<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for the Linux Kernel</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2022:0765-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2022-04-07T08:11:35Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2022-04-07T08:11:35Z</InitialReleaseDate>
    <CurrentReleaseDate>2022-04-07T08:11:35Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for the Linux Kernel</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">The SUSE Linux Enterprise 12 SP5 Azure kernel was updated to receive various security and bugfixes.


Transient execution side-channel attacks attacking the Branch History Buffer (BHB),
named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated.

The following security bugs were fixed:

- CVE-2022-0001: Fixed Branch History Injection vulnerability (bsc#1191580).
- CVE-2022-0002: Fixed Intra-Mode Branch Target Injection vulnerability (bsc#1191580).
- CVE-2022-0847: Fixed a vulnerability were a local attackers could overwrite data in arbitrary (read-only) files (bsc#1196584).
- CVE-2022-0617: Fixed a null pointer dereference in UDF file system functionality. A local user could crash the system by triggering udf_file_write_iter() via a malicious UDF image. (bsc#1196079)
- CVE-2022-0644: Fixed a denial of service by a local user. A assertion failure could be triggered in kernel_read_file_from_fd() (bsc#1196155).
- CVE-2021-44879: In gc_data_segment() in fs/f2fs/gc.c, special files were not considered, which lead to a move_data_page NULL pointer dereference (bsc#1195987).
- CVE-2022-24959: Fixed a memory leak in yam_siocdevprivate() in drivers/net/hamradio/yam.c (bsc#1195897).
- CVE-2021-45095: Fixed refcount leak in pep_sock_accept in net/phonet/pep.c (bsc#1193867).
- CVE-2022-0487: A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove() in drivers/memstick/host/rtsx_usb_ms.c (bsc#1194516).
- CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 release_agent feature, which allowed bypassing namespace isolation unexpectedly (bsc#1195543).
- CVE-2022-24448: Fixed an issue in fs/nfs/dir.c. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should have occured, but the server instead returned uninitialized data in the file descriptor (bsc#1195612).

The following non-security bugs were fixed:

- Bluetooth: bfusb: fix division by zero in send path (git-fixes).
- Bluetooth: fix the erroneous flush_work() order (git-fixes).
- EDAC/xgene: Fix deferred probing (bsc#1114648).
- IB/rdmavt: Validate remote_addr during loopback atomic tests (bsc#1114685).
- NFSv4.x: by default serialize open/close operations (bsc#1114893 bsc#1195934). Make this work-around optional
- NFSv42: Do not fail clone() unless the OP_CLONE operation failed (git-fixes).
- NFSv42: Fix pagecache invalidation after COPY/CLONE (git-fixes).
- NFSv4: Handle case where the lookup of a directory fails (git-fixes).
- NFSv4: nfs_atomic_open() can race when looking up a non-regular file (git-fixes).
- PCI: Add function 1 DMA alias quirk for Marvell 88SE9125 SATA controller (git-fixes).
- RDMA/bnxt_re: Fix query SRQ failure (bsc#1050244).
- RDMA/mlx5: Set user priority for DCT (bsc#1103991).
- RDMA/netlink: Add __maybe_unused to static inline in C file (bsc#1046306).
- Replace with an alternative fix for bsc#1185377
- crypto: af_alg - get_page upon reassignment to TX SGL (bsc#1195840).
- cxgb4: fix eeprom len when diagnostics not implemented (bsc#1097585 bsc#1097586 bsc#1097587 bsc#1097588 bsc#1097583 bsc#1097584).
- e1000e: Fix packet loss on Tiger Lake and later (bsc#1158533).
- ext4: avoid trim error on fs with small groups (bsc#1191271).
- fuse: annotate lock in fuse_reverse_inval_entry() (bsc#1195795).
- gve: Add RX context (bsc#1191655).
- gve: Add a jumbo-frame device option (bsc#1191655).
- gve: Add consumed counts to ethtool stats (bsc#1191655).
- gve: Add netif_set_xps_queue call (bsc#1191655).
- gve: Add optional metadata descriptor type GVE_TXD_MTD (bsc#1191655).
- gve: Add rx buffer pagecnt bias (bsc#1191655).
- gve: Allow pageflips on larger pages (bsc#1191655).
- gve: Avoid freeing NULL pointer (bsc#1191655).
