<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for the Linux Kernel</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2022:4615-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2022-12-23T09:44:36Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2022-12-23T09:44:36Z</InitialReleaseDate>
    <CurrentReleaseDate>2022-12-23T09:44:36Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for the Linux Kernel</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">The SUSE Linux Enterprise 12  SP4 kernel was updated to receive various security and bugfixes.


The following security bugs were fixed:

- CVE-2022-4378: Fixed stack overflow in __do_proc_dointvec (bsc#1206207).
- CVE-2022-42328: Guests could trigger denial of service via the netback driver (bsc#1206114).
- CVE-2022-42329: Guests could trigger denial of service via the netback driver (bsc#1206113).
- CVE-2022-3643: Guests could trigger NIC interface reset/abort/crash via netback driver (bsc#1206113).
- CVE-2022-3635: Fixed a use-after-free in the tst_timer() of the file drivers/atm/idt77252.c (bsc#1204631).
- CVE-2022-41850: Fixed a race condition in roccat_report_event() in drivers/hid/hid-roccat.c (bsc#1203960).
- CVE-2022-45934: Fixed a integer wraparound via L2CAP_CONF_REQ packets in l2cap_config_req in net/bluetooth/l2cap_core.c (bsc#1205796).
- CVE-2022-3567: Fixed a to race condition in inet6_stream_ops()/inet6_dgram_ops() (bsc#1204414).
- CVE-2022-41858: Fixed a denial of service in sl_tx_timeout() in drivers/net/slip (bsc#1205671).
- CVE-2022-43945: Fixed a buffer overflow in the NFSD implementation (bsc#1205128).
- CVE-2022-4095: Fixed a use-after-free in rtl8712 driver (bsc#1205514).
- CVE-2022-3903: Fixed a denial of service with the Infrared Transceiver USB driver (bsc#1205220).
- CVE-2022-42896: Fixed a use-after-free vulnerability in the net/bluetooth/l2cap_core.c's l2cap_connect() and l2cap_le_connect_req() which may have allowed code execution and leaking kernel memory (respectively) remotely via Bluetooth (bsc#1205709).
- CVE-2022-42895: Fixed an information leak in the net/bluetooth/l2cap_core.c's l2cap_parse_conf_req() which can be used to leak kernel pointers remotely (bsc#1205705).
- CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic (bsc#1204166).
- CVE-2022-3628: Fixed potential buffer overflow in brcmf_fweh_event_worker() in wifi/brcmfmac (bsc#1204868).
- CVE-2022-2964: Fixed memory corruption issues in ax88179_178a devices (bsc#1202686).
- CVE-2021-4037: Fixed function logic vulnerability that allowed local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set (bsc#1198702).
- CVE-2022-43750: Fixed vulnerability in usbmon that allowed a user-space client to corrupt the monitor's internal memory (bsc#1204653).
- CVE-2022-3542: Fixed memory leak in bnx2x_tpa_stop() in drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c (bsc#1204402).
- CVE-2022-3629: Fixed memory leak in vsock_connect() in net/vmw_vsock/af_vsock.c (bsc#1204635).
- CVE-2022-3646: Fixed memory leak in nilfs_attach_log_writer() in fs/nilfs2/segment.c (bsc#1204646).
- CVE-2022-3649: Fixed use-after-free in nilfs_new_inode() in fs/nilfs2/inode.c (bsc#1204647).
- CVE-2022-3621: Fixed null pointer dereference in nilfs_bmap_lookup_at_level() in fs/nilfs2/inode.c (bsc#1204574).
- CVE-2022-3594: Fixed excessive data logging in intr_callback() in drivers/net/usb/r8152.c (bsc#1204479).
- CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bsc#1204439).
- CVE-2022-3565: Fixed use-after-free in del_timer() in drivers/isdn/mISDN/l1oip_core.c (bsc#1204431).
- CVE-2022-3524: Fixed memory leak in ipv6_renew_options() in the IPv6 handler (bsc#1204354).
- CVE-2022-40768: Fixed information leak in the scsi driver which allowed local users to obtain sensitive information from kernel memory (bsc#1203514).
- CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bsc#1204168).
- CVE-2022-3169: Fixed an denial of service though request to NVME_IOCTL_RESET and NVME_IOCTL_SUBSYS_RESET (bsc#1203290).
- CVE-2022-40307: Fixed a race condition that could had been exploited to trigger a use-after-free in the efi firmware capsule-loader.c (bsc#1203322).
- CVE-2022-3545: Fixed a use-after-free in area_cache_get() of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c (bsc#1204415).
- CVE-2022-3521: Fixed a race condition in kcm_tx_work() of the file net/kcm/kcmsock.c (bsc#1204355).
- CVE-2022-2153: Fixed a NULL pointer dereference in the KVM subsystem, when attempting to set a SynIC IRQ (bsc#1200788).
- CVE-2022-41848: Fixed a race condition in drivers/char/pcmcia/synclink_cs.c mgslpc_ioctl and mgslpc_detach (bsc#1203987).

