<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for the Linux Kernel</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2022:3998-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2022-11-15T16:07:48Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2022-11-15T16:07:48Z</InitialReleaseDate>
    <CurrentReleaseDate>2022-11-15T16:07:48Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for the Linux Kernel</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">
The SUSE Linux Enterprise 15-SP4 Azure kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2022-1882: Fixed a use-after-free flaw in free_pipe_info() that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1199904).
- CVE-2022-2153: Fixed vulnerability in KVM that could allow an unprivileged local attacker on the host to cause DoS (bnc#1200788).
- CVE-2022-2964, CVE-2022-28748: Fixed memory corruption issues in ax88179_178a devices (bnc#1202686 bsc#1196018).
- CVE-2022-2978: Fixed use-after-free in the NILFS file system that could lead to local privilege escalation or DoS (bnc#1202700).
- CVE-2022-3169: Fixed a denial of service flaw which occurs when consecutive requests to NVME_IOCTL_RESET and the NVME_IOCTL_SUBSYS_RESET are sent (bnc#1203290).
- CVE-2022-33981: Fixed a use-after-free in floppy driver (bnc#1200692).
- CVE-2022-3424: Fixed use-after-free in gru_set_context_option(), gru_fault() and gru_handle_user_call_os() that could lead to kernel panic (bsc#1204166).
- CVE-2022-3435: Fixed an out-of-bounds read in fib_nh_match() of the file net/ipv4/fib_semantics.c (bsc#1204171).
- CVE-2022-3521: Fixed race condition in kcm_tx_work() in net/kcm/kcmsock.c (bnc#1204355).
- CVE-2022-3524: Fixed memory leak in ipv6_renew_options() in the IPv6 handler (bnc#1204354).
- CVE-2022-3526: Fixed a memory leak in macvlan_handle_frame() from drivers/net/macvlan.c (bnc#1204353).
- CVE-2022-3535: Fixed memory leak in mvpp2_dbgfs_port_init() in drivers/net/ethernet/marvell/mvpp2/mvpp2_debugfs.c (bnc#1204417).
- CVE-2022-3542: Fixed memory leak in bnx2x_tpa_stop() in drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c (bnc#1204402).
- CVE-2022-3545: Fixed use-after-free in area_cache_get() in drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c (bnc#1204415).
- CVE-2022-3565: Fixed use-after-free in del_timer() in drivers/isdn/mISDN/l1oip_core.c (bnc#1204431).
- CVE-2022-3577: Fixed out-of-bounds memory write flaw in bigben device driver that could lead to local privilege escalation or DoS (bnc#1204470).
- CVE-2022-3586: Fixed use-after-free in socket buffer (SKB) that could allow a local unprivileged user to cause a denial of service (bnc#1204439).
- CVE-2022-3594: Fixed excessive data logging in intr_callback() in drivers/net/usb/r8152.c (bnc#1204479).
- CVE-2022-3619: Fixed memory leak in l2cap_recv_acldata() in net/bluetooth/l2cap_core.c of the component (bnc#1204569).
- CVE-2022-3621: Fixed null pointer dereference in nilfs_bmap_lookup_at_level() in fs/nilfs2/inode.c (bnc#1204574).
- CVE-2022-3625: Fixed use-after-free in devlink_param_set()/devlink_param_get() in net/core/devlink.c (bnc#1204637).
- CVE-2022-3628: Fixed potential buffer overflow in brcmf_fweh_event_worker() in wifi/brcmfmac (bsc#1204868).
- CVE-2022-3629: Fixed memory leak in vsock_connect() in net/vmw_vsock/af_vsock.c (bnc#1204635).
- CVE-2022-3633: Fixed memory leak in j1939_session_destroy() in net/can/j1939/transport.c (bnc#1204650).
- CVE-2022-3640: Fixed use-after-free in l2cap_conn_del() in net/bluetooth/l2cap_core.c (bnc#1204619).
- CVE-2022-3646: Fixed memory leak in nilfs_attach_log_writer() in fs/nilfs2/segment.c (bnc#1204646).
- CVE-2022-3649: Fixed use-after-free in nilfs_new_inode() in fs/nilfs2/inode.c (bnc#1204647).
- CVE-2022-40476: Fixed a null pointer dereference in fs/io_uring.c (bnc#1203435).
- CVE-2022-40768: Fixed information leak in the scsi driver which allowed local users to obtain sensitive information from kernel memory (bnc#1203514).
- CVE-2022-41674: Fixed a DoS issue where kernel can crash on the reception of specific WiFi Frames (bsc#1203770).
- CVE-2022-42703: Fixed use-after-free in mm/rmap.c related to leaf anon_vma double reuse (bnc#1204168).
- CVE-2022-42719: Fixed MBSSID parsing use-after-free. (bsc#1204051)
- CVE-2022-42720: Fixed BSS refcounting bugs. (bsc#1204059)
- CVE-2022-42721: Avoid nontransmitted BSS list corruption. (bsc#1204060)
- CVE-2022-42722: Fixed crash in beacon protection for P2P-device. (bsc#1204125)
- CVE-2022-43750: Fixed vulnerability in usbmon that allowed a user-space client to corrupt the monitor's internal memory (bnc#1204653).

The following non-security bugs were fixed:

- ACPI: APEI: do not add task_work to kernel thread to avoid memory leak (git-fixes).
- ACPI: HMAT: Release platform device in case of platform_device_add_data() fails (git-fixes).
- ACPI: extlog: Handle multiple records (git-fixes).
- ACPI: tables: FPDT: Do not call acpi_os_map_memory() on invalid phys address (git-fixes).
- ACPI: video: Add Toshiba Satellite/Portege Z830 quirk (git-fixes).
- ACPI: video: Make backlight class device registration a separate step (v2) (git-fixes).
- ACPI: x86: Add a quirk for Dell Inspiron 14 2-in-1 for StorageD3Enable (git-fixes).
- ALSA: Use del_timer_sync() before freeing timer (git-fixes).
- ALSA: ac97: fix possible memory leak in snd_ac97_dev_register() (git-fixes).
- ALSA: aoa: Fix I2S device accounting (git-fixes).
- ALSA: aoa: i2sbus: fix possible memory leak in i2sbus_add_dev() (git-fixes).
- ALSA: asihpi - Remove useless code in hpi_meter_get_peak() (git-fixes).
- ALSA: au88x0: use explicitly signed char (git-fixes).
- ALSA: dmaengine: increment buffer pointer atomically (git-fixes).
- ALSA: hda/cs_dsp_ctl: Fix mutex inversion when creating controls (bsc#1203699).
- ALSA: hda/hdmi: Do not skip notification handling during PM operation (git-fixes).
- ALSA: hda/hdmi: Fix the converter allocation for the silent stream (git-fixes).
- ALSA: hda/hdmi: Fix the converter reuse for the silent stream (git-fixes).
- ALSA: hda/hdmi: change type for the 'assigned' variable (git-fixes).
- ALSA: hda/realtek: Add Intel Reference SSID to support headset keys (git-fixes).
- ALSA: hda/realtek: Add another HP ZBook G9 model quirks (bsc#1203699).
- ALSA: hda/realtek: Add quirk for ASUS GV601R laptop (git-fixes).
- ALSA: hda/realtek: Add quirk for ASUS Zenbook using CS35L41 (bsc#1203922).
- ALSA: hda/realtek: Correct pin configs for ASUS G533Z (git-fixes).
- ALSA: hda/realtek: remove ALC289_FIXUP_DUAL_SPK for Dell 5530 (git-fixes).
- ALSA: hda: Fix position reporting on Poulsbo (git-fixes).
- ALSA: hda: cs35l41: Remove suspend/resume hda hooks (bsc#1203699).
- ALSA: hda: cs35l41: Support System Suspend (bsc#1203699).
- ALSA: hda: hda_cs_dsp_ctl: Ensure pwr_lock is held before reading/writing controls (bsc#1203699).
- ALSA: hda: hda_cs_dsp_ctl: Minor clean and redundant code removal (bsc#1203699).
- ALSA: hiface: fix repeated words in comments (git-fixes).
- ALSA: line6: Replace sprintf() with sysfs_emit() (git-fixes).
- ALSA: line6: remove line6_set_raw declaration (git-fixes).
- ALSA: oss: Fix potential deadlock at unregistration (git-fixes).
- ALSA: rawmidi: Drop register_mutex in snd_rawmidi_free() (git-fixes).
- ALSA: rme9652: use explicitly signed char (git-fixes).
- ALSA: scarlett2: Add Focusrite Clarett+ 8Pre support (git-fixes).
- ALSA: scarlett2: Add support for the internal 'standalone' switch (git-fixes).
