Linux · SUSE Linux Enterprise · Security advisory · August 7, 2024

SUSE-SU-2024:2802-1: Security update for 13 packages

SUSE-SU-2024:2802-1, released August 7, 2024, fixes 118 CVEs across 13 products. None of them is reported as exploited. Patch Radar priority: Urgent.

Urgent
CVEs closed
118
2 rated Critical
Exploited
0
None reported
Highest CVSS
9.6
Base score, 0 to 10
Highest EPSS
0.0097
61st percentile

Priority of the 118 CVEs

Patch now 0 Urgent 2 High 43 Routine 73

Fixed package versions

ProductReleaseFixed in
dtb-aarch64opensuse-leap 15.66.4.0-150600.23.17.1
kernel-64kbopensuse-leap 15.66.4.0-150600.23.17.1
kernel-64kbsles 15.66.4.0-150600.23.17.1
kernel-debugopensuse-leap 15.66.4.0-150600.23.17.1
kernel-defaultopensuse-leap 15.66.4.0-150600.23.17.1
kernel-defaultsles 15.66.4.0-150600.23.17.1
kernel-default-baseopensuse-leap 15.66.4.0-150600.23.17.1.150600.12.6.2
kernel-default-basesles 15.66.4.0-150600.23.17.1.150600.12.6.2
kernel-docsopensuse-leap 15.66.4.0-150600.23.17.3
kernel-docssles 15.66.4.0-150600.23.17.3
kernel-kvmsmallopensuse-leap 15.66.4.0-150600.23.17.1
kernel-livepatch-SLE15-SP6_Update_3sles 15.61-150600.13.3.1
kernel-obs-buildopensuse-leap 15.66.4.0-150600.23.17.1
kernel-obs-buildsles 15.66.4.0-150600.23.17.1
kernel-obs-qaopensuse-leap 15.66.4.0-150600.23.17.1
kernel-sourceopensuse-leap 15.66.4.0-150600.23.17.1
kernel-sourcesles 15.66.4.0-150600.23.17.1
kernel-symsopensuse-leap 15.66.4.0-150600.23.17.1
kernel-symssles 15.66.4.0-150600.23.17.1
kernel-zfcpdumpopensuse-leap 15.66.4.0-150600.23.17.1
kernel-zfcpdumpsles 15.66.4.0-150600.23.17.1

CVEs this fix closes

PriorityCVETitleCVSSEPSSExploitation
Urgent CVE-2024-36912 linux: In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Track decrypted status in vm...9.6 0.0097 None reported
Urgent CVE-2024-36913 linux: In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Leak pages if set_memory_enc...9.3 0.0066 None reported
High CVE-2024-38558 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0082 None reported
High CVE-2024-35853 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.0 0.0073 None reported
High CVE-2024-26665 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0068 None reported
High CVE-2023-52775 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0067 None reported
High CVE-2024-26826 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.0 0.0065 None reported
High CVE-2024-35854 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0058 None reported
High CVE-2023-51780 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...8.0 0.0051 None reported
High CVE-2024-36922 wifi: iwlwifi: read txq->read_ptr under lock7.8 0.0035 None reported
High CVE-2024-40901 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0031 None reported
High CVE-2024-39502 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0031 None reported
High CVE-2024-39494 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0031 None reported
High CVE-2024-40906 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0031 None reported
High CVE-2024-39496 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0029 None reported
High CVE-2024-36902 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0029 None reported
High CVE-2024-36974 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0028 None reported
High CVE-2024-40998 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0027 None reported
High CVE-2024-40960 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0027 None reported
High CVE-2024-27065 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0026 None reported
High CVE-2024-36901 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0026 None reported
High CVE-2024-40935 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0026 None reported
High CVE-2024-40940 kernel-64kb: The SUSE Linux Enterprise 15 SP6 kernel was updated to receive various security bugfixes. The following security bu...7.8 0.0026 None reported
High CVE-2024-41090 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system7.8 0.0026 None reported
High CVE-2024-41091 bpftool: The kernel packages contain the Linux kernel, the core of any Linux operating system7.8 0.0026 None reported
Showing 1 to 25 of 118 1Next

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.