CVE-2024-50047
NoneCVSS
—
EPSS
0.5%
Published
Oct 21, 2024
CISA due date
—
Cloudanix analysis
Monitor only
SSVC: Track
A bug in how Linux handles encrypted file reads from Windows file shares can crash the computer or let attackers run code, so organizations should install the latest kernel updates right away.
- Exploitation
- Local Privilege
- Attacker needs
- Local User
- Complexity
- Moderate
- Impact
- Denial Of Service
- Component
- OS kernel
- Class
- Use After Free
- Remediation
- Patch
- Effort
- Medium
- Patch risk
- Low
What it actually does
Use-after-free in the Linux kernel CIFS client crypto layer when performing asynchronous decryption of large SMB reads; a shared AEAD TFM is reused across parallel kworker contexts leading to slab-use-after-free inside gf128mul_ghash during gcm processing.
Why it matters to the business
Systems mounting encrypted SMB shares can experience kernel crashes or memory corruption during large file reads, causing service outages, data loss, or potential remote code execution on Linux servers and workstations that rely on CIFS with seal encryption.
How an attack unfolds
An attacker positions a malicious or compromised SMB server, tricks the victim into mounting the share with seal and esize=1, then induces a large read that triggers the smb3decryptd workqueue path; the concurrent use of the same TFM produces the UAF in the crypto API. Threat actors noted in 2024 zero-day campaigns targeting Linux kernel flaws could chain this with other primitives for privilege escalation.
How to fix it
Upgrade the Linux kernel to commit 8f14a476abba13144df5434871a7225fd29af633 or later; Rocky Linux 8 users must install kernel package 4.18.0-348.20.1.el8_5 or newer. Until patches are applied, avoid mounting CIFS shares with the seal option or limit read sizes to prevent async decryption.
How to confirm the fix worked
Verify the running kernel contains commit 8f14a476abba or the Rocky Linux package version listed above; confirm the smb2_decrypt_offload function allocates a per-request AEAD TFM and no longer calls aead_request_set_callback on a shared instance.
Typical attack path
- Attacker compromises or hosts an SMB server requiring seal encryption
- Victim mounts the share using mount.cifs with seal,esize=1
- Attacker supplies a large file or forces a large read operation
- Kernel schedules smb2_decrypt_offload on smb3decryptd workqueue
- Parallel crypto operations reuse the freed TFM causing slab UAF
How to detect it
Search kernel logs (dmesg, /var/log/kern.log, journalctl) for KASAN slab-use-after-free reports mentioning gf128mul_4k_lle, ghash_update, or smb2_decrypt_offload; correlate with CIFS mount events using seal and large read workloads.
What your security team should do
- Immediately apply the fixed kernel versions to all systems that mount encrypted SMB shares
- Prioritize patching internet-facing or high-value Linux servers first due to noted 2024 exploitation campaigns
- Audit CIFS mount options and disable seal encryption where not required
- Monitor kernel logs for KASAN reports referencing gf128mul_4k_lle or smb2_decrypt_offload
The record
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in async decryption Doing an async decryption (large read) crashes with a slab-use-after-free way down in the crypto API. Reproducer: # mount.cifs -o ...,seal,esize=1 //srv/share /mnt # dd if=/mnt/largefile of=/dev/null ... [ 194.196391] ================================================================== [ 194.196844] BUG: KASAN: slab-use-after-free in gf128mul_4k_lle+0xc1/0x110 [ 194.197269] Read of size 8 at addr ffff888112bd0448 by task kworker/u77:2/899 [ 194.197707] [ 194.197818] CPU: 12 UID: 0 PID: 899 Comm: kworker/u77:2 Not tainted 6.11.0-lku-00028-gfca3ca14a17a-dirty #43 [ 194.198400] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.2-3-gd478f380-prebuilt.qemu.org 04/01/2014 [ 194.199046] Workqueue: smb3decryptd smb2_decrypt_offload [cifs] [ 194.200032] Call Trace: [ 194.200191] <TASK> [ 