- ALSA: scarlett2: Split scarlett2_config_items[] into 3 sections (git-fixes).
- ALSA: usb-audio: Add mixer mapping for Gigabyte B450/550 Mobos (git-fixes).
- ALSA: usb-audio: Add quirk to enable Avid Mbox 3 support (git-fixes).
- ALSA: usb-audio: Add quirks for M-Audio Fast Track C400/600 (git-fixes).
- ALSA: usb-audio: Fix NULL dererence at error path (git-fixes).
- ALSA: usb-audio: Fix last interface check for registration (git-fixes).
- ALSA: usb-audio: Fix potential memory leaks (git-fixes).
- ALSA: usb-audio: Fix regression with Dell Dock jack detection (bsc#1204719).
- ALSA: usb-audio: Register card at the last interface (git-fixes).
- ALSA: usb-audio: make read-only array marker static const (git-fixes).
- ALSA: usb-audio: remove redundant assignment to variable c (git-fixes).
- ALSA: usb-audio: scarlett2: Use struct_size() helper in scarlett2_usb() (git-fixes).
- ALSA: usb/6fire: fix repeated words in comments (git-fixes).
- ARM: 9242/1: kasan: Only map modules if CONFIG_KASAN_VMALLOC=n (git-fixes).
- ARM: 9244/1: dump: Fix wrong pg_level in walk_pmd() (git-fixes).
- ARM: 9247/1: mm: set readonly for MT_MEMORY_RO with ARM_LPAE (git-fixes).
- ARM: Drop CMDLINE_* dependency on ATAGS (git-fixes).
- ARM: decompressor: Include .data.rel.ro.local (git-fixes).
- ARM: defconfig: clean up multi_v4t and multi_v5 configs (git-fixes).
- ARM: defconfig: drop CONFIG_PTP_1588_CLOCK=y (git-fixes).
- ARM: defconfig: drop CONFIG_SERIAL_OMAP references (git-fixes).
- ARM: defconfig: drop CONFIG_USB_FSL_USB2 (git-fixes).
- ARM: dts: armada-38x: Add gpio-ranges for pin muxing (git-fixes).
- ARM: dts: exynos: correct s5k6a3 reset polarity on Midas family (git-fixes).
- ARM: dts: exynos: fix polarity of VBUS GPIO of Origen (git-fixes).
- ARM: dts: fix Moxa SDIO 'compatible', remove 'sdhci' misnomer (git-fixes).
- ARM: dts: imx6dl: add missing properties for sram (git-fixes).
- ARM: dts: imx6q: add missing properties for sram (git-fixes).
- ARM: dts: imx6qdl-gw59{10,13}: fix user pushbutton GPIO offset (git-fixes).
- ARM: dts: imx6qdl-kontron-samx6i: hook up DDC i2c bus (git-fixes).
- ARM: dts: imx6qp: add missing properties for sram (git-fixes).
- ARM: dts: imx6sl: add missing properties for sram (git-fixes).
- ARM: dts: imx6sll: add missing properties for sram (git-fixes).
- ARM: dts: imx6sx: add missing properties for sram (git-fixes).
- ARM: dts: imx7d-sdb: config the max pressure for tsc2046 (git-fixes).
- ARM: dts: integrator: Tag PCI host with device_type (git-fixes).
- ARM: dts: kirkwood: lsxl: fix serial line (git-fixes).
- ARM: dts: kirkwood: lsxl: remove first ethernet port (git-fixes).
- ARM: dts: turris-omnia: Add label for wan port (git-fixes).
- ARM: dts: turris-omnia: Fix mpp26 pin name and comment (git-fixes).
- ASoC: SOF: pci: Change DMI match info to support all Chrome platforms (git-fixes).
- ASoC: codecs: tx-macro: fix kcontrol put (git-fixes).
- ASoC: da7219: Fix an error handling path in da7219_register_dai_clks() (git-fixes).
- ASoC: eureka-tlv320: Hold reference returned from of_find_xxx API (git-fixes).
- ASoC: fsl_sai: Remove unnecessary FIFO reset in ISR (git-fixes).
- ASoC: mt6359: fix tests for platform_get_irq() failure (git-fixes).
- ASoC: mt6660: Fix PM disable depth imbalance in mt6660_i2c_probe (git-fixes).
- ASoC: qcom: lpass-cpu: Mark HDMI TX parity register as volatile (git-fixes).
- ASoC: qcom: lpass-cpu: mark HDMI TX registers as volatile (git-fixes).
- ASoC: rsnd: Add check for rsnd_mod_power_on (git-fixes).
- ASoC: tas2764: Allow mono streams (git-fixes).
- ASoC: tas2764: Drop conflicting set_bias_level power setting (git-fixes).
- ASoC: tas2764: Fix mute/unmute (git-fixes).
- ASoC: wcd9335: fix order of Slimbus unprepare/disable (git-fixes).
- ASoC: wcd934x: fix order of Slimbus unprepare/disable (git-fixes).
- ASoC: wm5102: Fix PM disable depth imbalance in wm5102_probe (git-fixes).
- ASoC: wm5110: Fix PM disable depth imbalance in wm5110_probe (git-fixes).
- ASoC: wm8997: Fix PM disable depth imbalance in wm8997_probe (git-fixes).
- ASoC: wm_adsp: Handle optional legacy support (git-fixes).
- Bluetooth: L2CAP: Fix use-after-free caused by l2cap_reassemble_sdu (git-fixes).
- Bluetooth: L2CAP: Fix user-after-free (git-fixes).
- Bluetooth: L2CAP: initialize delayed works at l2cap_chan_create() (git-fixes).
- Bluetooth: RFCOMM: Fix possible deadlock on socket shutdown/release (git-fixes).
- Bluetooth: btintel: Mark Intel controller to support LE_STATES quirk (git-fixes).
- Bluetooth: hci_sysfs: Fix attempting to call device_add multiple times (git-fixes).
- Bluetooth: virtio_bt: Use skb_put to set length (git-fixes).
- Documentation: devres: add missing I2C helper (git-fixes).
- Drivers: hv: vmbus: Fix handling of messages with transaction ID of zero (bsc#1204017).
- Drivers: hv: vmbus: Introduce vmbus_request_addr_match() (bsc#1204017).
- Drivers: hv: vmbus: Introduce vmbus_sendpacket_getid() (bsc#1204017).
- Drivers: hv: vmbus: Introduce {lock,unlock}_requestor() (bsc#1204017).
- Drop verbose nvme logging feature (bsc#1200567).
- HID: hidraw: fix memory leak in hidraw_release() (git-fixes).
- HID: magicmouse: Do not set BTN_MOUSE on double report (git-fixes).
- HID: multitouch: Add memory barriers (git-fixes).
- HID: roccat: Fix use-after-free in roccat_read() (git-fixes).
- HSI: omap_ssi: Fix refcount leak in ssi_probe (git-fixes).
- HSI: omap_ssi_port: Fix dma_map_sg error check (git-fixes).
- IB/core: Fix a nested dead lock as part of ODP flow (git-fixes)
- IB/rdmavt: Add __init/__exit annotations to module init/exit funcs (git-fixes)
- Input: i8042 - fix refount leak on sparc (git-fixes).
- Input: synaptics-rmi4 - fix firmware update operations with bootloader v8 (git-fixes).
- Input: xpad - add supported devices as contributed on github (git-fixes).
- Input: xpad - fix wireless 360 controller breaking after suspend (git-fixes).
- KVM: SVM: Exit to userspace on ENOMEM/EFAULT GHCB errors (git-fixes).
- KVM: VMX: Inject #PF on ENCLS as 'emulated' #PF (git-fixes).
- KVM: fix avic_set_running for preemptable kernels (git-fixes).
- KVM: nVMX: Ignore SIPI that arrives in L2 when vCPU is not in WFS (git-fixes).
- KVM: nVMX: Unconditionally purge queued/injected events on nested 'exit' (git-fixes).
- KVM: s390: Clarify SIGP orders versus STOP/RESTART (git-fixes).
- KVM: s390: pv: do not present the ecall interrupt twice (bsc#1203229 LTC#199905).
- KVM: s390x: fix SCK locking (git-fixes).
- KVM: x86/emulator: Fix handing of POP SS to correctly set interruptibility (git-fixes).
- KVM: x86/mmu: Do not advance iterator after restart due to yielding (git-fixes).
- KVM: x86/mmu: Retry page fault if root is invalidated by memslot update (git-fixes).
- KVM: x86/pmu: Add pmc-&gt;intr to refactor kvm_perf_overflow{_intr}() (git-fixes).
- KVM: x86/pmu: Do not truncate the PerfEvtSeln MSR when creating a perf event (git-fixes).