The following non-security bugs were fixed:

- ipv6: ping: fix wrong checksum for large frames (bsc#1203183).
- sunrpc: Re-purpose trace_svc_process (bsc#1205006).
- x86/cpu: Restore AMD's DE_CFG MSR after resume (bsc#1205473).
- x86/hyperv: Output host build info as normal Windows version number (git-fixes).
- x86/hyperv: Set pv_info.name to 'Hyper-V' (git-fixes).
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">SUSE-2022-4615,SUSE-OpenStack-Cloud-9-2022-4615,SUSE-OpenStack-Cloud-Crowbar-9-2022-4615,SUSE-SLE-HA-12-SP4-2022-4615,SUSE-SLE-Live-Patching-12-SP4-2022-4615,SUSE-SLE-SAP-12-SP4-2022-4615,SUSE-SLE-SERVER-12-SP4-LTSS-2022-4615</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      <Description>Link for SUSE-SU-2022:4615-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2022-December/013338.html</URL>
      <Description>E-Mail link for SUSE-SU-2022:4615-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1196018</URL>
      <Description>SUSE Bug 1196018</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1198702</URL>
      <Description>SUSE Bug 1198702</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1200788</URL>
      <Description>SUSE Bug 1200788</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1201455</URL>
      <Description>SUSE Bug 1201455</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1202686</URL>
      <Description>SUSE Bug 1202686</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1203008</URL>
      <Description>SUSE Bug 1203008</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1203183</URL>
      <Description>SUSE Bug 1203183</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1203290</URL>
      <Description>SUSE Bug 1203290</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1203322</URL>
      <Description>SUSE Bug 1203322</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1203514</URL>
      <Description>SUSE Bug 1203514</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1203960</URL>
      <Description>SUSE Bug 1203960</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1203987</URL>
      <Description>SUSE Bug 1203987</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204166</URL>
      <Description>SUSE Bug 1204166</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204168</URL>
      <Description>SUSE Bug 1204168</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204170</URL>
      <Description>SUSE Bug 1204170</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204354</URL>
      <Description>SUSE Bug 1204354</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204355</URL>
      <Description>SUSE Bug 1204355</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204402</URL>
      <Description>SUSE Bug 1204402</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204414</URL>
      <Description>SUSE Bug 1204414</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204415</URL>
      <Description>SUSE Bug 1204415</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204424</URL>
      <Description>SUSE Bug 1204424</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204431</URL>
      <Description>SUSE Bug 1204431</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204432</URL>
      <Description>SUSE Bug 1204432</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204439</URL>
      <Description>SUSE Bug 1204439</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204479</URL>
      <Description>SUSE Bug 1204479</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204574</URL>
      <Description>SUSE Bug 1204574</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204576</URL>
      <Description>SUSE Bug 1204576</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204631</URL>
      <Description>SUSE Bug 1204631</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204635</URL>
      <Description>SUSE Bug 1204635</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204636</URL>
      <Description>SUSE Bug 1204636</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204646</URL>
      <Description>SUSE Bug 1204646</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204647</URL>
      <Description>SUSE Bug 1204647</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204653</URL>
      <Description>SUSE Bug 1204653</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204868</URL>
      <Description>SUSE Bug 1204868</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1205006</URL>
      <Description>SUSE Bug 1205006</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1205128</URL>
      <Description>SUSE Bug 1205128</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1205130</URL>
      <Description>SUSE Bug 1205130</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1205220</URL>
      <Description>SUSE Bug 1205220</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1205473</URL>
      <Description>SUSE Bug 1205473</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1205514</URL>
      <Description>SUSE Bug 1205514</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1205671</URL>
      <Description>SUSE Bug 1205671</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1205705</URL>
      <Description>SUSE Bug 1205705</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1205709</URL>
      <Description>SUSE Bug 1205709</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1205796</URL>
      <Description>SUSE Bug 1205796</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1206113</URL>
      <Description>SUSE Bug 1206113</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1206114</URL>
      <Description>SUSE Bug 1206114</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1206207</URL>
      <Description>SUSE Bug 1206207</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-4037/</URL>
      <Description>SUSE CVE CVE-2021-4037 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-2153/</URL>
      <Description>SUSE CVE CVE-2022-2153 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-28693/</URL>
      <Description>SUSE CVE CVE-2022-28693 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-28748/</URL>
      <Description>SUSE CVE CVE-2022-28748 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-2964/</URL>
      <Description>SUSE CVE CVE-2022-2964 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3169/</URL>
      <Description>SUSE CVE CVE-2022-3169 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3424/</URL>
      <Description>SUSE CVE CVE-2022-3424 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3521/</URL>
      <Description>SUSE CVE CVE-2022-3521 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3524/</URL>
      <Description>SUSE CVE CVE-2022-3524 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3542/</URL>
      <Description>SUSE CVE CVE-2022-3542 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3545/</URL>
      <Description>SUSE CVE CVE-2022-3545 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3565/</URL>
      <Description>SUSE CVE CVE-2022-3565 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3567/</URL>
      <Description>SUSE CVE CVE-2022-3567 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3586/</URL>
      <Description>SUSE CVE CVE-2022-3586 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3594/</URL>
      <Description>SUSE CVE CVE-2022-3594 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3621/</URL>
      <Description>SUSE CVE CVE-2022-3621 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3628/</URL>
      <Description>SUSE CVE CVE-2022-3628 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3629/</URL>
      <Description>SUSE CVE CVE-2022-3629 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3635/</URL>
