvsc: Do not free decrypted memory (bsc#1225745).
    - CVE-2024-36912: Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl (bsc#1225752).
    - CVE-2024-36913: Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails (bsc#1225753).
    - CVE-2024-36914: drm/amd/display: Skip on writeback when it's not applicable (bsc#1225757).
    - CVE-2024-36946: phonet: fix rtm_phonet_notify() skb allocation (bsc#1225851).
    - CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1226519).
    - CVE-2024-38558: net: openvswitch: fix overwriting ct original tuple for ICMPv6 (bsc#1226783).
    - CVE-2024-38586: r8169: Fix possible ring buffer corruption on fragmented Tx packets (bsc#1226750).
    - CVE-2024-38598: md: fix resync softlockup when bitmap size is less than array size (bsc#1226757).
    - CVE-2024-38604: block: refine the EOF check in blkdev_iomap_begin (bsc#1226866).
    - CVE-2024-38659: enic: Validate length of nl attributes in enic_set_vf_port (bsc#1226883).
    - CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
    - CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103.
    - CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
    - CVE-2024-39474: mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL (bsc#1227434).
    - CVE-2024-39482: bcache: fix variable length array abuse in btree_iter (bsc#1227447).
    - CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
    - CVE-2024-39490: ipv6: sr: fix missing sk_buff release in seg6_input_core (bsc#1227626).
    - CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
    - CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
    - CVE-2024-39498: drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2 (bsc#1227723)
    - CVE-2024-39502: ionic: fix use after netif_napi_del() (bsc#1227755).
    - CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
    - CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
    - CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
    - CVE-2024-40906: net/mlx5: Always stop health timer during driver removal (bsc#1227763).
    - CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
    - CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send()     (bsc#1227779).
    - CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
    - CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
    - CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
    - CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
    - CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
    - CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
    - CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
    - CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
    - CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801).
    - CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
    - CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
    - CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
    - CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
    - CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
    - CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
    - CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
    - CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()     (bsc#1227866).
    - CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
    - CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
    - CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
    - CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
    - CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
    - CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
    - CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2896-1 advisory.

    The SUSE Linux Enterprise 15 SP6 Azure kernel was updated to receive various security bugfixes.


    The following security bugs were fixed:

    - CVE-2024-41014: xfs: add bounds checking to xlog_recover_process_data (bsc#1228408).
    - CVE-2024-41013: xfs: do not walk off the end of a directory data block (bsc#1228405).
    - CVE-2024-41017: jfs: do not walk off the end of ealist (bsc#1228403).
    - CVE-2024-40972: ext4: fold quota accounting into ext4_xattr_inode_lookup_create() (bsc#1227910).
    - CVE-2024-39276: ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find() (bsc#1226993).
    - CVE-2024-40925: block: fix request.queuelist usage in flush (bsc#1227789).
    - CVE-2024-40998: ext4: fix uninitialized ratelimit_state->lock access in __ext4_fill_super()     (bsc#1227866).
    - CVE-2024-39494: ima: Fix use-after-free on a dentry's dname.name (bsc#1227716).
    - CVE-2024-39496: btrfs: zoned: fix use-after-free due to race with dev replace (bsc#1227719).
    - CVE-2024-41091: tun: add missing verification for short frame (bsc#1228327).
    - CVE-2024-41090: tap: add missing verification for short frame (bsc#1228328).
    - CVE-2024-40999: net: ena: Add validation for completion descriptors consistency (bsc#1227913).
    - CVE-2024-40966: kABI: tty: add the option to have a tty reject a new ldisc (bsc#1227886).
    - CVE-2024-40975: platform/x86: x86-android-tablets: Unregister devices in reverse order (bsc#1227926).
    - CVE-2024-40970: Avoid hw_desc array overrun in dw-axi-dmac (bsc#1227899).
    - CVE-2024-40947: ima: Avoid blocking in RCU read-side critical section (bsc#1227803).
    - CVE-2024-40908: bpf: Set run context for rawtp test_run callback (bsc#1227783).
    - CVE-2024-40960: ipv6: prevent possible NULL dereference in rt6_probe() (bsc#1227813).
    - CVE-2024-40935: cachefiles: flush all requests after setting CACHEFILES_DEAD (bsc#1227797).
    - CVE-2024-40961: ipv6: prevent possible NULL deref in fib6_nh_init() (bsc#1227814).
    - CVE-2024-39504: netfilter: nft_inner: validate mandatory meta and payload (bsc#1227757).
    - CVE-2024-41006: netrom: Fix a memory leak in nr_heartbeat_expiry() (bsc#1227862).
    - CVE-2024-40937: gve: Clear napi->skb before dev_kfree_skb_any() (bsc#1227836).
    - CVE-2024-39507: net: hns3: fix kernel crash problem in concurrent scenario (bsc#1227730).
    - CVE-2024-40940: net/mlx5: Fix tainted pointer delete is case of flow rules creation fail (bsc#1227800).
    - CVE-2024-40928: net: ethtool: fix the error condition in ethtool_get_phy_stats_ethtool() (bsc#1227788).
    - CVE-2024-26944: btrfs: zoned: fix lock ordering in btrfs_zone_activate() (bsc#1223731).
    - CVE-2024-40923: vmxnet3: disable rx data ring on dma allocation failure (bsc#1227786).
    - CVE-2024-40931: mptcp: ensure snd_una is properly initialized on connect (bsc#1227780).
    - CVE-2024-40919: bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send()     (bsc#1227779).
    - CVE-2024-39487: bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set() (bsc#1227573)
    - CVE-2024-35908: tls: get psock ref after taking rxlock to avoid leak (bsc#1224490)
    - CVE-2024-35899: netfilter: nf_tables: flush pending destroy work before exit_net release (bsc#1224499)
    - CVE-2024-35934: net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list() (bsc#1224641)
    - CVE-2024-35893: net/sched: act_skbmod: prevent kernel-infoleak (bsc#1224512)
    - CVE-2024-40901: scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory (bsc#1227762).
    - CVE-2024-39472: xfs: fix log recovery buffer allocation for the legacy h_size fixup (bsc#1227432).
    - CVE-2024-40953: KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin() (bsc#1227806).
    - CVE-2024-27404: mptcp: fix data races on remote_id (bsc#1224422)
    - CVE-2024-27020: netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get() (bsc#1223815)
    - CVE-2024-27019: netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get() (bsc#1223813)
    - CVE-2024-40948: mm/page_table_check: fix crash on ZONE_DEVICE (bsc#1227801).
    - CVE-2024-35890: gro: fix ownership transfer (bsc#1224516).
    - CVE-2024-36902: ipv6: fib6_rules: avoid possible NULL dereference in fib6_rule_action() (bsc#1225719).
    - CVE-2024-36946: phonet: fix rtm_phonet_notify() skb allocation (bsc#1225851).
    - CVE-2024-38586: r8169: Fix possible ring buffer corruption on fragmented Tx packets (bsc#1226750).
    - CVE-2024-39468: smb: client: fix deadlock in smb2_find_smb_tcon() (bsc#1227103.
    - CVE-2024-40906: net/mlx5: Always stop health timer during driver removal (bsc#1227763).