- KVM: x86/pmu: Fix available_event_types check for REF_CPU_CYCLES event (git-fixes).
- KVM: x86/pmu: Refactoring find_arch_event() to pmc_perf_hw_id() (git-fixes).
- KVM: x86: Add KVM_CAP_ENABLE_CAP to x86 (git-fixes).
- KVM: x86: Add compat handler for KVM_X86_SET_MSR_FILTER (git-fixes).
- KVM: x86: Always set kvm_run-&gt;if_flag (git-fixes).
- KVM: x86: Forcibly leave nested virt when SMM state is toggled (git-fixes).
- KVM: x86: Inject #UD on emulated XSETBV if XSAVES isn't enabled (git-fixes).
- KVM: x86: Keep MSR_IA32_XSS unchanged for INIT (git-fixes).
- KVM: x86: Register perf callbacks after calling vendor's hardware_setup() (git-fixes).
- KVM: x86: Sync the states size with the XCR0/IA32_XSS at, any time (git-fixes).
- KVM: x86: Update vPMCs when retiring branch instructions (git-fixes).
- KVM: x86: Update vPMCs when retiring instructions (git-fixes).
- KVM: x86: do not report preemption if the steal time cache is stale (git-fixes).
- KVM: x86: nSVM/nVMX: set nested_run_pending on VM entry which is a result of RSM (git-fixes).
- KVM: x86: nSVM: fix potential NULL derefernce on nested migration (git-fixes).
- KVM: x86: nSVM: mark vmcb01 as dirty when restoring SMM saved state (git-fixes).
- NFS: Fix another fsync() issue after a server reboot (git-fixes).
- NFSv4: Fixes for nfs4_inode_return_delegation() (git-fixes).
- PCI/ASPM: Correct LTR_L1.2_THRESHOLD computation (git-fixes).
- PCI/ASPM: Ignore L1 PM Substates if device lacks capability (git-fixes).
- PCI: Fix used_buses calculation in pci_scan_child_bus_extend() (git-fixes).
- PCI: Sanitise firmware BAR assignments behind a PCI-PCI bridge (git-fixes).
- PCI: hv: Fix synchronization between channel callback and hv_compose_msi_msg() (bsc#1204017).
- PCI: hv: Fix synchronization between channel callback and hv_pci_bus_exit() (bsc#1204017).
- PCI: hv: Use vmbus_requestor to generate transaction IDs for VMbus hardening (bsc#1204017).
- PCI: mediatek-gen3: Change driver name to mtk-pcie-gen3 (git-fixes).
- PM: domains: Fix handling of unavailable/disabled idle states (git-fixes).
- PM: hibernate: Allow hybrid sleep to work with s2idle (git-fixes).
- RDMA/cma: Fix arguments order in net device validation (git-fixes)
- RDMA/hfi1: Fix potential integer multiplication overflow errors (git-fixes)
- RDMA/hns: Add the detection for CMDQ status in the device initialization process (git-fixes)
- RDMA/irdma: Add support for address handle re-use (git-fixes)
- RDMA/irdma: Align AE id codes to correct flush code and event (git-fixes)
- RDMA/irdma: Do not advertise 1GB page size for x722 (git-fixes)
- RDMA/irdma: Fix VLAN connection with wildcard address (git-fixes)
- RDMA/irdma: Fix a window for use-after-free (git-fixes)
- RDMA/irdma: Fix setting of QP context err_rq_idx_valid field (git-fixes)
- RDMA/irdma: Fix sleep from invalid context BUG (git-fixes)
- RDMA/irdma: Move union irdma_sockaddr to header file (git-fixes)
- RDMA/irdma: Remove the unnecessary variable saddr (git-fixes)
- RDMA/irdma: Report RNR NAK generation in device caps (git-fixes)
- RDMA/irdma: Report the correct max cqes from query device (git-fixes)
- RDMA/irdma: Return correct WC error for bind operation failure (git-fixes)
- RDMA/irdma: Return error on MR deregister CQP failure (git-fixes)
- RDMA/irdma: Use net_type to check network type (git-fixes)
- RDMA/irdma: Validate udata inlen and outlen (git-fixes)
- RDMA/mlx5: Add missing check for return value in get namespace flow (git-fixes)
- RDMA/mlx5: Do not compare mkey tags in DEVX indirect mkey (git-fixes)
- RDMA/qedr: Fix potential memory leak in __qedr_alloc_mr() (git-fixes)
- RDMA/qedr: Fix reporting QP timeout attribute (git-fixes)
- RDMA/rxe: Fix 'kernel NULL pointer dereference' error (git-fixes)
- RDMA/rxe: Fix deadlock in rxe_do_local_ops() (git-fixes)
- RDMA/rxe: Fix error unwind in rxe_create_qp() (git-fixes)
- RDMA/rxe: Fix mw bind to allow any consumer key portion (git-fixes)
- RDMA/rxe: Fix resize_finish() in rxe_queue.c (git-fixes)
- RDMA/rxe: Fix rnr retry behavior (git-fixes)
- RDMA/rxe: Fix the error caused by qp-&gt;sk (git-fixes)
- RDMA/rxe: For invalidate compare according to set keys in mr (git-fixes)
- RDMA/rxe: Generate a completion for unsupported/invalid opcode (git-fixes)
- RDMA/siw: Always consume all skbuf data in sk_data_ready() upcall. (git-fixes)
- RDMA/siw: Fix QP destroy to wait for all references dropped. (git-fixes)
- RDMA/siw: Fix duplicated reported IW_CM_EVENT_CONNECT_REPLY event (git-fixes)
- RDMA/siw: Pass a pointer to virt_to_page() (git-fixes)
- RDMA/srp: Fix srp_abort() (git-fixes)
- RDMA/srp: Handle dev_set_name() failure (git-fixes)
- RDMA/srp: Rework the srp_add_port() error path (git-fixes)
- RDMA/srp: Set scmnd-&gt;result only when scmnd is not NULL (git-fixes)
- RDMA/srp: Support more than 255 rdma ports (git-fixes)
- RDMA/srp: Use the attribute group mechanism for sysfs attributes (git-fixes)
- RDMA/srpt: Duplicate port name members (git-fixes)
- RDMA/srpt: Fix a use-after-free (git-fixes)
- RDMA/srpt: Introduce a reference count in struct srpt_device (git-fixes)
- RDMA/usnic: fix set-but-not-unused variable 'flags' warning (git-fixes)
- RDMA: remove useless condition in siw_create_cq() (git-fixes)
- Revert 'workqueue: remove unused cancel_work()' (bsc#1204933).
- arm64/bti: Disable in kernel BTI when cross section thunks are broken (git-fixes)
- arm64/mm: Consolidate TCR_EL1 fields (git-fixes).
- arm64: dts: imx8: correct clock order (git-fixes).
- arm64: dts: imx8mp: Add snps,gfladj-refclk-lpm-sel quirk to USB nodes (git-fixes).
- arm64: dts: imx8mq-librem5: Add bq25895 as max17055's power supply (git-fixes).
- arm64: dts: juno: Add thermal critical trip points (git-fixes).
- arm64: dts: ls1088a: specify clock frequencies for the MDIO controllers (git-fixes).
- arm64: dts: ls208xa: specify clock frequencies for the MDIO controllers (git-fixes).
- arm64: dts: lx2160a: specify clock frequencies for the MDIO controllers (git-fixes).
- arm64: dts: qcom: sc7280: Cleanup the lpasscc node (git-fixes).
- arm64: dts: ti: k3-j7200: fix main pinmux range (git-fixes).
- arm64: entry: avoid kprobe recursion (git-fixes).
- arm64: ftrace: fix module PLTs with mcount (git-fixes).
- arm64: mte: Avoid setting PG_mte_tagged if no tags cleared or restored (git-fixes).
- arm64: topology: move store_cpu_topology() to shared code (git-fixes).
- ata: ahci-imx: Fix MODULE_ALIAS (git-fixes).
- ata: fix ata_id_has_devslp() (git-fixes).
- ata: fix ata_id_has_dipm() (git-fixes).
- ata: fix ata_id_has_ncq_autosense() (git-fixes).
- ata: fix ata_id_sense_reporting_enabled() and ata_id_has_sense_reporting() (git-fixes).
- ata: libahci_platform: Sanity check the DT child nodes number (git-fixes).
- ata: pata_legacy: fix pdc20230_set_piomode() (git-fixes).
- bnxt_en: Fix bnxt_refclk_read() (git-fixes).
- bnxt_en: Fix bnxt_reinit_after_abort() code path (git-fixes).
- bnxt_en: fix livepatch query (git-fixes).
- bnxt_en: reclaim max resources if sriov enable fails (git-fixes).