194.200327] dump_stack_lvl+0x4e/0x70 [ 194.200558] ? gf128mul_4k_lle+0xc1/0x110 [ 194.200809] print_report+0x174/0x505 [ 194.201040] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 194.201352] ? srso_return_thunk+0x5/0x5f [ 194.201604] ? __virt_addr_valid+0xdf/0x1c0 [ 194.201868] ? gf128mul_4k_lle+0xc1/0x110 [ 194.202128] kasan_report+0xc8/0x150 [ 194.202361] ? gf128mul_4k_lle+0xc1/0x110 [ 194.202616] gf128mul_4k_lle+0xc1/0x110 [ 194.202863] ghash_update+0x184/0x210 [ 194.203103] shash_ahash_update+0x184/0x2a0 [ 194.203377] ? __pfx_shash_ahash_update+0x10/0x10 [ 194.203651] ? srso_return_thunk+0x5/0x5f [ 194.203877] ? crypto_gcm_init_common+0x1ba/0x340 [ 194.204142] gcm_hash_assoc_remain_continue+0x10a/0x140 [ 194.204434] crypt_message+0xec1/0x10a0 [cifs] [ 194.206489] ? __pfx_crypt_message+0x10/0x10 [cifs] [ 194.208507] ? srso_return_thunk+0x5/0x5f [ 194.209205] ? srso_return_thunk+0x5/0x5f [ 194.209925] ? srso_return_thunk+0x5/0x5f [ 194.210443] ? srso_return_thunk+0x5/0x5f [ 194.211037] decrypt_raw_data+0x15f/0x250 [cifs] [ 194.212906] ? __pfx_decrypt_raw_data+0x10/0x10 [cifs] [ 194.214670] ? srso_return_thunk+0x5/0x5f [ 194.215193] smb2_decrypt_offload+0x12a/0x6c0 [cifs] This is because TFM is being used in parallel. Fix this by allocating a new AEAD TFM for async decryption, but keep the existing one for synchronous READ cases (similar to what is done in smb3_calc_signature()). Also remove the calls to aead_request_set_callback() and crypto_wait_req() since it's always going to be a synchronous operation.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | linux | 0 | No fix |
| Debian:11 | linux-6.1 | 0 | 6.1.128-1~deb11u1 |
| Debian:11 | linux-6.1 | 0 | 6.1.6.1.128-1~deb11u1 |
| Debian:12 | linux | 0 | No fix |
| Debian:12 | linux | 0 | 6.1.128-1 |
| Debian:13 | linux | 0 | No fix |
| Debian:13 | linux | 0 | 6.11.4-1 |
| Linux | Kernel | 0 | 5.10.237 |
| Linux | Kernel | 5.4.0 | 5.10.237 |
| Mageia:9 | kernel | 0 | 6.6.58-2.mga9 |
| Mageia:9 | kernel-firmware | 0 | 20240909-1.mga9 |
| Mageia:9 | kernel-firmware-nonfree | 0 | 20240909-1.mga9.nonfree |
| Mageia:9 | kernel-linus | 0 | 6.6.58-2.mga9 |
| Mageia:9 | kmod-virtualbox | 0 | 7.0.20-57.mga9 |
| Mageia:9 | kmod-xtables-addons | 0 | 3.24-65.mga9 |
| Mageia:9 | radeon-firmware | 0 | 20240909-1.mga9.nonfree |
| SUSE:Enterprise Storage 7.1 | kernel-64kb | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Enterprise Storage 7.1 | kernel-default | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Enterprise Storage 7.1 | kernel-default-base | 0 | 5.3.18-150300.59.182.1.150300.18.107.1 |
| SUSE:Enterprise Storage 7.1 | kernel-docs | 0 | 5.3.18-150300.59.182.2 |
| SUSE:Enterprise Storage 7.1 | kernel-obs-build | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Enterprise Storage 7.1 | kernel-preempt | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Enterprise Storage 7.1 | kernel-source | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Enterprise Storage 7.1 | kernel-syms | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Linux Enterprise High Availability Extension 12 SP5 | kernel-default | 0 | 4.12.14-122.234.1 |
| SUSE:Linux Enterprise High Availability Extension 15 SP2 | kernel-default | 0 | 5.3.18-150200.24.209.1 |
| SUSE:Linux Enterprise High Availability Extension 15 SP3 | kernel-default | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Linux Enterprise High Availability Extension 15 SP4 | kernel-default | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise High Availability Extension 15 SP5 | kernel-default | 0 | 5.14.21-150500.55.88.1 |
| SUSE:Linux Enterprise High Availability Extension 15 SP6 | kernel-default | 0 | 6.4.0-150600.23.30.1 |