- gve: Correct available tx qpl check (bsc#1191655).
- gve: Correct order of processing device options (bsc#1191655).
- gve: DQO: avoid unused variable warnings (bsc#1191655).
- gve: Do lazy cleanup in TX path (bsc#1191655).
- gve: Fix GFP flags when allocing pages (bsc#1191655).
- gve: Implement packet continuation for RX (bsc#1191655).
- gve: Implement suspend/resume/shutdown (bsc#1191655).
- gve: Move the irq db indexes out of the ntfy block struct (bsc#1191655).
- gve: Properly handle errors in gve_assign_qpl (bsc#1191655).
- gve: Recording rx queue before sending to napi (bsc#1191655).
- gve: Switch to use napi_complete_done (bsc#1191655).
- gve: Track RX buffer allocation failures (bsc#1191655).
- gve: Update gve_free_queue_page_list signature (bsc#1191655).
- gve: Use kvcalloc() instead of kvzalloc() (bsc#1191655).
- gve: fix for null pointer dereference (bsc#1191655).
- gve: fix gve_get_stats() (bsc#1191655).
- gve: fix the wrong AdminQ buffer queue index check (bsc#1191655).
- gve: fix unmatched u64_stats_update_end() (bsc#1191655).
- gve: remove memory barrier around seqno (bsc#1191655).
- gve: report 64bit tx_bytes counter from gve_handle_report_stats() (bsc#1191655).
- i40e: Fix changing previously set num_queue_pairs for PFs (bsc#1094978).
- i40e: Fix correct max_pkt_size on VF RX queue (bsc#1101816 ).
- i40e: Fix creation of first queue by omitting it if is not power of two (bsc#1101816).
- i40e: Fix display error code in dmesg (bsc#1109837 bsc#1111981 ).
- i40e: Fix for displaying message regarding NVM version (jsc#SLE-4797).
- i40e: Fix freeing of uninitialized misc IRQ vector (bsc#1101816 ).
- i40e: Fix ping is lost after configuring ADq on VF (bsc#1094978).
- i40e: Fix pre-set max number of queues for VF (bsc#1111981 ).
- i40e: Increase delay to 1 s after global EMP reset (bsc#1101816 ).
- iavf: Fix limit of total number of queues to active queues of VF (bsc#1111981).
- iavf: prevent accidental free of filter structure (bsc#1111981 ).
- ibmvnic: Allow queueing resets during probe (bsc#1196516 ltc#196391).
- ibmvnic: Update driver return codes (bsc#1196516 ltc#196391).
- ibmvnic: clear fop when retrying probe (bsc#1196516 ltc#196391).
- ibmvnic: complete init_done on transport events (bsc#1196516 ltc#196391).
- ibmvnic: define flush_reset_queue helper (bsc#1196516 ltc#196391).
- ibmvnic: free reset-work-item when flushing (bsc#1196516 ltc#196391).
- ibmvnic: init init_done_rc earlier (bsc#1196516 ltc#196391).
- ibmvnic: initialize rc before completing wait (bsc#1196516 ltc#196391).
- ibmvnic: register netdev after init of adapter (bsc#1196516 ltc#196391).
- ibmvnic: schedule failover only if vioctl fails (bsc#1196400 ltc#195815).
- ice: Delete always true check of PF pointer (bsc#1118661 ).
- ice: ignore dropped packets during init (bsc#1118661 ).
- igb: Fix removal of unicast MAC filters of VFs (bsc#1117495).
- ixgbevf: Require large buffers for build_skb on 82599VF (bsc#1101674).
- kabi: Hide changes to s390/AP structures (jsc#SLE-20809).
- lib/iov_iter: initialize 'flags' in new pipe_buffer (bsc#1196584).
- mqprio: Correct stats in mqprio_dump_class_stats() (bsc#1109837).
- net/ibmvnic: Cleanup workaround doing an EOI after partition migration (bsc#1089644 ltc#166495 ltc#165544 git-fixes).
- net: Prevent infinite while loop in skb_tx_hash() (bsc#1109837).
- net: ena: Fix error handling when calculating max IO queues number (bsc#1174852).
- net: ena: Fix undefined state when tx request id is out of bounds (bsc#1174852).
- net: marvell: mvpp2: Fix the computation of shared CPUs (bsc#1119113).
- net: phylink: avoid mvneta warning when setting pause parameters (bsc#1119113).