- bonding: 802.3ad: fix no transmission of LACPDUs (git-fixes).
- bonding: ARP monitor spams NETDEV_NOTIFY_PEERS notifiers (git-fixes).
- build mlx in arm64/azure as modules again (bsc#1203701) There is little gain by having the drivers built into the kernel. Having them as modules allows easy replacement by third party drivers. Change mlx4, mlx5 and mlxfw from built-in to module.
- can: bcm: check the result of can_send() in bcm_can_tx() (git-fixes).
- can: j1939: transport: j1939_session_skb_drop_old(): spin_unlock_irqrestore() before kfree_skb() (git-fixes).
- can: kvaser_usb: Fix possible completions during init_completion (git-fixes).
- can: kvaser_usb: Fix use of uninitialized completion (git-fixes).
- can: kvaser_usb: kvaser_usb_leaf: fix CAN clock frequency regression (git-fixes).
- can: kvaser_usb: replace run-time checks with struct kvaser_usb_driver_info (git-fixes).
- can: kvaser_usb_leaf: Fix CAN state after restart (git-fixes).
- can: kvaser_usb_leaf: Fix TX queue out of sync after restart (git-fixes).
- can: mcp251x: mcp251x_can_probe(): add missing unregister_candev() in error path (git-fixes).
- can: mcp251xfd: mcp251xfd_register_get_dev_id(): fix endianness conversion (git-fixes).
- can: mcp251xfd: mcp251xfd_register_get_dev_id(): use correct length to read dev_id (git-fixes).
- can: mscan: mpc5xxx: mpc5xxx_can_probe(): add missing put_clock() in error path (git-fixes).
- cgroup/cpuset: Enable update_tasks_cpumask() on top_cpuset (bsc#1204753).
- clk: ast2600: BCLK comes from EPLL (git-fixes).
- clk: at91: fix the build with binutils 2.27 (git-fixes).
- clk: baikal-t1: Add SATA internal ref clock buffer (git-fixes).
- clk: baikal-t1: Add shared xGMAC ref/ptp clocks internal parent (git-fixes).
- clk: baikal-t1: Fix invalid xGMAC PTP clock divider (git-fixes).
- clk: bcm2835: Make peripheral PLLC critical (git-fixes).
- clk: bcm2835: Round UART input clock up (bsc#1188238)
- clk: bcm2835: fix bcm2835_clock_rate_from_divisor declaration (git-fixes).
- clk: bcm: rpi: Add support for VEC clock (bsc#1196632)
- clk: berlin: Add of_node_put() for of_get_parent() (git-fixes).
- clk: imx: scu: fix memleak on platform_device_add() fails (git-fixes).
- clk: mediatek: mt8183: mfgcfg: Propagate rate changes to parent (git-fixes).
- clk: meson: Hold reference returned by of_get_parent() (git-fixes).
- clk: oxnas: Hold reference returned by of_get_parent() (git-fixes).
- clk: qcom: apss-ipq6018: mark apcs_alias0_core_clk as critical (git-fixes).
- clk: qcom: gcc-msm8916: use ARRAY_SIZE instead of specifying num_parents (git-fixes).
- clk: qoriq: Hold reference returned by of_get_parent() (git-fixes).
- clk: sprd: Hold reference returned by of_get_parent() (git-fixes).
- clk: tegra20: Fix refcount leak in tegra20_clock_init (git-fixes).
- clk: tegra: Fix refcount leak in tegra114_clock_init (git-fixes).
- clk: tegra: Fix refcount leak in tegra210_clock_init (git-fixes).
- clk: ti: dra7-atl: Fix reference leak in of_dra7_atl_clk_probe (git-fixes).
- clk: vc5: Fix 5P49V6901 outputs disabling when enabling FOD (git-fixes).
- clk: zynqmp: Fix stack-out-of-bounds in strncpy` (git-fixes).
- clk: zynqmp: pll: rectify rate rounding in zynqmp_pll_round_rate (git-fixes).
- cpufreq: qcom: fix memory leak in error path (git-fixes).
- cpufreq: qcom: fix writes in read-only memory region (git-fixes).
- crypto: akcipher - default implementation for setting a private key (git-fixes).
- crypto: cavium - prevent integer overflow loading firmware (git-fixes).
- crypto: ccp - Release dma channels before dmaengine unrgister (git-fixes).
- crypto: hisilicon/zip - fix mismatch in get/set sgl_sge_nr (git-fixes).
- crypto: inside-secure - Change swab to swab32 (git-fixes).
- crypto: inside-secure - Replace generic aes with libaes (git-fixes).
- crypto: marvell/octeontx - prevent integer overflows (git-fixes).
- crypto: qat - fix default value of WDT timer (git-fixes).
- crypto: sahara - do not sleep when in softirq (git-fixes).
- device property: Fix documentation for *_match_string() APIs (git-fixes).
- dmaengine: hisilicon: Add multi-thread support for a DMA channel (git-fixes).
- dmaengine: hisilicon: Disable channels when unregister hisi_dma (git-fixes).
- dmaengine: hisilicon: Fix CQ head update (git-fixes).
- dmaengine: idxd: change bandwidth token to read buffers (jsc#PED-679).
- dmaengine: idxd: deprecate token sysfs attributes for read buffers (jsc#PED-679).
- dmaengine: idxd: force wq context cleanup on device disable path (git-fixes).
- dmaengine: ioat: stop mod_timer from resurrecting deleted timer in __cleanup() (git-fixes).
- dmaengine: mxs: use platform_driver_register (git-fixes).
- dmaengine: ti: k3-udma: Reset UDMA_CHAN_RT byte counters to prevent overflow (git-fixes).
- dmaengine: xilinx_dma: Fix devm_platform_ioremap_resource error handling (git-fixes).
- dmaengine: xilinx_dma: Report error in case of dma_set_mask_and_coherent API failure (git-fixes).
- dmaengine: xilinx_dma: cleanup for fetching xlnx,num-fstores property (git-fixes).
- docs: update mediator information in CoC docs (git-fixes).
- dpaa2-eth: trace the allocated address instead of page struct (git-fixes).
- drivers: serial: jsm: fix some leaks in probe (git-fixes).
- drm/amd/display: Assume an LTTPR is always present on fixed_vs links (git-fixes).
- drm/amd/display: Changed pipe split policy to allow for multi-display (bsc#1152472) Backporting notes: 	* remove changes to non-existing 201 and 31 directories
- drm/amd/display: Correct MPC split policy for DCN301 (git-fixes).
- drm/amd/display: Fix build breakage with CONFIG_DEBUG_FS=n (git-fixes).
- drm/amd/display: Fix double cursor on non-video RGB MPO (git-fixes).
- drm/amd/display: Fix vblank refcount in vrr transition (git-fixes).
- drm/amd/display: Remove interface for periodic interrupt 1 (git-fixes).
- drm/amd/display: skip audio setup when audio stream is enabled (git-fixes).
- drm/amd/display: update gamut remap if plane has changed (git-fixes).
- drm/amd/pm: smu7_hwmgr: fix potential off-by-one overflow in 'performance_levels' (git-fixes).
- drm/amdgpu/display: change pipe policy for DCN 2.0 (git-fixes).
- drm/amdgpu/display: change pipe policy for DCN 2.1 (git-fixes).
- drm/amdgpu/gfx10: add wraparound gpu counter check for APUs as well (bsc#1152472)
- drm/amdgpu/gfx9: switch to golden tsc registers for renoir+ (bsc#1152472)
- drm/amdgpu: add missing pci_disable_device() in amdgpu_pmops_runtime_resume() (git-fixes).
- drm/amdgpu: fix initial connector audio value (git-fixes).
- drm/amdgpu: fix sdma doorbell init ordering on APUs (git-fixes).
- drm/amdkfd: Fix memory leak in kfd_mem_dmamap_userptr() (git-fixes).
- drm/bridge: Avoid uninitialized variable warning (git-fixes).
- drm/bridge: megachips: Fix a null pointer dereference bug (git-fixes).
- drm/bridge: parade-ps8640: Fix regulator supply order (git-fixes).
- drm/i915/dp: Reset frl trained flag before restarting FRL training (git-fixes).
- drm/i915/ehl: Update MOCS table for EHL (git-fixes).
- drm/i915/gvt: fix a memory leak in intel_gvt_init_vgpu_types (git-fixes).
- drm/i915/hdmi: convert intel_hdmi_to_dev to intel_hdmi_to_i915 (bsc#1152489)
- drm/i915: Reject unsupported TMDS rates on ICL+ (git-fixes).
- drm/komeda: Fix handling of atomic commit in the atomic_commit_tail hook (git-fixes).