      <Description>SUSE CVE CVE-2022-3635 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3643/</URL>
      <Description>SUSE CVE CVE-2022-3643 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3646/</URL>
      <Description>SUSE CVE CVE-2022-3646 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3649/</URL>
      <Description>SUSE CVE CVE-2022-3649 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3903/</URL>
      <Description>SUSE CVE CVE-2022-3903 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-40307/</URL>
      <Description>SUSE CVE CVE-2022-40307 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-40768/</URL>
      <Description>SUSE CVE CVE-2022-40768 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-4095/</URL>
      <Description>SUSE CVE CVE-2022-4095 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-41848/</URL>
      <Description>SUSE CVE CVE-2022-41848 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-41850/</URL>
      <Description>SUSE CVE CVE-2022-41850 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-41858/</URL>
      <Description>SUSE CVE CVE-2022-41858 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-42328/</URL>
      <Description>SUSE CVE CVE-2022-42328 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-42329/</URL>
      <Description>SUSE CVE CVE-2022-42329 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-42703/</URL>
      <Description>SUSE CVE CVE-2022-42703 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-42895/</URL>
      <Description>SUSE CVE CVE-2022-42895 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-42896/</URL>
      <Description>SUSE CVE CVE-2022-42896 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-43750/</URL>
      <Description>SUSE CVE CVE-2022-43750 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-4378/</URL>
      <Description>SUSE CVE CVE-2022-4378 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-43945/</URL>
      <Description>SUSE CVE CVE-2022-43945 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-45934/</URL>
      <Description>SUSE CVE CVE-2022-45934 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="SUSE Linux Enterprise High Availability Extension 12 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise High Availability Extension 12 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise High Availability Extension 12 SP4" CPE="cpe:/o:suse:sle-ha:12:sp4">SUSE Linux Enterprise High Availability Extension 12 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Live Patching 12 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Live Patching 12 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Live Patching 12 SP4" CPE="cpe:/o:suse:sle-live-patching:12:sp4">SUSE Linux Enterprise Live Patching 12 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP4-LTSS">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS" CPE="cpe:/o:suse:sles-ltss:12:sp4">SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4" CPE="cpe:/o:suse:sles_sap:12:sp4">SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE OpenStack Cloud 9">
      <Branch Type="Product Name" Name="SUSE OpenStack Cloud 9">
        <FullProductName ProductID="SUSE OpenStack Cloud 9" CPE="cpe:/o:suse:suse-openstack-cloud:9">SUSE OpenStack Cloud 9</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE OpenStack Cloud Crowbar 9">
      <Branch Type="Product Name" Name="SUSE OpenStack Cloud Crowbar 9">
        <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 9" CPE="cpe:/o:suse:suse-openstack-cloud-crowbar:9">SUSE OpenStack Cloud Crowbar 9</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="cluster-md-kmp-default-4.12.14-95.114.1">
      <FullProductName ProductID="cluster-md-kmp-default-4.12.14-95.114.1">cluster-md-kmp-default-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dlm-kmp-default-4.12.14-95.114.1">
      <FullProductName ProductID="dlm-kmp-default-4.12.14-95.114.1">dlm-kmp-default-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gfs2-kmp-default-4.12.14-95.114.1">
      <FullProductName ProductID="gfs2-kmp-default-4.12.14-95.114.1">gfs2-kmp-default-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-debug-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-debug-4.12.14-95.114.1">kernel-debug-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-debug-base-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-debug-base-4.12.14-95.114.1">kernel-debug-base-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-debug-devel-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-debug-devel-4.12.14-95.114.1">kernel-debug-devel-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-debug-kgraft-devel-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-debug-kgraft-devel-4.12.14-95.114.1">kernel-debug-kgraft-devel-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-default-4.12.14-95.114.1">kernel-default-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-base-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-default-base-4.12.14-95.114.1">kernel-default-base-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-devel-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-default-devel-4.12.14-95.114.1">kernel-default-devel-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-extra-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-default-extra-4.12.14-95.114.1">kernel-default-extra-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-kgraft-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-default-kgraft-4.12.14-95.114.1">kernel-default-kgraft-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-kgraft-devel-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-default-kgraft-devel-4.12.14-95.114.1">kernel-default-kgraft-devel-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-man-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-default-man-4.12.14-95.114.1">kernel-default-man-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-devel-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-devel-4.12.14-95.114.1">kernel-devel-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-docs-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-docs-4.12.14-95.114.1">kernel-docs-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-docs-html-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-docs-html-4.12.14-95.114.1">kernel-docs-html-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-kvmsmall-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-kvmsmall-4.12.14-95.114.1">kernel-kvmsmall-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-kvmsmall-base-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-kvmsmall-base-4.12.14-95.114.1">kernel-kvmsmall-base-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-kvmsmall-devel-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-kvmsmall-devel-4.12.14-95.114.1">kernel-kvmsmall-devel-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-kvmsmall-kgraft-devel-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-kvmsmall-kgraft-devel-4.12.14-95.114.1">kernel-kvmsmall-kgraft-devel-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-macros-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-macros-4.12.14-95.114.1">kernel-macros-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-obs-build-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-obs-build-4.12.14-95.114.1">kernel-obs-build-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-obs-qa-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-obs-qa-4.12.14-95.114.1">kernel-obs-qa-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-source-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-source-4.12.14-95.114.1">kernel-source-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