- net: usb: pegasus: Do not drop long Ethernet frames (git-fixes).
- nfsd: fix use-after-free due to delegation race (git-fixes).
- phylib: fix potential use-after-free (bsc#1119113).
- platform/mellanox: mlxreg-io: Fix argument base in kstrtou32() call (bsc#1112374).
- powerpc/64s: Fix debugfs_simple_attr.cocci warnings (bsc#1157038 bsc#1157923 ltc#182612 git-fixes).
- powerpc/pseries/ddw: Revert 'Extend upper limit for huge DMA window for persistent memory' (bsc#1195995 ltc#196394).
- powerpc/pseries: read the lpar name from the firmware (bsc#1187716 ltc#193451).
- powerpc: add link stack flush mitigation status in debugfs (bsc#1157038 bsc#1157923 ltc#182612 git-fixes).
- qed: Handle management FW error (git-fixes).
- qed: rdma - do not wait for resources under hw error recovery flow (bsc#1136460 jsc#SLE-4691 bsc#1136461 jsc#SLE-4692).
- rndis_host: support Hytera digital radios (git-fixes).
- s390/AP: support new dynamic AP bus size limit (jsc#SLE-20809).
- s390/ap: rework crypto config info and default domain code (jsc#SLE-20809).
- s390/cpumf: Support for CPU Measurement Facility CSVN 7 (bsc#1195080 LTC#196090).
- s390/cpumf: Support for CPU Measurement Sampling Facility LS bit (bsc#1195080 LTC#196090).
- s390/hypfs: include z/VM guests with access control group set (bsc#1195638 LTC#196354).
- scsi: bnx2fc: Flush destroy_work queue before calling bnx2fc_interface_put() (git-fixes).
- scsi: lpfc: Fix pt2pt NVMe PRLI reject LOGO loop (bsc#1189126).
- scsi: lpfc: Terminate string in lpfc_debugfs_nvmeio_trc_write() (git-fixes).
- scsi: nsp_cs: Check of ioremap return value (git-fixes).
- scsi: qedf: Fix potential dereference of NULL pointer (git-fixes).
- scsi: qla2xxx: Add devids and conditionals for 28xx (bsc#1195823).
- scsi: qla2xxx: Add ql2xnvme_queues module param to configure number of NVMe queues (bsc#1195823).
- scsi: qla2xxx: Add qla2x00_async_done() for async routines (bsc#1195823).
- scsi: qla2xxx: Add retry for exec firmware (bsc#1195823).
- scsi: qla2xxx: Check for firmware dump already collected (bsc#1195823).
- scsi: qla2xxx: Fix T10 PI tag escape and IP guard options for 28XX adapters (bsc#1195823).
- scsi: qla2xxx: Fix device reconnect in loop topology (bsc#1195823).
- scsi: qla2xxx: Fix premature hw access after PCI error (bsc#1195823).
- scsi: qla2xxx: Fix scheduling while atomic (bsc#1195823).
- scsi: qla2xxx: Fix stuck session in gpdb (bsc#1195823).
- scsi: qla2xxx: Fix unmap of already freed sgl (bsc#1195823).
- scsi: qla2xxx: Fix warning for missing error code (bsc#1195823).
- scsi: qla2xxx: Fix warning message due to adisc being flushed (bsc#1195823).
- scsi: qla2xxx: Fix wrong FDMI data for 64G adapter (bsc#1195823).
- scsi: qla2xxx: Implement ref count for SRB (bsc#1195823).
- scsi: qla2xxx: Refactor asynchronous command initialization (bsc#1195823).
- scsi: qla2xxx: Remove a declaration (bsc#1195823).
- scsi: qla2xxx: Remove unused qla_sess_op_cmd_list from scsi_qla_host_t (bsc#1195823).
- scsi: qla2xxx: Return -ENOMEM if kzalloc() fails (bsc#1195823).
- scsi: qla2xxx: Suppress a kernel complaint in qla_create_qpair() (bsc#1195823).
- scsi: qla2xxx: Update version to 10.02.07.200-k (bsc#1195823).
- scsi: qla2xxx: Update version to 10.02.07.300-k (bsc#1195823).
- scsi: qla2xxx: edif: Fix clang warning (bsc#1195823).