- drm/meson: explicitly remove aggregate driver at module unload time (git-fixes).
- drm/mipi-dsi: Detach devices when removing the host (git-fixes).
- drm/msm/dp: Silence inconsistent indent warning (git-fixes).
- drm/msm/dp: correct 1.62G link rate at dp_catalog_ctrl_config_msa() (git-fixes).
- drm/msm/dp: fix IRQ lifetime (git-fixes).
- drm/msm/dpu: Fix comment typo (git-fixes).
- drm/msm/dpu: index dpu_kms-&gt;hw_vbif using vbif_idx (git-fixes).
- drm/msm/dsi: fix memory corruption with too many bridges (git-fixes).
- drm/msm/hdmi: fix memory corruption with too many bridges (git-fixes).
- drm/msm: Fix return type of mdp4_lvds_connector_mode_valid (git-fixes).
- drm/msm: Make .remove and .shutdown HW shutdown consistent (git-fixes).
- drm/msm: fix use-after-free on probe deferral (git-fixes).
- drm/nouveau/kms/nv140-: Disable interlacing (git-fixes).
- drm/nouveau/nouveau_bo: fix potential memory leak in nouveau_bo_alloc() (git-fixes).
- drm/nouveau: fix a use-after-free in nouveau_gem_prime_import_sg_table() (git-fixes).
- drm/nouveau: wait for the exclusive fence after the shared ones v2 (bsc#1152472)
- drm/omap: dss: Fix refcount leak bugs (git-fixes).
- drm/scheduler: quieten kernel-doc warnings (git-fixes).
- drm/virtio: Check whether transferred 2D BO is shmem (git-fixes).
- drm/virtio: Unlock reservations on virtio_gpu_object_shmem_init() error (git-fixes).
- drm: Prevent drm_copy_field() to attempt copying a NULL pointer (git-fixes).
- drm: Use size_t type for len variable in drm_copy_field() (git-fixes).
- drm: bridge: adv7511: fix CEC power down control register offset (git-fixes).
- drm: bridge: dw_hdmi: only trigger hotplug event on link change (git-fixes).
- drm: fix drm_mipi_dbi build errors (git-fixes).
- drm: panel-orientation-quirks: Add quirk for Anbernic Win600 (git-fixes).
- drm:pl111: Add of_node_put() when breaking out of for_each_available_child_of_node() (git-fixes).
- dt-bindings: PCI: microchip,pcie-host: fix missing clocks properties (git-fixes).
- dt-bindings: PCI: microchip,pcie-host: fix missing dma-ranges (git-fixes).
- dt-bindings: crypto: ti,sa2ul: drop dma-coherent property (git-fixes).
- dt-bindings: display/msm: dpu-sc7180: add missing DPU opp-table (git-fixes).
- dt-bindings: display/msm: dpu-sdm845: add missing DPU opp-table (git-fixes).
- dt-bindings: mtd: intel: lgm-nand: Fix compatible string (git-fixes).
- dt-bindings: mtd: intel: lgm-nand: Fix maximum chip select value (git-fixes).
- dt-bindings: phy: qcom,qmp-usb3-dp: fix bogus clock-cells property (git-fixes).
- dt-bindings: phy: qcom,qmp: fix bogus clock-cells property (git-fixes).
- dt-bindings: power: gpcv2: add power-domains property (git-fixes).
- dyndbg: fix module.dyndbg handling (git-fixes).
- dyndbg: fix static_branch manipulation (git-fixes).
- dyndbg: let query-modname override actual module name (git-fixes).
- efi/tpm: Pass correct address to memblock_reserve (git-fixes).
- efi: Correct Macmini DMI match in uefi cert quirk (git-fixes).
- efi: libstub: drop pointless get_memory_map() call (git-fixes).
- fbdev: cyber2000fb: fix missing pci_disable_device() (git-fixes).
- fbdev: da8xx-fb: Fix error handling in .remove() (git-fixes).
- fec: Fix timer capture timing in `fec_ptp_enable_pps()` (git-fixes).
- firmware: arm_scmi: Add SCMI PM driver remove routine (git-fixes).
- firmware: arm_scmi: Harden accesses to the sensor domains (git-fixes).
- firmware: arm_scmi: Improve checks in the info_get operations (git-fixes).
- firmware: arm_scmi: Make Rx chan_setup fail on memory errors (git-fixes).
- firmware: arm_scmi: Suppress the driver's bind attributes (git-fixes).
- firmware: google: Test spinlock on panic path to avoid lockups (git-fixes).
- fpga: prevent integer overflow in dfl_feature_ioctl_set_irq() (git-fixes).
- fs/binfmt_elf: Fix memory leak in load_elf_binary() (git-fixes).
- ftrace: Fix char print issue in print_ip_ins() (git-fixes).
- ftrace: Properly unset FTRACE_HASH_FL_MOD (git-fixes).
- fuse: fix deadlock between atomic O_TRUNC and page invalidation (bsc#1204533).
- gcov: support GCC 12.1 and newer compilers (git-fixes).
- gpu: lontium-lt9611: Fix NULL pointer dereference in lt9611_connector_init() (git-fixes).
- hid: hid-logitech-hidpp: avoid unnecessary assignments in hidpp_connect_event (git-fixes).
- hinic: Avoid some over memory allocation (git-fixes).
- hwmon/coretemp: Handle large core ID value (git-fixes).
- hwmon: (sht4x) do not overflow clamping operation on 32-bit platforms (git-fixes).
- i2c: designware: Fix handling of real but unexpected device interrupts (git-fixes).
- i2c: i801: Add support for Intel Ice Lake PCH-N (jsc#PED-634).
- i2c: i801: Add support for Intel Meteor Lake-P (jsc#PED-732).
- i2c: i801: Add support for Intel Raptor Lake PCH-S (jsc#PED-634).
- i2c: i801: Improve handling of chip-specific feature definitions (jsc#PED-634).
- i2c: piix4: Fix adapter not be removed in piix4_remove() (git-fixes).
- i2c: qcom-cci: Fix ordering of pm_runtime_xx and i2c_add_adapter (git-fixes).
- i40e: Fix call trace in setup_tx_descriptors (git-fixes).
- i40e: Fix dropped jumbo frames statistics (git-fixes).
- i40e: Fix to stop tx_timeout recovery if GLOBR fails (git-fixes).
- iavf: Fix adminq error handling (git-fixes).
- iavf: Fix handling of dummy receive descriptors (git-fixes).
- iavf: Fix reset error handling (git-fixes).
- ice: Fix switchdev rules book keeping (git-fixes).
- ice: check (DD | EOF) bits on Rx descriptor rather than (EOP | RS) (git-fixes).
- ice: do not setup vlan for loopback VSI (git-fixes).
- igb: Make DMA faster when CPU is active on the PCIe link (git-fixes).
- igb: fix a use-after-free issue in igb_clean_tx_ring (git-fixes).
- iio: ABI: Fix wrong format of differential capacitance channel ABI (git-fixes).
- iio: adc: ad7923: fix channel readings for some variants (git-fixes).
- iio: adc: at91-sama5d2_adc: check return status for pressure and touch (git-fixes).
- iio: adc: at91-sama5d2_adc: disable/prepare buffer on suspend/resume (git-fixes).
- iio: adc: at91-sama5d2_adc: fix AT91_SAMA5D2_MR_TRACKTIM_MAX (git-fixes).
- iio: adc: at91-sama5d2_adc: lock around oversampling and sample freq (git-fixes).
- iio: adc: mcp3911: use correct id bits (git-fixes).
- iio: adxl372: Fix unsafe buffer attributes (git-fixes).
- iio: bmc150-accel-core: Fix unsafe buffer attributes (git-fixes).
- iio: dac: ad5593r: Fix i2c read protocol requirements (git-fixes).
- iio: inkern: fix return value in devm_of_iio_channel_get_by_name() (git-fixes).
- iio: inkern: only release the device node when done with it (git-fixes).
- iio: light: tsl2583: Fix module unloading (git-fixes).
- iio: ltc2497: Fix reading conversion results (git-fixes).
- iio: magnetometer: yas530: Change data type of hard_offsets to signed (git-fixes).
- iio: pressure: dps310: Refactor startup procedure (git-fixes).
- iio: pressure: dps310: Reset chip after timeout (git-fixes).
- iio: temperature: ltc2983: allocate iio channels once (git-fixes).
- ima: fix blocking of security.ima xattrs of unsupported algorithms (git-fixes).
- increase NR_CPUS on azure and follow kernel-default (bsc#1203979)
- iommu/vt-d: Do not falsely log intel_iommu is unsupported kernel option (bsc#1204947).
- ip: Fix data-races around sysctl_ip_fwd_update_priority (git-fixes).