    - CVE-2024-27012: netfilter: nf_tables: restore set elements when delete set fails (bsc#1223804).
    - CVE-2024-39498: drm/mst: Fix NULL pointer dereference at drm_dp_add_payload_part2 (bsc#1227723)
    - CVE-2024-39502: ionic: fix use after netif_napi_del() (bsc#1227755).
    - CVE-2024-27016: netfilter: flowtable: validate pppoe header (bsc#1223807).
    - CVE-2024-36901: ipv6: prevent NULL dereference in ip6_output() (bsc#1225711)
    - CVE-2024-36004: i40e: Do not use WQ_MEM_RECLAIM flag for workqueue (bsc#1224545)
    - CVE-2024-27025: nbd: null check for nla_nest_start (bsc#1223778)
    - CVE-2024-35853: mlxsw: spectrum_acl_tcam: Fix memory leak during rehash (bsc#1224604).
    - CVE-2024-35854: Fixed possible use-after-free during rehash (bsc#1224636).
    - CVE-2024-27402: phonet/pep: fix racy skb_queue_empty() use (bsc#1224414).
    - CVE-2023-52435: net: prevent mss overflow in skb_segment() (bsc#1220138).
    - CVE-2024-27065: netfilter: nf_tables: do not compare internal table flags on updates (bsc#1223836).
    - CVE-2024-27015: netfilter: flowtable: incorrect pppoe tuple (bsc#1223806).
    - CVE-2024-27064: netfilter: nf_tables: Fix a memory leak in nf_tables_updchain (bsc#1223740).
    - CVE-2024-26663: tipc: Check the bearer type before calling tipc_udp_nl_bearer_add() (bsc#1222326).
    - CVE-2023-47210: wifi: iwlwifi: bump FW API to 90 for BZ/SC devices (bsc#1225601, bsc#1225600).
    - CVE-2023-52775: net/smc: avoid data corruption caused by decline (bsc#1225088).
    - CVE-2024-38558: net: openvswitch: fix overwriting ct original tuple for ICMPv6 (bsc#1226783).
    - CVE-2024-39490: ipv6: sr: fix missing sk_buff release in seg6_input_core (bsc#1227626).
    - CVE-2024-26826: mptcp: fix data re-injection from stale subflow (bsc#1223010).
    - CVE-2024-26615: net/smc: fix illegal rmb_desc access in SMC-D connection dump (bsc#1220942).
    - CVE-2024-35942: pmdomain: imx8mp-blk-ctrl: imx8mp_blk: Add fdcc clock to hdmimix domain (bsc#1224589).
    - CVE-2024-26691: KVM: arm64: Fix circular locking dependency (bsc#1222463).
    - CVE-2024-36909: Drivers: hv: vmbus: Do not free ring buffers that couldn't be re-encrypted     (bsc#1225744).
    - CVE-2024-36910: uio_hv_generic: Do not free decrypted memory (bsc#1225717).
    - CVE-2024-36911: hv_netvsc: Do not free decrypted memory (bsc#1225745).
    - CVE-2024-36912: Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl (bsc#1225752).
    - CVE-2024-36913: Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails (bsc#1225753).
    - CVE-2024-26665: tunnels: fix out of bounds access when building IPv6 PMTU error (bsc#1222328).
    - CVE-2024-38659: enic: Validate length of nl attributes in enic_set_vf_port (bsc#1226883).
    - CVE-2023-52751: smb: client: fix use-after-free in smb2_query_info_compound() (bsc#1225489).
    - CVE-2024-39482: bcache: fix variable length array abuse in btree_iter (bsc#1227447).
    - CVE-2024-39474: mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL (bsc#1227434).
    - CVE-2024-26636: llc: make llc_ui_sendmsg() more robust against bonding changes (bsc#1221659).
    - CVE-2024-26635: llc: Drop support for ETH_P_TR_802_2 (bsc#1221656).
    - CVE-2024-38598: md: fix resync softlockup when bitmap size is less than array size (bsc#1226757).
    - CVE-2024-36003: ice: fix LAG and VF lock dependency in ice_reset_vf() (bsc#1224544).
    - CVE-2024-38604: block: refine the EOF check in blkdev_iomap_begin (bsc#1226866).
    - CVE-2024-26641: ip6_tunnel: make sure to pull inner header in __ip6_tnl_rcv() (bsc#1221654).
    - CVE-2024-26863: hsr: Fix uninit-value access in hsr_get_node() (bsc#1223021).
    - CVE-2024-26633: ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() (bsc#1221647).
    - CVE-2024-26623: pds_core: Prevent race issues involving the adminq (bsc#1221057).
    - CVE-2024-26785: iommufd: Fix protection fault in iommufd_test_syz_conv_iova (bsc#1222779).
    - CVE-2024-26734: devlink: fix possible use-after-free and memory leaks in devlink_init() (bsc#1222438).
    - CVE-2024-35805: dm snapshot: fix lockup in dm_exception_table_exit (bsc#1224743).
    - CVE-2024-39371: io_uring: check for non-NULL file pointer in io_file_can_poll() (bsc#1226990).
    - CVE-2023-52846: hsr: Prevent use after free in prp_create_tagged_frame() (bsc#1225098).
    - CVE-2024-38610: drivers/virt/acrn: fix PFNMAP PTE checks in acrn_vm_ram_map() (bsc#1226758).