- scsi: qla2xxx: edif: Fix inconsistent check of db_flags (bsc#1195823).
- scsi: qla2xxx: edif: Reduce connection thrash (bsc#1195823).
- scsi: qla2xxx: edif: Replace list_for_each_safe with list_for_each_entry_safe (bsc#1195823).
- scsi: qla2xxx: edif: Tweak trace message (bsc#1195823).
- scsi: scsi_debug: Sanity check block descriptor length in resp_mode_select() (git-fixes).
- scsi: ufs: Fix race conditions related to driver data (git-fixes).
- scsi: zfcp: Fix failed recovery on gone remote port with non-NPIV FCP devices (bsc#1195377 LTC#196245).
- sunrpc/auth_gss: support timeout on gss upcalls (bsc#1193857).
- tracing: Dump stacktrace trigger to the corresponding instance (git-fixes).
- tracing: Have traceon and traceoff trigger honor the instance (git-fixes).
- usb: common: ulpi: Fix crash in ulpi_match() (git-fixes).
- usb: typec: tcpm: Do not disconnect while receiving VBUS off (git-fixes).
- xfrm: fix MTU regression (bsc#1185377, bsc#1194048).
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">Image SLES12-SP5-Azure-Basic-On-Demand-2022-765,Image SLES12-SP5-Azure-HPC-On-Demand-2022-765,Image SLES12-SP5-Azure-Standard-On-Demand-2022-765,SUSE-2022-765,SUSE-SLE-SERVER-12-SP5-2022-765</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220765-1/</URL>
      <Description>Link for SUSE-SU-2022:0765-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2022-March/010400.html</URL>
      <Description>E-Mail link for SUSE-SU-2022:0765-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1046306</URL>
      <Description>SUSE Bug 1046306</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1050244</URL>
      <Description>SUSE Bug 1050244</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1089644</URL>
      <Description>SUSE Bug 1089644</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1094978</URL>
      <Description>SUSE Bug 1094978</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1097583</URL>
      <Description>SUSE Bug 1097583</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1097584</URL>
      <Description>SUSE Bug 1097584</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1097585</URL>
      <Description>SUSE Bug 1097585</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1097586</URL>
      <Description>SUSE Bug 1097586</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1097587</URL>
      <Description>SUSE Bug 1097587</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1097588</URL>
      <Description>SUSE Bug 1097588</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1101674</URL>
      <Description>SUSE Bug 1101674</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1101816</URL>
      <Description>SUSE Bug 1101816</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1103991</URL>
      <Description>SUSE Bug 1103991</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1109837</URL>
      <Description>SUSE Bug 1109837</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1111981</URL>
      <Description>SUSE Bug 1111981</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1112374</URL>
      <Description>SUSE Bug 1112374</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1114648</URL>
      <Description>SUSE Bug 1114648</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1114685</URL>
      <Description>SUSE Bug 1114685</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1114893</URL>
      <Description>SUSE Bug 1114893</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1117495</URL>
      <Description>SUSE Bug 1117495</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1118661</URL>
      <Description>SUSE Bug 1118661</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1119113</URL>
      <Description>SUSE Bug 1119113</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1136460</URL>
      <Description>SUSE Bug 1136460</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1136461</URL>
      <Description>SUSE Bug 1136461</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1157038</URL>
      <Description>SUSE Bug 1157038</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1157923</URL>
      <Description>SUSE Bug 1157923</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1158533</URL>
      <Description>SUSE Bug 1158533</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1174852</URL>
      <Description>SUSE Bug 1174852</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1185377</URL>
      <Description>SUSE Bug 1185377</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1185973</URL>
      <Description>SUSE Bug 1185973</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1187716</URL>
      <Description>SUSE Bug 1187716</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1189126</URL>
      <Description>SUSE Bug 1189126</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1191271</URL>
      <Description>SUSE Bug 1191271</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1191580</URL>
      <Description>SUSE Bug 1191580</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1191655</URL>
      <Description>SUSE Bug 1191655</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1193857</URL>
      <Description>SUSE Bug 1193857</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1193867</URL>
      <Description>SUSE Bug 1193867</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1194048</URL>
      <Description>SUSE Bug 1194048</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1194516</URL>
      <Description>SUSE Bug 1194516</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1195080</URL>
      <Description>SUSE Bug 1195080</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1195377</URL>
      <Description>SUSE Bug 1195377</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1195536</URL>
      <Description>SUSE Bug 1195536</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1195543</URL>
      <Description>SUSE Bug 1195543</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1195612</URL>
      <Description>SUSE Bug 1195612</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1195638</URL>
      <Description>SUSE Bug 1195638</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1195795</URL>
      <Description>SUSE Bug 1195795</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1195823</URL>
      <Description>SUSE Bug 1195823</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1195840</URL>
      <Description>SUSE Bug 1195840</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1195897</URL>
      <Description>SUSE Bug 1195897</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1195908</URL>