- ipv4: Fix data-races around sysctl_fib_multipath_hash_policy (git-fixes).
- irqchip/ls-extirq: Fix invalid wait context by avoiding to use regmap (git-fixes).
- isdn: mISDN: netjet: fix wrong check of device registration (git-fixes).
- ixgbe: Add locking to prevent panic when setting sriov_numvfs to zero (git-fixes).
- ixgbe: fix bcast packets Rx on VF after promisc removal (git-fixes).
- ixgbe: fix unexpected VLAN Rx in promisc mode on VF (git-fixes).
- kABI: Fix after adding trace_iterator.wait_index (git-fixes).
- kABI: Fix kABI after backport Add pmc-&gt;intr to refactor  kvm_perf_overflow{_intr}() (git-fixes).
- kABI: Fix kABI after backport Always set kvm_run-&gt;if_flag (git-fixes).
- kABI: Fix kABI after backport Forcibly leave nested virt when SMM state  is toggled (git-fixes).
- kABI: Fix kABI after backport Refactoring find_arch_event() to  pmc_perf_hw_id() (git-fixes).
- kABI: Fix kABI after backport Update vPMCs when retiring branch  instructions (git-fixes).
- kabi/severities: ignore CS35L41-specific exports (bsc#1203699)
- kbuild: Add skip_encoding_btf_enum64 option to pahole (git-fixes).
- kbuild: remove the target in signal traps when interrupted (git-fixes).
- kbuild: rpm-pkg: fix breakage when V=1 is used (git-fixes).
- kernfs: fix use-after-free in __kernfs_remove (git-fixes).
- kselftest/arm64: Fix validatation termination record after EXTRA_CONTEXT (git-fixes).
- lib/sg_pool: change module_init(sg_pool_init) to subsys_initcall (git-fixes).
- livepatch: Add a missing newline character in klp_module_coming() (bsc#1071995).
- livepatch: fix race between fork and KLP transition (bsc#1071995).
- mISDN: fix possible memory leak in mISDN_register_device() (git-fixes).
- mISDN: hfcpci: Fix use-after-free bug in hfcpci_softirq (git-fixes).
- mac802154: Fix LQI recording (git-fixes).
- macvlan: enforce a consistent minimal mtu (git-fixes).
- mailbox: bcm-ferxrm-mailbox: Fix error check for dma_map_sg (git-fixes).
- mailbox: mpfs: account for mbox offsets while sending (git-fixes).
- mailbox: mpfs: fix handling of the reg property (git-fixes).
- media: atomisp: prevent integer overflow in sh_css_set_black_frame() (git-fixes).
- media: cedrus: Fix endless loop in cedrus_h265_skip_bits() (git-fixes).
- media: cedrus: Set the platform driver data earlier (git-fixes).
- media: cx88: Fix a null-ptr-deref bug in buffer_prepare() (git-fixes).
- media: ipu3-imgu: Fix NULL pointer dereference in active selection access (git-fixes).
- media: mceusb: set timeout to at least timeout provided (git-fixes).
- media: meson: vdec: add missing clk_disable_unprepare on error in vdec_hevc_start() (git-fixes).
- media: uvcvideo: Fix memory leak in uvc_gpio_parse (git-fixes).
- media: uvcvideo: Use entity get_cur in uvc_ctrl_set (git-fixes).
- media: v4l2-compat-ioctl32.c: zero buffer passed to v4l2_compat_get_array_args() (git-fixes).
- media: v4l2-dv-timings: add sanity checks for blanking values (git-fixes).
- media: v4l2: Fix v4l2_i2c_subdev_set_name function documentation (git-fixes).
- media: venus: dec: Handle the case where find_format fails (git-fixes).
- media: videodev2.h: V4L2_DV_BT_BLANKING_HEIGHT should check 'interlaced' (git-fixes).
- media: vivid: dev-&gt;bitmap_cap wasn't freed in all cases (git-fixes).
- media: vivid: s_fbuf: add more sanity checks (git-fixes).
- media: vivid: set num_in/outputs to 0 if not supported (git-fixes).
- media: xilinx: vipp: Fix refcount leak in xvip_graph_dma_init (git-fixes).
- memory: of: Fix refcount leak bug in of_get_ddr_timings() (git-fixes).
- memory: of: Fix refcount leak bug in of_lpddr3_get_ddr_timings() (git-fixes).
- memory: pl353-smc: Fix refcount leak bug in pl353_smc_probe() (git-fixes).
- mfd: fsl-imx25: Fix an error handling path in mx25_tsadc_setup_irq() (git-fixes).
- mfd: fsl-imx25: Fix check for platform_get_irq() errors (git-fixes).
- mfd: intel-lpss: Add Intel Raptor Lake PCH-S PCI IDs (jsc#PED-634).
- mfd: intel_soc_pmic: Fix an error handling path in intel_soc_pmic_i2c_probe() (git-fixes).
- mfd: lp8788: Fix an error handling path in lp8788_irq_init() and lp8788_irq_init() (git-fixes).
- mfd: lp8788: Fix an error handling path in lp8788_probe() (git-fixes).
- mfd: sm501: Add check for platform_driver_register() (git-fixes).
- misc: ocxl: fix possible refcount leak in afu_ioctl() (git-fixes).
- misc: pci_endpoint_test: Aggregate params checking for xfer (git-fixes).
- misc: pci_endpoint_test: Fix pci_endpoint_test_{copy,write,read}() panic (git-fixes).
- mlxsw: spectrum: Clear PTP configuration after unregistering the netdevice (git-fixes).
- mlxsw: spectrum_cnt: Reorder counter pools (git-fixes).
- mlxsw: spectrum_router: Fix IPv4 nexthop gateway indication (git-fixes).
- mm/hugetlb: fix races when looking up a CONT-PTE/PMD size hugetlb page (bsc#1204575).
- mmc: au1xmmc: Fix an error handling path in au1xmmc_probe() (git-fixes).
- mmc: core: Fix kernel panic when remove non-standard SDIO card (git-fixes).
- mmc: core: Replace with already defined values for readability (git-fixes).
- mmc: core: Terminate infinite loop in SD-UHS voltage switch (git-fixes).
- mmc: sdhci-esdhc-imx: Propagate ESDHC_FLAG_HS400* only on 8bit bus (git-fixes).
- mmc: sdhci-msm: add compatible string check for sdm670 (git-fixes).
- mmc: sdhci-pci-core: Disable ES for ASUS BIOS on Jasper Lake (git-fixes).
- mmc: sdhci-sprd: Fix minimum clock limit (git-fixes).
- mmc: sdhci_am654: 'select', not 'depends' REGMAP_MMIO (git-fixes).
- mmc: wmt-sdmmc: Fix an error handling path in wmt_mci_probe() (git-fixes).
- mtd: devices: docg3: check the return value of devm_ioremap() in the probe (git-fixes).
- mtd: rawnand: atmel: Unmap streaming DMA mappings (git-fixes).
- mtd: rawnand: fsl_elbc: Fix none ECC mode (git-fixes).
- mtd: rawnand: intel: Do not re-define NAND_DATA_IFACE_CHECK_ONLY (git-fixes).
- mtd: rawnand: intel: Read the chip-select line from the correct OF node (git-fixes).
- mtd: rawnand: intel: Remove undocumented compatible string (git-fixes).
- mtd: rawnand: marvell: Use correct logic for nand-keep-config (git-fixes).
- mtd: rawnand: meson: fix bit map use in meson_nfc_ecc_correct() (git-fixes).
- net/dsa/hirschmann: Add missing of_node_get() in hellcreek_led_setup() (git-fixes).
- net/ice: fix initializing the bitmap in the switch code (git-fixes).
- net/ieee802154: fix uninit value bug in dgram_sendmsg (git-fixes).
- net/mlx4_en: Fix wrong return value on ioctl EEPROM query failure (git-fixes).
- net/mlx5e: Disable softirq in mlx5e_activate_rq to avoid race condition (git-fixes).
- net/mlx5e: Fix enabling sriov while tc nic rules are offloaded (git-fixes).
- net/mlx5e: Properly disable vlan strip on non-UL reps (git-fixes).
- net/mlx5e: Remove WARN_ON when trying to offload an unsupported TLS cipher/version (git-fixes).
- net/mlx5e: Ring the TX doorbell on DMA errors (git-fixes).
- net/mlx5e: TC, fix decap fallback to uplink when int port not supported (git-fixes).
- net/mlx5e: Update netdev features after changing XDP state (git-fixes).
- net/mlx5e: xsk: Account for XSK RQ UMRs when calculating ICOSQ size (git-fixes).
- net: altera: Fix refcount leak in altera_tse_mdio_create (git-fixes).