| SUSE:Linux Enterprise High Availability Extension 15 SP6 | kernel-default | 0 | 6.4.0-150600.23.33.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | kernel-default | 0 | 5.3.18-150200.24.209.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | kernel-default-base | 0 | 5.3.18-150200.24.209.1.150200.9.109.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | kernel-docs | 0 | 5.3.18-150200.24.209.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | kernel-obs-build | 0 | 5.3.18-150200.24.209.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | kernel-preempt | 0 | 5.3.18-150200.24.209.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | kernel-source | 0 | 5.3.18-150200.24.209.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | kernel-syms | 0 | 5.3.18-150200.24.209.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-64kb | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-default | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-default-base | 0 | 5.3.18-150300.59.182.1.150300.18.107.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-docs | 0 | 5.3.18-150300.59.182.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-obs-build | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-preempt | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-source | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | kernel-syms | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-64kb | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-default | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-default-base | 0 | 5.14.21-150400.24.141.1.150400.24.68.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-docs | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-obs-build | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-source | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | kernel-syms | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-64kb | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-default | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-default-base | 0 | 5.14.21-150400.24.141.1.150400.24.68.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-docs | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-obs-build | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-source | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | kernel-syms | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise Live Patching 12 SP5 | kernel-default | 0 | 4.12.14-122.234.1 |
| SUSE:Linux Enterprise Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_62 | 0 | 1-8.3.1 |
| SUSE:Linux Enterprise Live Patching 15 SP2 | kernel-default | 0 | 5.3.18-150200.24.209.1 |
| SUSE:Linux Enterprise Live Patching 15 SP2 | kernel-livepatch-SLE15-SP2_Update_54 | 0 | 1-150200.5.3.1 |
| SUSE:Linux Enterprise Live Patching 15 SP3 | kernel-default | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Linux Enterprise Live Patching 15 SP3 | kernel-livepatch-SLE15-SP3_Update_50 | 0 | 1-150300.7.3.1 |
| SUSE:Linux Enterprise Live Patching 15 SP4 | kernel-default | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_33 | 0 | 1-150400.9.5.1 |
| SUSE:Linux Enterprise Live Patching 15 SP5 | kernel-default | 0 | 5.14.21-150500.55.88.1 |
| SUSE:Linux Enterprise Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5-RT_Update_22 | 0 | 1-150500.11.3.1 |
| SUSE:Linux Enterprise Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_21 | 0 | 1-150500.11.5.1 |
| SUSE:Linux Enterprise Live Patching 15 SP6 | kernel-default | 0 | 6.4.0-150600.23.30.1 |
| SUSE:Linux Enterprise Live Patching 15 SP6 | kernel-default | 0 | 6.4.0-150600.23.33.1 |
| SUSE:Linux Enterprise Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6-RT_Update_5 | 0 | 1-150600.1.3.1 |
| SUSE:Linux Enterprise Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6-RT_Update_7 | 0 | 1-150600.1.3.1 |
| SUSE:Linux Enterprise Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_6 | 0 | 1-150600.13.3.5 |
| SUSE:Linux Enterprise Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_7 | 0 | 1-150600.13.3.1 |
| SUSE:Linux Enterprise Micro 5.1 | kernel-default | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Linux Enterprise Micro 5.1 | kernel-default-base | 0 | 5.3.18-150300.59.182.1.150300.18.107.1 |
| SUSE:Linux Enterprise Micro 5.1 | kernel-rt | 0 | 5.3.18-150300.191.1 |