-source-vanilla-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-source-vanilla-4.12.14-95.114.1">kernel-source-vanilla-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-syms-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-syms-4.12.14-95.114.1">kernel-syms-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-vanilla-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-vanilla-4.12.14-95.114.1">kernel-vanilla-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-vanilla-base-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-vanilla-base-4.12.14-95.114.1">kernel-vanilla-base-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-vanilla-devel-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-vanilla-devel-4.12.14-95.114.1">kernel-vanilla-devel-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-vanilla-kgraft-devel-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-vanilla-kgraft-devel-4.12.14-95.114.1">kernel-vanilla-kgraft-devel-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-zfcpdump-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-zfcpdump-4.12.14-95.114.1">kernel-zfcpdump-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-zfcpdump-man-4.12.14-95.114.1">
      <FullProductName ProductID="kernel-zfcpdump-man-4.12.14-95.114.1">kernel-zfcpdump-man-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kgraft-patch-4_12_14-95_114-default-1-6.3.1">
      <FullProductName ProductID="kgraft-patch-4_12_14-95_114-default-1-6.3.1">kgraft-patch-4_12_14-95_114-default-1-6.3.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kselftests-kmp-default-4.12.14-95.114.1">
      <FullProductName ProductID="kselftests-kmp-default-4.12.14-95.114.1">kselftests-kmp-default-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ocfs2-kmp-default-4.12.14-95.114.1">
      <FullProductName ProductID="ocfs2-kmp-default-4.12.14-95.114.1">ocfs2-kmp-default-4.12.14-95.114.1</FullProductName>
    </Branch>
    <Relationship ProductReference="cluster-md-kmp-default-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Availability Extension 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1">cluster-md-kmp-default-4.12.14-95.114.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="dlm-kmp-default-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Availability Extension 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1">dlm-kmp-default-4.12.14-95.114.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="gfs2-kmp-default-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Availability Extension 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1">gfs2-kmp-default-4.12.14-95.114.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="ocfs2-kmp-default-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise High Availability Extension 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1">ocfs2-kmp-default-4.12.14-95.114.1 as a component of SUSE Linux Enterprise High Availability Extension 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-kgraft-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Live Patching 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1">kernel-default-kgraft-4.12.14-95.114.1 as a component of SUSE Linux Enterprise Live Patching 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-kgraft-devel-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Live Patching 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1">kernel-default-kgraft-devel-4.12.14-95.114.1 as a component of SUSE Linux Enterprise Live Patching 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kgraft-patch-4_12_14-95_114-default-1-6.3.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Live Patching 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1">kgraft-patch-4_12_14-95_114-default-1-6.3.1 as a component of SUSE Linux Enterprise Live Patching 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1">kernel-default-4.12.14-95.114.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-base-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1">kernel-default-base-4.12.14-95.114.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1">kernel-default-devel-4.12.14-95.114.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-man-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1">kernel-default-man-4.12.14-95.114.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-devel-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1">kernel-devel-4.12.14-95.114.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-macros-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1">kernel-macros-4.12.14-95.114.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1">kernel-source-4.12.14-95.114.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-syms-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP4-LTSS">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1">kernel-syms-4.12.14-95.114.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1">kernel-default-4.12.14-95.114.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-base-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1">kernel-default-base-4.12.14-95.114.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1">kernel-default-devel-4.12.14-95.114.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-devel-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1">kernel-devel-4.12.14-95.114.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-macros-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1">kernel-macros-4.12.14-95.114.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1">kernel-source-4.12.14-95.114.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-syms-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1">kernel-syms-4.12.14-95.114.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 9">
      <FullProductName ProductID="SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1">kernel-default-4.12.14-95.114.1 as a component of SUSE OpenStack Cloud 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-base-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 9">
      <FullProductName ProductID="SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1">kernel-default-base-4.12.14-95.114.1 as a component of SUSE OpenStack Cloud 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 9">
      <FullProductName ProductID="SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1">kernel-default-devel-4.12.14-95.114.1 as a component of SUSE OpenStack Cloud 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-devel-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 9">
      <FullProductName ProductID="SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1">kernel-devel-4.12.14-95.114.1 as a component of SUSE OpenStack Cloud 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-macros-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 9">
      <FullProductName ProductID="SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1">kernel-macros-4.12.14-95.114.1 as a component of SUSE OpenStack Cloud 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 9">
      <FullProductName ProductID="SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1">kernel-source-4.12.14-95.114.1 as a component of SUSE OpenStack Cloud 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-syms-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud 9">
