VDB
SUSE-SU-2022%3A3408-1
SUSE-SU-2022%3A3408-1
PUBLISHED
CVSS 5.400000095367432 MEDIUM
Record from OSV · Published September 26, 2022
Security update for the Linux Kernel
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| kernel-default | SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS | 4.12.14-150100.197.123.1 |
| kernel-syms | SUSE:Linux Enterprise Server 15 SP1-LTSS | 4.12.14-150100.197.123.1 |
| kernel-source | SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS | 4.12.14-150100.197.123.1 |
| kernel-source | SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS | 4.12.14-150100.197.123.1 |
| kernel-kvmsmall | openSUSE:Leap 15.4 | 4.12.14-150100.197.123.1 |
| kernel-obs-build | SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS | 4.12.14-150100.197.123.1 |
| kernel-livepatch-SLE15-SP1_Update_34 | SUSE:Linux Enterprise Live Patching 15 SP1 | 1-150100.3.3.1 |
| kernel-default | SUSE:Linux Enterprise Server 15 SP1-LTSS | 4.12.14-150100.197.123.1 |
| kernel-source | SUSE:Linux Enterprise Server for SAP Applications 15 SP1 | 4.12.14-150100.197.123.1 |
| kernel-vanilla | openSUSE:Leap 15.4 | 4.12.14-150100.197.123.1 |
| kernel-default | SUSE:Linux Enterprise Server 15 SP1-BCL | 4.12.14-150100.197.123.1 |
| kernel-obs-build | SUSE:Linux Enterprise Server 15 SP1-BCL | 4.12.14-150100.197.123.1 |
32 more packages have a fixed version. See every fix in Lookup.
Risk scores
CVSS 4.0
5.400000095367432
CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
| Vendor | Product | Versions |
|---|---|---|
| SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS | kernel-default | 0 |
| SUSE:Linux Enterprise Server 15 SP1-LTSS | kernel-syms | 0 |
| SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS | kernel-source | 0 |
| SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS | kernel-source | 0 |
| openSUSE:Leap 15.4 | kernel-kvmsmall | 0 |
| SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS | kernel-obs-build | 0 |
| SUSE:Linux Enterprise Live Patching 15 SP1 | kernel-livepatch-SLE15-SP1_Update_34 | 0 |
| SUSE:Linux Enterprise Server 15 SP1-LTSS | kernel-default | 0 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP1 | kernel-source | 0 |
| openSUSE:Leap 15.4 | kernel-vanilla | 0 |
| SUSE:Linux Enterprise Server 15 SP1-BCL | kernel-default | 0 |
| SUSE:Linux Enterprise Server 15 SP1-BCL | kernel-obs-build | 0 |
| SUSE:Linux Enterprise Server 15 SP1-LTSS | kernel-zfcpdump | 0 |
| SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS | kernel-docs | 0 |
| openSUSE:Leap 15.3 | kernel-kvmsmall | 0 |
| SUSE:Enterprise Storage 6 | kernel-docs | 0 |
| SUSE:Linux Enterprise Server 15 SP1-LTSS | kernel-obs-build | 0 |
| openSUSE:Leap 15.4 | kernel-default | 0 |
| SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS | kernel-syms | 0 |
| SUSE:Linux Enterprise Server 15 SP1-LTSS | kernel-docs | 0 |
…and 24 more
Timeline
- Sep 26, 2022 CVE Published
- Feb 13, 2025 PoC Published (3 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln SUSE-SU-2022%3A3408-1
vulnetix vdb fixes SUSE-SU-2022%3A3408-1
Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/SUSE-SU-2022%253A3408-1/fixes/registry"
The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://www.suse.com/support/update/announcement/2022/suse-su-20223408-1/ advisory
- https://bugzilla.suse.com/1191881 report
- https://bugzilla.suse.com/1196616 report
- https://bugzilla.suse.com/1199482 report
- https://bugzilla.suse.com/1199665 report
- https://bugzilla.suse.com/1201705 report
- https://bugzilla.suse.com/1201726 report
- https://bugzilla.suse.com/1202096 report
- https://bugzilla.suse.com/1202393 report
- https://bugzilla.suse.com/1202672 report
- https://bugzilla.suse.com/1202898 report
- https://bugzilla.suse.com/1203098 report
- https://bugzilla.suse.com/1203107 report
- https://www.suse.com/security/cve/CVE-2020-36516 url
- https://www.suse.com/security/cve/CVE-2021-4203 url
- https://www.suse.com/security/cve/CVE-2022-20369 url
- https://www.suse.com/security/cve/CVE-2022-21385 url
- https://www.suse.com/security/cve/CVE-2022-2588 url
- https://www.suse.com/security/cve/CVE-2022-26373 url
- https://www.suse.com/security/cve/CVE-2022-29581 url
…and 23 more