- net: atlantic: fix aq_vec index out of range error (git-fixes).
- net: bcmgenet: Indicate MAC is in charge of PHY PM (git-fixes).
- net: bgmac: Fix a BUG triggered by wrong bytes_compl (git-fixes).
- net: bgmac: Fix an erroneous kfree() in bgmac_remove() (git-fixes).
- net: bgmac: support MDIO described in DT (git-fixes).
- net: bonding: fix possible NULL deref in rlb code (git-fixes).
- net: bonding: fix use-after-free after 802.3ad slave unbind (git-fixes).
- net: chelsio: cxgb4: Avoid potential negative array offset (git-fixes).
- net: dp83822: disable false carrier interrupt (git-fixes).
- net: dp83822: disable rx error interrupt (git-fixes).
- net: dsa: bcm_sf2: force pause link settings (git-fixes).
- net: dsa: ksz9477: port mirror sniffing limited to one port (git-fixes).
- net: dsa: lantiq_gswip: Fix refcount leak in gswip_gphy_fw_list (git-fixes).
- net: dsa: microchip: ksz9477: fix fdb_dump last invalid entry (git-fixes).
- net: dsa: microchip: ksz_common: Fix refcount leak bug (git-fixes).
- net: dsa: mv88e6060: prevent crash on an unused port (git-fixes).
- net: dsa: mv88e6xxx: use BMSR_ANEGCOMPLETE bit for filling an_complete (git-fixes).
- net: dsa: sja1105: fix buffer overflow in sja1105_setup_devlink_regions() (git-fixes).
- net: dsa: sja1105: silent spi_device_id warnings (git-fixes).
- net: dsa: vitesse-vsc73xx: silent spi_device_id warnings (git-fixes).
- net: ethernet: bgmac: Fix refcount leak in bcma_mdio_mii_register (git-fixes).
- net: ethernet: ti: am65-cpsw: Fix devlink port register sequence (git-fixes).
- net: ethernet: ti: davinci_mdio: Add workaround for errata i2329 (git-fixes).
- net: ethernet: ti: davinci_mdio: fix build for mdio bitbang uses (git-fixes).
- net: fix IFF_TX_SKB_NO_LINEAR definition (git-fixes).
- net: ftgmac100: Hold reference returned by of_get_child_by_name() (git-fixes).
- net: hns3: do not push link state to VF if unalive (git-fixes).
- net: hns3: set port base vlan tbl_sta to false before removing old vlan (git-fixes).
- net: huawei: hinic: Use devm_kcalloc() instead of devm_kzalloc() (git-fixes).
- net: ieee802154: return -EINVAL for unknown addr type (git-fixes).
- net: ipa: do not assume SMEM is page-aligned (git-fixes).
- net: ipvtap - add __init/__exit annotations to module init/exit funcs (git-fixes).
- net: moxa: get rid of asymmetry in DMA mapping/unmapping (git-fixes).
- net: moxa: pass pdev instead of ndev to DMA functions (git-fixes).
- net: mscc: ocelot: fix address of SYS_COUNT_TX_AGING counter (git-fixes).
- net: pcs: xpcs: propagate xpcs_read error to xpcs_get_state_c37_sgmii (git-fixes).
- net: phy: dp83822: disable MDI crossover status change interrupt (git-fixes).
- net: phy: dp83867: Extend RX strap quirk for SGMII mode (git-fixes).
- net: stmmac: fix dma queue left shift overflow issue (git-fixes).
- net: stmmac: fix leaks in probe (git-fixes).
- net: stmmac: fix pm runtime issue in stmmac_dvr_remove() (git-fixes).
- net: stmmac: fix unbalanced ptp clock issue in suspend/resume flow (git-fixes).
- net: stmmac: remove redunctant disable xPCS EEE call (git-fixes).
- net: sungem_phy: Add of_node_put() for reference returned by of_get_parent() (git-fixes).
- net: tap: NULL pointer derefence in dev_parse_header_protocol when skb-&gt;dev is null (git-fixes).
- net: usb: qmi_wwan: Add new usb-id for Dell branded EM7455 (git-fixes).
- net: usb: r8152: Add in new Devices that are supported for Mac-Passthru (git-fixes).
- netdevsim: fib: Fix reference count leak on route deletion failure (git-fixes).
- nfc: fdp: Fix potential memory leak in fdp_nci_send() (git-fixes).
- nfc: nfcmrvl: Fix potential memory leak in nfcmrvl_i2c_nci_send() (git-fixes).
- nfc: nxp-nci: Fix potential memory leak in nxp_nci_send() (git-fixes).
- nfc: s3fwrn5: Fix potential memory leak in s3fwrn5_nci_send() (git-fixes).
- nfp: ethtool: fix the display error of `ethtool -m DEVNAME` (git-fixes).
- nvme: do not print verbose errors for internal passthrough requests (bsc#1202187).
- nvmem: core: Check input parameter for NULL in nvmem_unregister() (bsc#1204241).
- octeontx2-af: Apply tx nibble fixup always (git-fixes).
- octeontx2-af: Fix key checking for source mac (git-fixes).
- octeontx2-af: Fix mcam entry resource leak (git-fixes).
- octeontx2-af: suppress external profile loading warning (git-fixes).
- octeontx2-pf: Fix NIX_AF_TL3_TL2X_LINKX_CFG register configuration (git-fixes).
- octeontx2-pf: Fix UDP/TCP src and dst port tc filters (git-fixes).
- octeontx2-pf: cn10k: Fix egress ratelimit configuration (git-fixes).
- openvswitch: Fix double reporting of drops in dropwatch (git-fixes).
- openvswitch: Fix overreporting of drops in dropwatch (git-fixes).
- openvswitch: add nf_ct_is_confirmed check before assigning the helper (git-fixes).
- openvswitch: switch from WARN to pr_warn (git-fixes).
- overflow.h: restore __ab_c_size (git-fixes).
- overflow: Implement size_t saturating arithmetic helpers (jsc#PED-1211).
- phy: amlogic: phy-meson-axg-mipi-pcie-analog: Hold reference returned by of_get_parent() (git-fixes).
- phy: qualcomm: call clk_disable_unprepare in the error handling (git-fixes).
- pinctrl: Ingenic: JZ4755 bug fixes (git-fixes).
- pinctrl: alderlake: Add Intel Alder Lake-N pin controller support (jsc#PED-676).
- pinctrl: alderlake: Add Raptor Lake-S ACPI ID (jsc#PED-634).
- pinctrl: alderlake: Fix register offsets for ADL-N variant (jsc#PED-676).
- pinctrl: armada-37xx: Add missing GPIO-only pins (git-fixes).
- pinctrl: armada-37xx: Checks for errors in gpio_request_enable callback (git-fixes).
- pinctrl: armada-37xx: Fix definitions for MPP pins 20-22 (git-fixes).
- pinctrl: microchip-sgpio: Correct the fwnode_irq_get() return value check (git-fixes).
- platform/chrome: cros_ec: Notify the PM of wake events during resume (git-fixes).
- platform/chrome: cros_ec_proto: Update version on GET_NEXT_EVENT failure (git-fixes).
- platform/chrome: cros_ec_typec: Correct alt mode index (git-fixes).
- platform/chrome: fix double-free in chromeos_laptop_prepare() (git-fixes).
- platform/chrome: fix memory corruption in ioctl (git-fixes).
- platform/x86: asus-wmi: Document the dgpu_disable sysfs attribute (git-fixes).
- platform/x86: asus-wmi: Document the egpu_enable sysfs attribute (git-fixes).
- platform/x86: asus-wmi: Document the panel_od sysfs attribute (git-fixes).
- platform/x86: msi-laptop: Change DMI match / alias strings to fix module autoloading (git-fixes).
- platform/x86: msi-laptop: Fix old-ec check for backlight registering (git-fixes).
- platform/x86: msi-laptop: Fix resource cleanup (git-fixes).
- plip: avoid rcu debug splat (git-fixes).
- power: supply: adp5061: fix out-of-bounds read in adp5061_get_chg_type() (git-fixes).
- powerpc/64: Remove unused SYS_CALL_TABLE symbol (jsc#SLE-9246 git-fixes).
- powerpc/64: pcpu setup avoid reading mmu_linear_psize on 64e or radix (bsc#1204413 ltc#200176).
- powerpc/64s: Fix build failure when CONFIG_PPC_64S_HASH_MMU is not set (bsc#1204413 ltc#200176).
- powerpc/64s: Make flush_and_reload_slb a no-op when radix is enabled (bsc#1204413 ltc#200176).
- powerpc/64s: Make hash MMU support configurable (bsc#1204413 ltc#200176).