      <FullProductName ProductID="SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1">kernel-syms-4.12.14-95.114.1 as a component of SUSE OpenStack Cloud 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 9">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1">kernel-default-4.12.14-95.114.1 as a component of SUSE OpenStack Cloud Crowbar 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-base-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 9">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1">kernel-default-base-4.12.14-95.114.1 as a component of SUSE OpenStack Cloud Crowbar 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 9">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1">kernel-default-devel-4.12.14-95.114.1 as a component of SUSE OpenStack Cloud Crowbar 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-devel-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 9">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1">kernel-devel-4.12.14-95.114.1 as a component of SUSE OpenStack Cloud Crowbar 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-macros-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 9">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1">kernel-macros-4.12.14-95.114.1 as a component of SUSE OpenStack Cloud Crowbar 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 9">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1">kernel-source-4.12.14-95.114.1 as a component of SUSE OpenStack Cloud Crowbar 9</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-syms-4.12.14-95.114.1" RelationType="Default Component Of" RelatesToProductReference="SUSE OpenStack Cloud Crowbar 9">
      <FullProductName ProductID="SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1">kernel-syms-4.12.14-95.114.1 as a component of SUSE OpenStack Cloud Crowbar 9</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability was found in the fs/inode.c:inode_init_owner() function logic of the LInux kernel that allows local users to create files for the XFS file-system with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group and is writable by a user who is not a member of this group. This can lead to excessive permissions granted in case when they should not. This vulnerability is similar to the previous CVE-2018-13405 and adds the missed fix for the XFS.</Note>
    </Notes>
    <CVE>CVE-2021-4037</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>4.4</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-4037.html</URL>
        <Description>CVE-2021-4037</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1198702</URL>
        <Description>SUSE Bug 1198702</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.</Note>
    </Notes>
    <CVE>CVE-2022-2153</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>6.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-2153.html</URL>
        <Description>CVE-2022-2153</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1200788</URL>
        <Description>SUSE Bug 1200788</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.</Note>
    </Notes>
    <CVE>CVE-2022-28693</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>4.7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-28693.html</URL>
        <Description>CVE-2022-28693</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1201455</URL>
        <Description>SUSE Bug 1201455</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-2964. Reason: This candidate is a reservation duplicate of CVE-2022-2964. Notes: All CVE users should reference CVE-2022-2964 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.</Note>
    </Notes>
    <CVE>CVE-2022-28748</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>3.7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-28748.html</URL>
        <Description>CVE-2022-28748</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1196018</URL>
        <Description>SUSE Bug 1196018</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes.</Note>
    </Notes>
    <CVE>CVE-2022-2964</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7.8</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-2964.html</URL>
        <Description>CVE-2022-2964</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1202686</URL>
        <Description>SUSE Bug 1202686</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1203008</URL>
        <Description>SUSE Bug 1203008</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1208044</URL>
        <Description>SUSE Bug 1208044</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive request of the NVME_IOCTL_RESET and the NVME_IOCTL_SUBSYS_RESET through the device file of the driver, resulting in a PCIe link disconnect.</Note>
    </Notes>
    <CVE>CVE-2022-3169</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>6.2</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3169.html</URL>
        <Description>CVE-2022-3169</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1203290</URL>
        <Description>SUSE Bug 1203290</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, where a fail pass occurs in the gru_check_chiplet_assignment function. This flaw allows a local user to crash or potentially escalate their privileges on the system.</Note>
    </Notes>
    <CVE>CVE-2022-3424</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3424.html</URL>
        <Description>CVE-2022-3424</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204166</URL>
        <Description>SUSE Bug 1204166</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204167</URL>
        <Description>SUSE Bug 1204167</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1208044</URL>
        <Description>SUSE Bug 1208044</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212309</URL>
        <Description>SUSE Bug 1212309</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function kcm_tx_work of the file net/kcm/kcmsock.c of the component kcm. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. VDB-211018 is the identifier assigned to this vulnerability.</Note>
    </Notes>
    <CVE>CVE-2022-3521</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>5.1</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3521.html</URL>
        <Description>CVE-2022-3521</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204355</URL>
        <Description>SUSE Bug 1204355</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1217458</URL>
        <Description>SUSE Bug 1217458</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211021 was assigned to this vulnerability.</Note>
    </Notes>
    <CVE>CVE-2022-3524</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>4.7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3524.html</URL>
        <Description>CVE-2022-3524</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204354</URL>
        <Description>SUSE Bug 1204354</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212320</URL>
        <Description>SUSE Bug 1212320</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="10">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.</Note>
    </Notes>
    <CVE>CVE-2022-3542</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>5.9</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3542.html</URL>
        <Description>CVE-2022-3542</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204402</URL>
        <Description>SUSE Bug 1204402</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1217458</URL>
        <Description>SUSE Bug 1217458</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="11">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211045 was assigned to this vulnerability.</Note>
    </Notes>
    <CVE>CVE-2022-3545</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7.4</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3545.html</URL>
        <Description>CVE-2022-3545</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204415</URL>
        <Description>SUSE Bug 1204415</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204424</URL>
        <Description>SUSE Bug 1204424</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1209225</URL>