      <Description>SUSE Bug 1195908</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1195934</URL>
      <Description>SUSE Bug 1195934</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1195949</URL>
      <Description>SUSE Bug 1195949</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1195987</URL>
      <Description>SUSE Bug 1195987</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1195995</URL>
      <Description>SUSE Bug 1195995</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1196079</URL>
      <Description>SUSE Bug 1196079</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1196155</URL>
      <Description>SUSE Bug 1196155</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1196400</URL>
      <Description>SUSE Bug 1196400</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1196516</URL>
      <Description>SUSE Bug 1196516</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1196584</URL>
      <Description>SUSE Bug 1196584</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1196612</URL>
      <Description>SUSE Bug 1196612</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-44879/</URL>
      <Description>SUSE CVE CVE-2021-44879 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2021-45095/</URL>
      <Description>SUSE CVE CVE-2021-45095 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-0001/</URL>
      <Description>SUSE CVE CVE-2022-0001 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-0002/</URL>
      <Description>SUSE CVE CVE-2022-0002 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-0487/</URL>
      <Description>SUSE CVE CVE-2022-0487 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-0492/</URL>
      <Description>SUSE CVE CVE-2022-0492 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-0617/</URL>
      <Description>SUSE CVE CVE-2022-0617 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-0644/</URL>
      <Description>SUSE CVE CVE-2022-0644 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-0847/</URL>
      <Description>SUSE CVE CVE-2022-0847 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-24448/</URL>
      <Description>SUSE CVE CVE-2022-24448 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-24959/</URL>
      <Description>SUSE CVE CVE-2022-24959 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="Image SLES12-SP5-Azure-Basic-On-Demand">
      <Branch Type="Product Name" Name="Image SLES12-SP5-Azure-Basic-On-Demand">
        <FullProductName ProductID="Image SLES12-SP5-Azure-Basic-On-Demand">Image SLES12-SP5-Azure-Basic-On-Demand</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES12-SP5-Azure-HPC-On-Demand">
      <Branch Type="Product Name" Name="Image SLES12-SP5-Azure-HPC-On-Demand">
        <FullProductName ProductID="Image SLES12-SP5-Azure-HPC-On-Demand">Image SLES12-SP5-Azure-HPC-On-Demand</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES12-SP5-Azure-Standard-On-Demand">
      <Branch Type="Product Name" Name="Image SLES12-SP5-Azure-Standard-On-Demand">
        <FullProductName ProductID="Image SLES12-SP5-Azure-Standard-On-Demand">Image SLES12-SP5-Azure-Standard-On-Demand</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP5">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP5">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5" CPE="cpe:/o:suse:sles:12:sp5">SUSE Linux Enterprise Server 12 SP5</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
        <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP5" CPE="cpe:/o:suse:sles_sap:12:sp5">SUSE Linux Enterprise Server for SAP Applications 12 SP5</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="kernel-azure-4.12.14-16.91.1">
      <FullProductName ProductID="kernel-azure-4.12.14-16.91.1">kernel-azure-4.12.14-16.91.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="cluster-md-kmp-azure-4.12.14-16.91.1">
      <FullProductName ProductID="cluster-md-kmp-azure-4.12.14-16.91.1">cluster-md-kmp-azure-4.12.14-16.91.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dlm-kmp-azure-4.12.14-16.91.1">
      <FullProductName ProductID="dlm-kmp-azure-4.12.14-16.91.1">dlm-kmp-azure-4.12.14-16.91.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gfs2-kmp-azure-4.12.14-16.91.1">
      <FullProductName ProductID="gfs2-kmp-azure-4.12.14-16.91.1">gfs2-kmp-azure-4.12.14-16.91.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-azure-base-4.12.14-16.91.1">
      <FullProductName ProductID="kernel-azure-base-4.12.14-16.91.1">kernel-azure-base-4.12.14-16.91.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-azure-devel-4.12.14-16.91.1">
      <FullProductName ProductID="kernel-azure-devel-4.12.14-16.91.1">kernel-azure-devel-4.12.14-16.91.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-azure-extra-4.12.14-16.91.1">
      <FullProductName ProductID="kernel-azure-extra-4.12.14-16.91.1">kernel-azure-extra-4.12.14-16.91.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-azure-kgraft-devel-4.12.14-16.91.1">
      <FullProductName ProductID="kernel-azure-kgraft-devel-4.12.14-16.91.1">kernel-azure-kgraft-devel-4.12.14-16.91.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-devel-azure-4.12.14-16.91.1">
      <FullProductName ProductID="kernel-devel-azure-4.12.14-16.91.1">kernel-devel-azure-4.12.14-16.91.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-source-azure-4.12.14-16.91.1">
      <FullProductName ProductID="kernel-source-azure-4.12.14-16.91.1">kernel-source-azure-4.12.14-16.91.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-syms-azure-4.12.14-16.91.1">
      <FullProductName ProductID="kernel-syms-azure-4.12.14-16.91.1">kernel-syms-azure-4.12.14-16.91.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kselftests-kmp-azure-4.12.14-16.91.1">
      <FullProductName ProductID="kselftests-kmp-azure-4.12.14-16.91.1">kselftests-kmp-azure-4.12.14-16.91.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ocfs2-kmp-azure-4.12.14-16.91.1">
      <FullProductName ProductID="ocfs2-kmp-azure-4.12.14-16.91.1">ocfs2-kmp-azure-4.12.14-16.91.1</FullProductName>
    </Branch>
    <Relationship ProductReference="kernel-azure-4.12.14-16.91.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES12-SP5-Azure-Basic-On-Demand">
      <FullProductName ProductID="Image SLES12-SP5-Azure-Basic-On-Demand:kernel-azure-4.12.14-16.91.1">kernel-azure-4.12.14-16.91.1 as a component of Image SLES12-SP5-Azure-Basic-On-Demand</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-azure-4.12.14-16.91.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES12-SP5-Azure-HPC-On-Demand">