    - CVE-2024-37354: btrfs: fix crash on racing fsync and size-extending write into prealloc (bsc#1227101).
    - CVE-2024-36919: scsi: bnx2fc: Remove spin_lock_bh while releasing resources after upload (bsc#1225767).
    - CVE-2024-38559: scsi: qedf: Ensure the copied buf is NUL terminated (bsc#1226785).
    - CVE-2024-38570: gfs2: Fix potential glock use-after-free on unmount (bsc#1226775).
    - CVE-2024-36904: tcp: Use refcount_inc_not_zero() in tcp_twsk_unique() (bsc#1225732).
    - CVE-2023-52881: tcp: do not accept ACK of bytes we never sent (bsc#1225611).
    - CVE-2024-37353: virtio: fixed a double free in vp_del_vqs() (bsc#1226875).
    - CVE-2024-39301: net/9p: fix uninit-value in p9_client_rpc() (bsc#1226994).
    - CVE-2024-35843: iommu/vt-d: Use device rbtree in iopf reporting path (bsc#1224751).
    - CVE-2024-37078: nilfs2: fix potential kernel bug due to lack of writeback flag waiting (bsc#1227066).
    - CVE-2024-35247: fpga: region: add owner module and take its refcount (bsc#1226948).
    - CVE-2024-36479: fpga: bridge: add owner module and take its refcount (bsc#1226949).
    - CVE-2024-37021: fpga: manager: add owner module and take its refcount (bsc#1226950).
    - CVE-2024-36281: net/mlx5: Use mlx5_ipsec_rx_status_destroy to correctly delete status rules     (bsc#1226799).
    - CVE-2024-38580: epoll: be better about file lifetimes (bsc#1226610).
    - CVE-2024-36478: null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'     (bsc#1226841).
    - CVE-2024-38636: f2fs: multidev: fix to recognize valid zero block address (bsc#1226879).
    - CVE-2024-38661: s390/ap: Fix crash in AP internal function modify_bitmap() (bsc#1226996).
    - CVE-2024-38564: bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE     (bsc#1226789).
    - CVE-2024-38566: bpf: Fix verifier assumptions about socket->sk (bsc#1226790).
    - CVE-2024-38560: scsi: bfa: Ensure the copied buf is NUL terminated (bsc#1226786).
    - CVE-2024-36978: net: sched: sch_multiq: fix possible OOB write in multiq_tune() (bsc#1226514).
    - CVE-2024-36917: block: fix overflow in blk_ioctl_discard() (bsc#1225770).
    - CVE-2024-36974: net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP (bsc#1226519).
    - CVE-2024-38627: stm class: Fix a double free in stm_register_device() (bsc#1226857).
    - CVE-2024-38603: drivers/perf: hisi: hns3: Actually use devm_add_action_or_reset() (bsc#1226842).
    - CVE-2024-38553: net: fec: remove .ndo_poll_controller to avoid deadlock (bsc#1226744).
    - CVE-2024-38555: net/mlx5: Discard command completions in internal error (bsc#1226607).
    - CVE-2024-38556: net/mlx5: Add a timeout to acquire the command queue semaphore (bsc#1226774).
    - CVE-2024-38557: net/mlx5: Reload only IB representors upon lag disable/enable (bsc#1226781).
    - CVE-2024-38608: net/mlx5e: Fix netif state handling (bsc#1226746).
    - CVE-2024-38597: eth: sungem: remove .ndo_poll_controller to avoid deadlocks (bsc#1226749).
    - CVE-2024-38594: net: stmmac: move the EST lock to struct stmmac_priv (bsc#1226734).
    - CVE-2024-38569: drivers/perf: hisi_pcie: Fix out-of-bound access when valid event group (bsc#1226772).
    - CVE-2024-38568: drivers/perf: hisi: hns3: Fix out-of-bound access when valid event group (bsc#1226771).
    - CVE-2024-26814: vfio/fsl-mc: Block calling interrupt handler without trigger (bsc#1222810).
    - CVE-2024-26813: vfio/platform: Create persistent IRQ handlers (bsc#1222809).
    - CVE-2024-36945: net/smc: fix neighbour and rtable leak in smc_ib_find_route() (bsc#1225823).
    - CVE-2024-36923: fs/9p: fix uninitialized values during inode evict (bsc#1225815).
    - CVE-2024-36971: net: fix __dst_negative_advice() race (bsc#1226145).
    - CVE-2024-27414: rtnetlink: fix error logic of IFLA_BRIDGE_FLAGS writing back (bsc#1224439).
    - CVE-2024-35900: netfilter: nf_tables: reject new basechain after table flag update (bsc#1224497).
    - CVE-2024-35886: ipv6: Fix infinite recursion in fib6_dump_done() (bsc#1224670).
    - CVE-2024-36024: drm/amd/display: Disable idle reallow as part of command/gpint execution (bsc#1225702).
    - CVE-2024-36903: ipv6: Fix potential uninit-value access in __ip6_make_skb() (bsc#1225741).
    - CVE-2024-36914: drm/amd/display: Skip on writeback when it's not applicable (bsc#1225757).
    - CVE-2024-36899: gpiolib: cdev: Fix use after free in lineinfo_changed_notify (bsc#1225737).