| SUSE:Linux Enterprise Micro 5.1 | kernel-source-rt | 0 | 5.3.18-150300.191.1 |
| SUSE:Linux Enterprise Micro 5.2 | kernel-default | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Linux Enterprise Micro 5.2 | kernel-default-base | 0 | 5.3.18-150300.59.182.1.150300.18.107.1 |
| SUSE:Linux Enterprise Micro 5.2 | kernel-rt | 0 | 5.3.18-150300.191.1 |
| SUSE:Linux Enterprise Micro 5.2 | kernel-source-rt | 0 | 5.3.18-150300.191.1 |
| SUSE:Linux Enterprise Micro 5.3 | kernel-default | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise Micro 5.3 | kernel-default-base | 0 | 5.14.21-150400.24.141.1.150400.24.68.2 |
| SUSE:Linux Enterprise Micro 5.3 | kernel-rt | 0 | 5.14.21-150400.15.100.1 |
| SUSE:Linux Enterprise Micro 5.3 | kernel-source-rt | 0 | 5.14.21-150400.15.100.1 |
| SUSE:Linux Enterprise Micro 5.4 | kernel-default | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise Micro 5.4 | kernel-default-base | 0 | 5.14.21-150400.24.141.1.150400.24.68.2 |
| SUSE:Linux Enterprise Micro 5.4 | kernel-rt | 0 | 5.14.21-150400.15.100.1 |
| SUSE:Linux Enterprise Micro 5.4 | kernel-source-rt | 0 | 5.14.21-150400.15.100.1 |
| SUSE:Linux Enterprise Micro 5.5 | kernel-default | 0 | 5.14.21-150500.55.88.1 |
| SUSE:Linux Enterprise Micro 5.5 | kernel-default-base | 0 | 5.14.21-150500.55.88.1.150500.6.39.4 |
| SUSE:Linux Enterprise Micro 5.5 | kernel-rt | 0 | 5.14.21-150500.13.76.1 |
| SUSE:Linux Enterprise Micro 5.5 | kernel-source-rt | 0 | 5.14.21-150500.13.76.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP5 | kernel-64kb | 0 | 5.14.21-150500.55.88.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP5 | kernel-default | 0 | 5.14.21-150500.55.88.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP5 | kernel-default-base | 0 | 5.14.21-150500.55.88.1.150500.6.39.4 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP5 | kernel-source | 0 | 5.14.21-150500.55.88.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP5 | kernel-zfcpdump | 0 | 5.14.21-150500.55.88.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | kernel-64kb | 0 | 6.4.0-150600.23.30.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | kernel-64kb | 0 | 6.4.0-150600.23.33.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | kernel-default | 0 | 6.4.0-150600.23.30.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | kernel-default | 0 | 6.4.0-150600.23.33.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | kernel-default-base | 0 | 6.4.0-150600.23.30.1.150600.12.12.6 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | kernel-default-base | 0 | 6.4.0-150600.23.33.1.150600.12.14.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | kernel-source | 0 | 6.4.0-150600.23.30.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | kernel-source | 0 | 6.4.0-150600.23.33.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | kernel-zfcpdump | 0 | 6.4.0-150600.23.30.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | kernel-zfcpdump | 0 | 6.4.0-150600.23.33.1 |
| SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 | kernel-coco | 0 | 6.4.0-15061.9.coco15sp6.1 |
| SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 | kernel-coco | 0 | 6.4.0-15061.12.coco15sp6.1 |
| SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 | kernel-coco_debug | 0 | 6.4.0-15061.9.coco15sp6.1 |
| SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 | kernel-coco_debug | 0 | 6.4.0-15061.12.coco15sp6.1 |
| SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 | kernel-source-coco | 0 | 6.4.0-15061.9.coco15sp6.1 |
| SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 | kernel-source-coco | 0 | 6.4.0-15061.12.coco15sp6.1 |
| SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 | kernel-syms-coco | 0 | 6.4.0-15061.9.coco15sp6.1 |