      <FullProductName ProductID="Image SLES12-SP5-Azure-HPC-On-Demand:kernel-azure-4.12.14-16.91.1">kernel-azure-4.12.14-16.91.1 as a component of Image SLES12-SP5-Azure-HPC-On-Demand</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-azure-4.12.14-16.91.1" RelationType="Default Component Of" RelatesToProductReference="Image SLES12-SP5-Azure-Standard-On-Demand">
      <FullProductName ProductID="Image SLES12-SP5-Azure-Standard-On-Demand:kernel-azure-4.12.14-16.91.1">kernel-azure-4.12.14-16.91.1 as a component of Image SLES12-SP5-Azure-Standard-On-Demand</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-azure-4.12.14-16.91.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5:kernel-azure-4.12.14-16.91.1">kernel-azure-4.12.14-16.91.1 as a component of SUSE Linux Enterprise Server 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-azure-base-4.12.14-16.91.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5:kernel-azure-base-4.12.14-16.91.1">kernel-azure-base-4.12.14-16.91.1 as a component of SUSE Linux Enterprise Server 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-azure-devel-4.12.14-16.91.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5:kernel-azure-devel-4.12.14-16.91.1">kernel-azure-devel-4.12.14-16.91.1 as a component of SUSE Linux Enterprise Server 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-devel-azure-4.12.14-16.91.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5:kernel-devel-azure-4.12.14-16.91.1">kernel-devel-azure-4.12.14-16.91.1 as a component of SUSE Linux Enterprise Server 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source-azure-4.12.14-16.91.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5:kernel-source-azure-4.12.14-16.91.1">kernel-source-azure-4.12.14-16.91.1 as a component of SUSE Linux Enterprise Server 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-syms-azure-4.12.14-16.91.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP5:kernel-syms-azure-4.12.14-16.91.1">kernel-syms-azure-4.12.14-16.91.1 as a component of SUSE Linux Enterprise Server 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-azure-4.12.14-16.91.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-4.12.14-16.91.1">kernel-azure-4.12.14-16.91.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-azure-base-4.12.14-16.91.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-base-4.12.14-16.91.1">kernel-azure-base-4.12.14-16.91.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-azure-devel-4.12.14-16.91.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-devel-4.12.14-16.91.1">kernel-azure-devel-4.12.14-16.91.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-devel-azure-4.12.14-16.91.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-azure-4.12.14-16.91.1">kernel-devel-azure-4.12.14-16.91.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source-azure-4.12.14-16.91.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-azure-4.12.14-16.91.1">kernel-source-azure-4.12.14-16.91.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-syms-azure-4.12.14-16.91.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server for SAP Applications 12 SP5">
      <FullProductName ProductID="SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-azure-4.12.14-16.91.1">kernel-syms-azure-4.12.14-16.91.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP5</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In gc_data_segment in fs/f2fs/gc.c in the Linux kernel before 5.16.3, special files are not considered, leading to a move_data_page NULL pointer dereference.</Note>
    </Notes>
    <CVE>CVE-2021-44879</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES12-SP5-Azure-Basic-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>Image SLES12-SP5-Azure-HPC-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>Image SLES12-SP5-Azure-Standard-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-base-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-devel-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-devel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-source-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-syms-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-base-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-devel-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-azure-4.12.14-16.91.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.3</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:N/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220765-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-44879.html</URL>
        <Description>CVE-2021-44879</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1195987</URL>
        <Description>SUSE Bug 1195987</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">pep_sock_accept in net/phonet/pep.c in the Linux kernel through 5.15.8 has a refcount leak.</Note>
    </Notes>
    <CVE>CVE-2021-45095</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES12-SP5-Azure-Basic-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>Image SLES12-SP5-Azure-HPC-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>Image SLES12-SP5-Azure-Standard-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-base-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-devel-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-devel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-source-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-syms-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-base-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-devel-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-azure-4.12.14-16.91.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.1</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:P/I:N/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>4.3</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220765-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2021-45095.html</URL>
        <Description>CVE-2021-45095</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1193867</URL>
        <Description>SUSE Bug 1193867</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.</Note>
    </Notes>