        <Description>SUSE Bug 1209225</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1217531</URL>
        <Description>SUSE Bug 1217531</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="12">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function del_timer of the file drivers/isdn/mISDN/l1oip_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211088.</Note>
    </Notes>
    <CVE>CVE-2022-3565</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7.4</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3565.html</URL>
        <Description>CVE-2022-3565</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204431</URL>
        <Description>SUSE Bug 1204431</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204432</URL>
        <Description>SUSE Bug 1204432</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1208044</URL>
        <Description>SUSE Bug 1208044</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212323</URL>
        <Description>SUSE Bug 1212323</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="13">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function inet6_stream_ops/inet6_dgram_ops of the component IPv6 Handler. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. VDB-211090 is the identifier assigned to this vulnerability.</Note>
    </Notes>
    <CVE>CVE-2022-3567</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>5.3</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3567.html</URL>
        <Description>CVE-2022-3567</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204414</URL>
        <Description>SUSE Bug 1204414</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="14">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in the Linux kernel’s networking code. A use-after-free was found in the way the sch_sfb enqueue function used the socket buffer (SKB) cb field after the same SKB had been enqueued (and freed) into a child qdisc. This flaw allows a local, unprivileged user to crash the system, causing a denial of service.</Note>
    </Notes>
    <CVE>CVE-2022-3586</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3586.html</URL>
        <Description>CVE-2022-3586</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204439</URL>
        <Description>SUSE Bug 1204439</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204576</URL>
        <Description>SUSE Bug 1204576</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1208044</URL>
        <Description>SUSE Bug 1208044</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1209225</URL>
        <Description>SUSE Bug 1209225</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212294</URL>
        <Description>SUSE Bug 1212294</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="15">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function intr_callback of the file drivers/net/usb/r8152.c of the component BPF. The manipulation leads to logging of excessive data. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211363.</Note>
    </Notes>
    <CVE>CVE-2022-3594</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>5.1</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3594.html</URL>
        <Description>CVE-2022-3594</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204479</URL>
        <Description>SUSE Bug 1204479</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1217458</URL>
        <Description>SUSE Bug 1217458</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="16">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_bmap_lookup_at_level of the file fs/nilfs2/inode.c of the component nilfs2. The manipulation leads to null pointer dereference. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211920.</Note>
    </Notes>
    <CVE>CVE-2022-3621</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>4.3</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3621.html</URL>
        <Description>CVE-2022-3621</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204574</URL>
        <Description>SUSE Bug 1204574</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212295</URL>
        <Description>SUSE Bug 1212295</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="17">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver. This issue occurs when a user connects to a malicious USB device. This can allow a local user to crash the system or escalate their privileges.</Note>
    </Notes>
    <CVE>CVE-2022-3628</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>4.6</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3628.html</URL>
        <Description>CVE-2022-3628</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204868</URL>
        <Description>SUSE Bug 1204868</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="18">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability was found in Linux Kernel. It has been declared as problematic. This vulnerability affects the function vsock_connect of the file net/vmw_vsock/af_vsock.c. The manipulation leads to memory leak. The complexity of an attack is rather high. The exploitation appears to be difficult. It is recommended to apply a patch to fix this issue. VDB-211930 is the identifier assigned to this vulnerability.</Note>
    </Notes>
    <CVE>CVE-2022-3629</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>1.4</BaseScoreV2>
        <VectorV2>AV:A/AC:H/Au:S/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>2.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3629.html</URL>
        <Description>CVE-2022-3629</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204635</URL>
        <Description>SUSE Bug 1204635</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="19">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function tst_timer of the file drivers/atm/idt77252.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. VDB-211934 is the identifier assigned to this vulnerability.</Note>
    </Notes>
    <CVE>CVE-2022-3635</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3635.html</URL>
        <Description>CVE-2022-3635</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204631</URL>
        <Description>SUSE Bug 1204631</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204636</URL>
        <Description>SUSE Bug 1204636</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1208044</URL>
        <Description>SUSE Bug 1208044</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212289</URL>
        <Description>SUSE Bug 1212289</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="20">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Guests can trigger NIC interface reset/abort/crash via netback It is possible for a guest to trigger a NIC interface reset/abort/crash in a Linux based network backend by sending certain kinds of packets. It appears to be an (unwritten?) assumption in the rest of the Linux network stack that packet protocol headers are all contained within the linear section of the SKB and some NICs behave badly if this is not the case. This has been reported to occur with Cisco (enic) and Broadcom NetXtrem II BCM5780 (bnx2x) though it may be an issue with other NICs/drivers as well. In case the frontend is sending requests with split headers, netback will forward those violating above mentioned assumption to the networking core, resulting in said misbehavior.</Note>
    </Notes>
    <CVE>CVE-2022-3643</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>6.3</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3643.html</URL>
        <Description>CVE-2022-3643</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1206113</URL>