| SUSE:Linux Enterprise Module for Confidential Computing Technical Preview 15 SP6 | kernel-syms-coco | 0 | 6.4.0-15061.12.coco15sp6.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP5 | kernel-docs | 0 | 5.14.21-150500.55.88.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP5 | kernel-obs-build | 0 | 5.14.21-150500.55.88.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP5 | kernel-source | 0 | 5.14.21-150500.55.88.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP5 | kernel-syms | 0 | 5.14.21-150500.55.88.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP6 | kernel-docs | 0 | 6.4.0-150600.23.30.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP6 | kernel-docs | 0 | 6.4.0-150600.23.33.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP6 | kernel-obs-build | 0 | 6.4.0-150600.23.30.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP6 | kernel-obs-build | 0 | 6.4.0-150600.23.33.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP6 | kernel-source | 0 | 6.4.0-150600.23.30.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP6 | kernel-source | 0 | 6.4.0-150600.23.33.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP6 | kernel-syms | 0 | 6.4.0-150600.23.30.1 |
| SUSE:Linux Enterprise Module for Development Tools 15 SP6 | kernel-syms | 0 | 6.4.0-150600.23.33.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP5 | kernel-default | 0 | 5.14.21-150500.55.88.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP6 | kernel-default | 0 | 6.4.0-150600.23.30.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP6 | kernel-default | 0 | 6.4.0-150600.23.33.1 |
| SUSE:Linux Enterprise Module for Public Cloud 15 SP5 | kernel-azure | 0 | 5.14.21-150500.33.72.1 |
| SUSE:Linux Enterprise Module for Public Cloud 15 SP5 | kernel-source-azure | 0 | 5.14.21-150500.33.72.1 |
| SUSE:Linux Enterprise Module for Public Cloud 15 SP5 | kernel-syms-azure | 0 | 5.14.21-150500.33.72.1 |
| SUSE:Linux Enterprise Module for Public Cloud 15 SP6 | kernel-azure | 0 | 6.4.0-150600.8.23.1 |
| SUSE:Linux Enterprise Module for Public Cloud 15 SP6 | kernel-azure | 0 | 6.4.0-150600.8.17.2 |
| SUSE:Linux Enterprise Module for Public Cloud 15 SP6 | kernel-source-azure | 0 | 6.4.0-150600.8.23.1 |
| SUSE:Linux Enterprise Module for Public Cloud 15 SP6 | kernel-source-azure | 0 | 6.4.0-150600.8.17.1 |
| SUSE:Linux Enterprise Module for Public Cloud 15 SP6 | kernel-syms-azure | 0 | 6.4.0-150600.8.23.1 |
| SUSE:Linux Enterprise Module for Public Cloud 15 SP6 | kernel-syms-azure | 0 | 6.4.0-150600.8.17.1 |
| SUSE:Linux Enterprise Server 12 SP5-LTSS | kernel-default | 0 | 4.12.14-122.234.1 |
| SUSE:Linux Enterprise Server 12 SP5-LTSS | kernel-source | 0 | 4.12.14-122.234.1 |
| SUSE:Linux Enterprise Server 12 SP5-LTSS | kernel-syms | 0 | 4.12.14-122.234.1 |
| SUSE:Linux Enterprise Server 15 SP2-LTSS | kernel-default | 0 | 5.3.18-150200.24.209.1 |
| SUSE:Linux Enterprise Server 15 SP2-LTSS | kernel-default-base | 0 | 5.3.18-150200.24.209.1.150200.9.109.1 |
| SUSE:Linux Enterprise Server 15 SP2-LTSS | kernel-docs | 0 | 5.3.18-150200.24.209.2 |
| SUSE:Linux Enterprise Server 15 SP2-LTSS | kernel-obs-build | 0 | 5.3.18-150200.24.209.1 |
| SUSE:Linux Enterprise Server 15 SP2-LTSS | kernel-preempt | 0 | 5.3.18-150200.24.209.1 |
| SUSE:Linux Enterprise Server 15 SP2-LTSS | kernel-source | 0 | 5.3.18-150200.24.209.1 |
| SUSE:Linux Enterprise Server 15 SP2-LTSS | kernel-syms | 0 | 5.3.18-150200.24.209.1 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | kernel-64kb | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | kernel-default | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | kernel-default-base | 0 | 5.3.18-150300.59.182.1.150300.18.107.1 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | kernel-docs | 0 | 5.3.18-150300.59.182.2 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | kernel-obs-build | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | kernel-preempt | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | kernel-source | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | kernel-syms | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | kernel-zfcpdump | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | kernel-64kb | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | kernel-default | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | kernel-default-base | 0 | 5.14.21-150400.24.141.1.150400.24.68.2 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | kernel-docs | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | kernel-obs-build | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | kernel-source | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | kernel-syms | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | kernel-zfcpdump | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | kernel-default | 0 | 4.12.14-122.234.