    - CVE-2024-35979: raid1: fix use-after-free for original bio in raid1_write_request() (bsc#1224572).
    - CVE-2024-35807: ext4: fix corruption during on-line resize (bsc#1224735).
    - CVE-2023-52622: ext4: avoid online resizing failures due to oversized flex bg (bsc#1222080).
    - CVE-2023-52843: llc: verify mac len before reading mac header (bsc#1224951).
    - CVE-2024-35898: netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()     (bsc#1224498).
    - CVE-2024-36915: nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies (bsc#1225758).
    - CVE-2024-36017: rtnetlink: Correct nested IFLA_VF_VLAN_LIST attribute validation (bsc#1225681).
    - CVE-2024-36882: mm: use memalloc_nofs_save() in page_cache_ra_order() (bsc#1225723).
    - CVE-2024-36916: blk-iocost: avoid out of bounds shift (bsc#1225759).
    - CVE-2024-36900: net: hns3: fix kernel crash when devlink reload during initialization (bsc#1225726).
    - CVE-2023-52787: blk-mq: make sure active queue usage is held for bio_integrity_prep() (bsc#1225105).
    - CVE-2024-35925: block: prevent division by zero in blk_rq_stat_sum() (bsc#1224661).
    - CVE-2023-52837: nbd: fix uaf in nbd_open (bsc#1224935).
    - CVE-2023-52786: ext4: fix racy may inline data check in dio write (bsc#1224939).
    - CVE-2024-36934: bna: ensure the copied buf is NUL terminated (bsc#1225760).
    - CVE-2024-36935: ice: ensure the copied buf is NUL terminated (bsc#1225763).
    - CVE-2024-36937: xdp: use flags field to disambiguate broadcast redirect (bsc#1225834).
    - CVE-2023-52672: pipe: wakeup wr_wait after setting max_usage (bsc#1224614).
    - CVE-2023-52845: tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING (bsc#1225585).
    - CVE-2024-36005: netfilter: nf_tables: honor table dormant flag from netdev release event path     (bsc#1224539).
    - CVE-2024-26845: scsi: target: core: Add TMF to tmr_list handling (bsc#1223018).
    - CVE-2024-35892: net/sched: fix lockdep splat in qdisc_tree_reduce_backlog() (bsc#1224515).
    - CVE-2024-35848: eeprom: at24: fix memory corruption race condition (bsc#1224612).
    - CVE-2024-35884: udp: do not accept non-tunnel GSO skbs landing in a tunnel (bsc#1224520).
    - CVE-2024-35857: icmp: prevent possible NULL dereferences from icmp_build_probe() (bsc#1224619).
    - CVE-2023-52735: bpf, sockmap: Don't let sock_map_{close,destroy,unhash} call itself (bsc#1225475).
    - CVE-2024-35926: crypto: iaa - Fix async_disable descriptor leak (bsc#1224655).
    - CVE-2024-35976: Validate user input for XDP_{UMEM|COMPLETION}_FILL_RING (bsc#1224575).
    - CVE-2024-36938: Fixed NULL pointer dereference in sk_psock_skb_ingress_enqueue (bsc#1225761).
    - CVE-2024-36008: ipv4: check for NULL idev in ip_route_use_hint() (bsc#1224540).
    - CVE-2024-35998: Fixed lock ordering potential deadlock in cifs_sync_mid_result (bsc#1224549).
    - CVE-2023-52757: Fixed potential deadlock when releasing mids (bsc#1225548).
    - CVE-2024-27419: Fixed data-races around sysctl_net_busy_read (bsc#1224759)
    - CVE-2024-36957: octeontx2-af: avoid off-by-one read from userspace (bsc#1225762).
    - CVE-2024-26625: Call sock_orphan() at release time (bsc#1221086)
    - CVE-2024-35880: io_uring/kbuf: hold io_buffer_list reference over mmap (bsc#1224523).
    - CVE-2024-35831: io_uring: Fix release of pinned pages when __io_uaddr_map fails (bsc#1224698).
    - CVE-2024-35827: io_uring/net: fix overflow check in io_recvmsg_mshot_prep() (bsc#1224606).
    - CVE-2023-52656: Dropped any code related to SCM_RIGHTS (bsc#1224187).
    - CVE-2023-52699: sysv: don't call sb_bread() with pointers_lock held (bsc#1224659).


Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
205119	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : kernel-firmware (SUSE-SU-2024:2785-1)	Nessus	SuSE Local Security Checks	8/7/2024	8/7/2024	medium
206008	SUSE SLES15 Security Update : kernel (SUSE-SU-2024:2973-1)	Nessus	SuSE Local Security Checks	8/21/2024	9/9/2024	high
203003	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : kernel-firmware (SUSE-SU-2024:2575-1)	Nessus	SuSE Local Security Checks	7/23/2024	7/26/2024	medium
205163	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : kernel (SUSE-SU-2024:2802-1)	Nessus	SuSE Local Security Checks	8/8/2024	9/9/2024	high
205492	SUSE SLES15 Security Update : kernel (SUSE-SU-2024:2896-1)	Nessus	SuSE Local Security Checks	8/14/2024	9/9/2024	high

Detections

Analytics

Plugins Search

medium

high

medium

high

high