        <Description>SUSE Bug 1206113</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="21">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function nilfs_attach_log_writer of the file fs/nilfs2/segment.c of the component BPF. The manipulation leads to memory leak. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211961 was assigned to this vulnerability.</Note>
    </Notes>
    <CVE>CVE-2022-3646</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>2.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3646.html</URL>
        <Description>CVE-2022-3646</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204646</URL>
        <Description>SUSE Bug 1204646</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="22">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_new_inode of the file fs/nilfs2/inode.c of the component BPF. The manipulation leads to use after free. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211992.</Note>
    </Notes>
    <CVE>CVE-2022-3649</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>3.1</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3649.html</URL>
        <Description>CVE-2022-3649</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204647</URL>
        <Description>SUSE Bug 1204647</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212318</URL>
        <Description>SUSE Bug 1212318</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="23">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An incorrect read request flaw was found in the Infrared Transceiver USB driver in the Linux kernel. This issue occurs when a user attaches a malicious USB device. A local user could use this flaw to starve the resources, causing denial of service or potentially crashing the system.</Note>
    </Notes>
    <CVE>CVE-2022-3903</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>5.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3903.html</URL>
        <Description>CVE-2022-3903</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1205220</URL>
        <Description>SUSE Bug 1205220</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212297</URL>
        <Description>SUSE Bug 1212297</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="24">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free.</Note>
    </Notes>
    <CVE>CVE-2022-40307</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>6.7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-40307.html</URL>
        <Description>CVE-2022-40307</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1203322</URL>
        <Description>SUSE Bug 1203322</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="25">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case.</Note>
    </Notes>
    <CVE>CVE-2022-40768</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>5.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-40768.html</URL>
        <Description>CVE-2022-40768</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1203514</URL>
        <Description>SUSE Bug 1203514</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="26">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A use-after-free flaw was found in Linux kernel before 5.19.2. This issue occurs in cmd_hdl_filter in drivers/staging/rtl8712/rtl8712_cmd.c, allowing an attacker to launch a local denial of service attack and gain escalation of privileges.</Note>
    </Notes>
    <CVE>CVE-2022-4095</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7.8</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-4095.html</URL>
        <Description>CVE-2022-4095</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1205514</URL>
        <Description>SUSE Bug 1205514</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1205594</URL>
        <Description>SUSE Bug 1205594</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1208030</URL>
        <Description>SUSE Bug 1208030</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1208085</URL>
        <Description>SUSE Bug 1208085</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212319</URL>
        <Description>SUSE Bug 1212319</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="27">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">drivers/char/pcmcia/synclink_cs.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free if a physically proximate attacker removes a PCMCIA device while calling ioctl, aka a race condition between mgslpc_ioctl and mgslpc_detach.</Note>
    </Notes>
    <CVE>CVE-2022-41848</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>6.4</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-41848.html</URL>
        <Description>CVE-2022-41848</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1203987</URL>
        <Description>SUSE Bug 1203987</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1211484</URL>
        <Description>SUSE Bug 1211484</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212317</URL>
        <Description>SUSE Bug 1212317</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="28">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">roccat_report_event in drivers/hid/hid-roccat.c in the Linux kernel through 5.19.12 has a race condition and resultant use-after-free in certain situations where a report is received while copying a report-&gt;value is in progress.</Note>
    </Notes>
    <CVE>CVE-2022-41850</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>4</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:L</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-41850.html</URL>
        <Description>CVE-2022-41850</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1203960</URL>
        <Description>SUSE Bug 1203960</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212314</URL>
        <Description>SUSE Bug 1212314</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="29">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in the Linux kernel. A NULL pointer dereference may occur while a slip driver is in progress to detach in sl_tx_timeout in drivers/net/slip/slip.c. This issue could allow an attacker to crash the system or leak internal kernel information.</Note>
    </Notes>
    <CVE>CVE-2022-41858</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>4.4</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-41858.html</URL>
        <Description>CVE-2022-41858</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1205671</URL>
        <Description>SUSE Bug 1205671</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1211484</URL>
        <Description>SUSE Bug 1211484</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212300</URL>
        <Description>SUSE Bug 1212300</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="30">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is connected to (CVE-2022-42329).</Note>
    </Notes>
    <CVE>CVE-2022-42328</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>5.7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-42328.html</URL>
        <Description>CVE-2022-42328</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1206114</URL>
        <Description>SUSE Bug 1206114</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="31">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is connected to (CVE-2022-42329).</Note>
    </Notes>
    <CVE>CVE-2022-42329</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>5.7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-42329.html</URL>
        <Description>CVE-2022-42329</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1206114</URL>
        <Description>SUSE Bug 1206114</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="32">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.</Note>
    </Notes>
    <CVE>CVE-2022-42703</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-42703.html</URL>