    <CVE>CVE-2022-0001</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES12-SP5-Azure-Basic-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>Image SLES12-SP5-Azure-HPC-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>Image SLES12-SP5-Azure-Standard-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-base-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-devel-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-devel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-source-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-syms-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-base-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-devel-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-azure-4.12.14-16.91.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.1</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:P/I:N/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.6</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220765-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-0001.html</URL>
        <Description>CVE-2022-0001</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1191580</URL>
        <Description>SUSE Bug 1191580</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1196901</URL>
        <Description>SUSE Bug 1196901</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.</Note>
    </Notes>
    <CVE>CVE-2022-0002</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES12-SP5-Azure-Basic-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>Image SLES12-SP5-Azure-HPC-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>Image SLES12-SP5-Azure-Standard-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-base-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-devel-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-devel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-source-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-syms-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-base-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-devel-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-azure-4.12.14-16.91.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.1</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:P/I:N/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.6</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220765-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-0002.html</URL>
        <Description>CVE-2022-0002</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1191580</URL>
        <Description>SUSE Bug 1191580</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1196901</URL>
        <Description>SUSE Bug 1196901</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove in drivers/memstick/host/rtsx_usb_ms.c in memstick in the Linux kernel. In this flaw, a local attacker with a user privilege may impact system Confidentiality. This flaw affects kernel versions prior to 5.14 rc1.</Note>
    </Notes>
    <CVE>CVE-2022-0487</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES12-SP5-Azure-Basic-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>Image SLES12-SP5-Azure-HPC-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>Image SLES12-SP5-Azure-Standard-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-base-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-devel-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-devel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-source-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-syms-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-base-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-devel-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-azure-4.12.14-16.91.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.1</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:P/I:N/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220765-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-0487.html</URL>
        <Description>CVE-2022-0487</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1194516</URL>
        <Description>SUSE Bug 1194516</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1195949</URL>
        <Description>SUSE Bug 1195949</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1198615</URL>
        <Description>SUSE Bug 1198615</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.</Note>
    </Notes>
    <CVE>CVE-2022-0492</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES12-SP5-Azure-Basic-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>Image SLES12-SP5-Azure-HPC-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>Image SLES12-SP5-Azure-Standard-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-base-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-devel-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-devel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-source-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-syms-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-base-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-devel-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-azure-4.12.14-16.91.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.9</BaseScoreV2>
        <VectorV2>AV:L/AC:M/Au:N/C:C/I:C/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220765-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-0492.html</URL>
        <Description>CVE-2022-0492</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1195543</URL>
        <Description>SUSE Bug 1195543</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1195908</URL>
        <Description>SUSE Bug 1195908</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1196612</URL>
        <Description>SUSE Bug 1196612</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1196776</URL>
        <Description>SUSE Bug 1196776</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1198615</URL>
        <Description>SUSE Bug 1198615</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1199255</URL>
        <Description>SUSE Bug 1199255</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1199615</URL>
        <Description>SUSE Bug 1199615</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1200084</URL>
        <Description>SUSE Bug 1200084</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw null pointer dereference in the Linux kernel UDF file system functionality was found in the way user triggers udf_file_write_iter function for the malicious UDF image. A local user could use this flaw to crash the system. Actual from Linux kernel 4.2-rc1 till 5.17-rc2.</Note>
    </Notes>