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | kernel-source | 0 | 4.12.14-122.234.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | kernel-syms | 0 | 4.12.14-122.234.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP2 | kernel-default | 0 | 5.3.18-150200.24.209.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP2 | kernel-default-base | 0 | 5.3.18-150200.24.209.1.150200.9.109.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP2 | kernel-docs | 0 | 5.3.18-150200.24.209.2 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP2 | kernel-obs-build | 0 | 5.3.18-150200.24.209.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP2 | kernel-preempt | 0 | 5.3.18-150200.24.209.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP2 | kernel-source | 0 | 5.3.18-150200.24.209.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP2 | kernel-syms | 0 | 5.3.18-150200.24.209.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | kernel-default | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | kernel-default-base | 0 | 5.3.18-150300.59.182.1.150300.18.107.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | kernel-docs | 0 | 5.3.18-150300.59.182.2 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | kernel-obs-build | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | kernel-preempt | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | kernel-source | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | kernel-syms | 0 | 5.3.18-150300.59.182.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | kernel-default | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | kernel-default-base | 0 | 5.14.21-150400.24.141.1.150400.24.68.2 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | kernel-docs | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | kernel-obs-build | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | kernel-source | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | kernel-syms | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Linux Enterprise Workstation Extension 15 SP6 | kernel-default | 0 | 6.4.0-150600.23.30.1 |
| SUSE:Linux Enterprise Workstation Extension 15 SP6 | kernel-default | 0 | 6.4.0-150600.23.33.1 |
| SUSE:Manager Proxy 4.3 | kernel-default | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Manager Proxy 4.3 | kernel-default-base | 0 | 5.14.21-150400.24.141.1.150400.24.68.2 |
| SUSE:Manager Proxy 4.3 | kernel-source | 0 | 5.14.21-150400.24.141.1 |
| SUSE:Manager Proxy 4.3 | kernel-syms | 0 | 5.14.21-150400.24.141.1 |
Related vulnerabilities
- CVE-2025-39885 In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix recursive… Also affects linux
- CVE-2025-39883 In the Linux kernel, the following vulnerability has been resolved: mm/memory-failure… Also affects linux
- CVE-2025-39876 In the Linux kernel, the following vulnerability has been resolved: net: fec: Fix… Also affects linux
- CVE-2025-39869 In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: edma… Also affects linux
- CVE-2025-39873 In the Linux kernel, the following vulnerability has been resolved: can: xilinx_can… Also affects linux
- CVE-2025-39863 In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix… Also affects linux
- CVE-2025-39865 In the Linux kernel, the following vulnerability has been resolved: tee: fix NULL pointer… Also affects linux
- CVE-2025-39866 In the Linux kernel, the following vulnerability has been resolved: fs: writeback: fix… Also affects linux