        <Description>CVE-2022-42703</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204168</URL>
        <Description>SUSE Bug 1204168</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204170</URL>
        <Description>SUSE Bug 1204170</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1206463</URL>
        <Description>SUSE Bug 1206463</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1208044</URL>
        <Description>SUSE Bug 1208044</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1209225</URL>
        <Description>SUSE Bug 1209225</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="33">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">There is an infoleak vulnerability in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_parse_conf_req function which can be used to leak kernel pointers remotely. We recommend upgrading past commit https://github.com/torvalds/linux/commit/b1a2cd50c0357f243b7435a732b4e62ba3157a2e https://www.google.com/url</Note>
    </Notes>
    <CVE>CVE-2022-42895</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>6.8</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-42895.html</URL>
        <Description>CVE-2022-42895</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1205705</URL>
        <Description>SUSE Bug 1205705</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="34">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">There are use-after-free vulnerabilities in the Linux kernel's net/bluetooth/l2cap_core.c's l2cap_connect and l2cap_le_connect_req functions which may allow code execution and leaking kernel memory (respectively) remotely via Bluetooth. A remote attacker could execute code leaking kernel memory via Bluetooth if within proximity of the victim. We recommend upgrading past commit https://www.google.com/url https://github.com/torvalds/linux/commit/711f8c3fb3db61897080468586b970c87c61d9e4 https://www.google.com/url</Note>
    </Notes>
    <CVE>CVE-2022-42896</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>6.8</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-42896.html</URL>
        <Description>CVE-2022-42896</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1205709</URL>
        <Description>SUSE Bug 1205709</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="35">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory.</Note>
    </Notes>
    <CVE>CVE-2022-43750</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>6.7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-43750.html</URL>
        <Description>CVE-2022-43750</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204653</URL>
        <Description>SUSE Bug 1204653</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1211484</URL>
        <Description>SUSE Bug 1211484</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="36">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A stack overflow flaw was found in the Linux kernel's SYSCTL subsystem in how a user changes certain kernel parameters and variables. This flaw allows a local user to crash or potentially escalate their privileges on the system.</Note>
    </Notes>
    <CVE>CVE-2022-4378</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>8.4</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-4378.html</URL>
        <Description>CVE-2022-4378</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1206207</URL>
        <Description>SUSE Bug 1206207</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1206228</URL>
        <Description>SUSE Bug 1206228</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1208030</URL>
        <Description>SUSE Bug 1208030</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1208085</URL>
        <Description>SUSE Bug 1208085</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1209225</URL>
        <Description>SUSE Bug 1209225</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1211118</URL>
        <Description>SUSE Bug 1211118</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1214268</URL>
        <Description>SUSE Bug 1214268</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1218483</URL>
        <Description>SUSE Bug 1218483</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1218966</URL>
        <Description>SUSE Bug 1218966</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="37">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining the receive and send buffers of a remote procedure call (RPC) into a single array of pages. A client can force the send buffer to shrink by sending an RPC message over TCP with garbage data added at the end of the message. The RPC message with garbage data is still correctly formed according to the specification and is passed forward to handlers. Vulnerable code in NFSD is not expecting the oversized request and writes beyond the allocated buffer space. CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</Note>
    </Notes>
    <CVE>CVE-2022-43945</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>8.8</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-43945.html</URL>
        <Description>CVE-2022-43945</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1205128</URL>
        <Description>SUSE Bug 1205128</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1205130</URL>
        <Description>SUSE Bug 1205130</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1208030</URL>
        <Description>SUSE Bug 1208030</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1208085</URL>
        <Description>SUSE Bug 1208085</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1209225</URL>
        <Description>SUSE Bug 1209225</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1210124</URL>
        <Description>SUSE Bug 1210124</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="38">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An issue was discovered in the Linux kernel through 6.0.10. l2cap_config_req in net/bluetooth/l2cap_core.c has an integer wraparound via L2CAP_CONF_REQ packets.</Note>
    </Notes>
    <CVE>CVE-2022-45934</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:cluster-md-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:dlm-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:gfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise High Availability Extension 12 SP4:ocfs2-kmp-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kernel-default-kgraft-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Live Patching 12 SP4:kgraft-patch-4_12_14-95_114-default-1-6.3.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-default-man-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP4-LTSS:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP4:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud 9:kernel-syms-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-base-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-default-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-devel-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-macros-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-source-4.12.14-95.114.1</ProductID>
        <ProductID>SUSE OpenStack Cloud Crowbar 9:kernel-syms-4.12.14-95.114.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>5.3</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20224615-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-45934.html</URL>
        <Description>CVE-2022-45934</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1205796</URL>
        <Description>SUSE Bug 1205796</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212292</URL>
        <Description>SUSE Bug 1212292</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