    <CVE>CVE-2022-0617</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES12-SP5-Azure-Basic-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>Image SLES12-SP5-Azure-HPC-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>Image SLES12-SP5-Azure-Standard-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-base-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-devel-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-devel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-source-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-syms-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-base-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-devel-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-azure-4.12.14-16.91.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.9</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220765-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-0617.html</URL>
        <Description>CVE-2022-0617</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1196079</URL>
        <Description>SUSE Bug 1196079</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.</Note>
    </Notes>
    <CVE>CVE-2022-0644</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES12-SP5-Azure-Basic-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>Image SLES12-SP5-Azure-HPC-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>Image SLES12-SP5-Azure-Standard-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-base-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-devel-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-devel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-source-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-syms-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-base-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-devel-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-azure-4.12.14-16.91.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>5.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220765-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-0644.html</URL>
        <Description>CVE-2022-0644</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1196155</URL>
        <Description>SUSE Bug 1196155</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.</Note>
    </Notes>
    <CVE>CVE-2022-0847</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES12-SP5-Azure-Basic-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>Image SLES12-SP5-Azure-HPC-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>Image SLES12-SP5-Azure-Standard-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-base-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-devel-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-devel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-source-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-syms-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-base-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-devel-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-azure-4.12.14-16.91.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>7.2</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:C/I:C/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>7.8</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220765-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-0847.html</URL>
        <Description>CVE-2022-0847</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1196584</URL>
        <Description>SUSE Bug 1196584</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1196601</URL>
        <Description>SUSE Bug 1196601</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="10">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An issue was discovered in fs/nfs/dir.c in the Linux kernel before 5.16.5. If an application sets the O_DIRECTORY flag, and tries to open a regular file, nfs_atomic_open() performs a regular lookup. If a regular file is found, ENOTDIR should occur, but the server instead returns uninitialized data in the file descriptor.</Note>
    </Notes>
    <CVE>CVE-2022-24448</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES12-SP5-Azure-Basic-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>Image SLES12-SP5-Azure-HPC-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>Image SLES12-SP5-Azure-Standard-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-base-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-devel-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-devel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-source-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-syms-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-base-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-devel-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-azure-4.12.14-16.91.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>1.9</BaseScoreV2>
        <VectorV2>AV:L/AC:M/Au:N/C:P/I:N/A:N</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220765-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-24448.html</URL>
        <Description>CVE-2022-24448</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1195612</URL>
        <Description>SUSE Bug 1195612</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="11">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An issue was discovered in the Linux kernel before 5.16.5. There is a memory leak in yam_siocdevprivate in drivers/net/hamradio/yam.c.</Note>
    </Notes>
    <CVE>CVE-2022-24959</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES12-SP5-Azure-Basic-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>Image SLES12-SP5-Azure-HPC-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>Image SLES12-SP5-Azure-Standard-On-Demand:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-base-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-azure-devel-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-devel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-source-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP5:kernel-syms-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-base-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-azure-devel-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-devel-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-source-azure-4.12.14-16.91.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server for SAP Applications 12 SP5:kernel-syms-azure-4.12.14-16.91.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.1</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20220765-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-24959.html</URL>
        <Description>CVE-2022-24959</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1195897</URL>
        <Description>SUSE Bug 1195897</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