- powerpc/64s: Move and rename do_bad_slb_fault as it is not hash specific (bsc#1204413 ltc#200176).
- powerpc/64s: Move hash MMU support code under CONFIG_PPC_64S_HASH_MMU (bsc#1204413 ltc#200176).
- powerpc/64s: Rename hash_hugetlbpage.c to hugetlbpage.c (bsc#1204413 ltc#200176).
- powerpc/fadump: align destination address to pagesize (bsc#1204728 ltc#200074).
- powerpc/kprobes: Fix null pointer reference in arch_prepare_kprobe() (jsc#SLE-13847 git-fixes).
- powerpc/mm/64s: Drop pgd_huge() (bsc#1065729).
- powerpc/pci_dn: Add missing of_node_put() (bsc#1065729).
- powerpc/powernv: add missing of_node_put() in opal_export_attrs() (bsc#1065729).
- powerpc/pseries/vas: Add VAS IRQ primary handler (bsc#1204413 ltc#200176).
- powerpc/pseries: Stop selecting PPC_HASH_MMU_NATIVE (bsc#1204413 ltc#200176).
- powerpc/pseries: lparcfg do not include slb_size line in radix mode (bsc#1204413 ltc#200176).
- powerpc: Ignore DSI error caused by the copy/paste instruction (bsc#1204413 ltc#200176).
- powerpc: Rename PPC_NATIVE to PPC_HASH_MMU_NATIVE (bsc#1204413 ltc#200176). Update config files.
- powerpc: make memremap_compat_align 64s-only (bsc#1204413 ltc#200176).
- printk: add missing memory barrier to wake_up_klogd() (bsc#1204934).
- printk: use atomic updates for klogd work (bsc#1204934).
- printk: wake waiters for safe and NMI contexts (bsc#1204934).
- r8152: add PID for the Lenovo OneLink+ Dock (git-fixes).
- regulator: core: Prevent integer underflow (git-fixes).
- remoteproc: imx_rproc: Simplify some error message (git-fixes).
- remove unused CONFIG_MAXSMP from arm64/azure
- ring-buffer: Add ring_buffer_wake_waiters() (git-fixes).
- ring-buffer: Allow splice to read previous partially read pages (git-fixes).
- ring-buffer: Check for NULL cpu_buffer in ring_buffer_wake_waiters() (bsc#1204705).
- ring-buffer: Check pending waiters when doing wake ups as well (git-fixes).
- ring-buffer: Fix race between reset page and reading page (git-fixes).
- ring-buffer: Have the shortest_full queue be the shortest not longest (git-fixes).
- rose: Fix NULL pointer dereference in rose_send_frame() (git-fixes).
- rpm/check-for-config-changes: loosen pattern for AS_HAS_* This is needed to handle CONFIG_AS_HAS_NON_CONST_LEB128.
- rpmsg: qcom: glink: replace strncpy() with strscpy_pad() (git-fixes).
- rtc: stmp3xxx: Add failure handling for stmp3xxx_wdt_register() (git-fixes).
- s390/dasd: fix Oops in dasd_alias_get_start_dev due to missing pavgroup (git-fixes).
- s390/smp: enforce lowcore protection on CPU restart (git-fixes).
- sbitmap: Avoid leaving waitqueue in invalid state in __sbq_wake_up() (git-fixes).
- sbitmap: fix possible io hung due to lost wakeup (git-fixes).
- scsi: libsas: Fix use-after-free bug in smp_execute_task_sg() (git-fixes).
- scsi: lpfc: Create a sysfs entry called lpfc_xcvr_data for transceiver info (bsc#1204957).
- scsi: lpfc: Fix hard lockup when reading the rx_monitor from debugfs (bsc#1204957).
- scsi: lpfc: Fix memory leak in lpfc_create_port() (bsc#1204957).
- scsi: lpfc: Fix spelling mistake 'unsolicted' -&gt; 'unsolicited' (bsc#1204957).
- scsi: lpfc: Log when congestion management limits are in effect (bsc#1204957).
- scsi: lpfc: Set sli4_param's cmf option to zero when CMF is turned off (bsc#1204957).
- scsi: lpfc: Update lpfc version to 14.2.0.8 (bsc#1204957).
- scsi: lpfc: Update the obsolete adapter list (bsc#1204142).
- scsi: mpi3mr: Schedule IRQ kthreads only on non-RT kernels (bnc#1204498).
- scsi: qla2xxx: Fix serialization of DCBX TLV data request (bsc#1204963).
- scsi: qla2xxx: Use transport-defined speed mask for supported_speeds (bsc#1204963).
- scsi: scsi_transport_fc: Use %u for dev_loss_tmo (bsc#1202914).
- scsi: ufs: ufs-pci: Add support for Intel ADL (jsc#PED-707).
- scsi: ufs: ufs-pci: Add support for Intel MTL (jsc#PED-732).
- selftest: tpm2: Add Client.__del__() to close /dev/tpm* handle (git-fixes).
- selftests/livepatch: better synchronize test_klp_callbacks_busy (bsc#1071995).
- selftests/pidfd_test: Remove the erroneous ',' (git-fixes).
- selftests/powerpc: Skip energy_scale_info test on older firmware (git-fixes).
- selftests: netfilter: Fix nft_fib.sh for all.rp_filter=1 (git-fixes).
- selinux: allow FIOCLEX and FIONCLEX with policy capability (git-fixes).
- selinux: enable use of both GFP_KERNEL and GFP_ATOMIC in convert_context() (git-fixes).
- selinux: use 'grep -E' instead of 'egrep' (git-fixes).
- serial: 8250: Fix restoring termios speed after suspend (git-fixes).
- serial: core: move RS485 configuration tasks from drivers into core (git-fixes).
- sfc: disable softirqs for ptp TX (git-fixes).
- sfc: fix kernel panic when creating VF (git-fixes).
- sfc: fix use after free when disabling sriov (git-fixes).
- signal: break out of wait loops on kthread_stop() (bsc#1204926).
- slimbus: qcom-ngd: cleanup in probe error path (git-fixes).
- slimbus: qcom-ngd: use correct error in message of pdr_add_lookup() failure (git-fixes).
- soc/tegra: fuse: Drop Kconfig dependency on TEGRA20_APB_DMA (git-fixes).
- soc: qcom: smem_state: Add refcounting for the 'state-&gt;of_node' (git-fixes).
- soc: qcom: smsm: Fix refcount leak bugs in qcom_smsm_probe() (git-fixes).
- soc: sunxi: sram: Fix probe function ordering issues (git-fixes).
- soc: sunxi_sram: Make use of the helper function devm_platform_ioremap_resource() (git-fixes).
- soundwire: cadence: Do not overwrite msg-&gt;buf during write commands (git-fixes).
- soundwire: intel: fix error handling on dai registration issues (git-fixes).
- spi: Ensure that sg_table won't be used after being freed (git-fixes).
- spi: pxa2xx: Add support for Intel Meteor Lake-P (jsc#PED-732).
- spi: pxa2xx: Add support for Intel Raptor Lake PCH-S (jsc#PED-634).
- spmi: pmic-arb: correct duplicate APID to PPID mapping logic (git-fixes).
- spmi: pmic-arb: do not ack and clear peripheral interrupts in cleanup_irq (git-fixes).
- staging: rtl8723bs: fix a potential memory leak in rtw_init_cmd_priv() (git-fixes).
- staging: rtl8723bs: fix potential memory leak in rtw_init_drv_sw() (git-fixes).
- staging: vt6655: fix potential memory leak (git-fixes).
- staging: vt6655: fix some erroneous memory clean-up loops (git-fixes).
- stmmac: intel: Add a missing clk_disable_unprepare() call in intel_eth_pci_remove() (git-fixes).
- stmmac: intel: Fix an error handling path in intel_eth_pci_probe() (git-fixes).
- thermal/drivers/qcom/tsens-v0_1: Fix MSM8939 fourth sensor hw_id (git-fixes).
- thermal: cpufreq_cooling: Check the policy first in cpufreq_cooling_register() (git-fixes).
- thermal: int340x: Mode setting with new OS handshake (jsc#PED-678).
- thermal: int340x: Update OS policy capability handshake (jsc#PED-678).
- thermal: intel_powerclamp: Use first online CPU as control_cpu (git-fixes).
- thermal: intel_powerclamp: Use get_cpu() instead of smp_processor_id() to avoid crash (git-fixes).
- thunderbolt: Add back Intel Falcon Ridge end-to-end flow control workaround (git-fixes).
- thunderbolt: Add missing device ID to tb_switch_is_alpine_ridge() (git-fixes).
- thunderbolt: Add support for Intel Raptor Lake (jsc#PED-634).
- thunderbolt: Disable LTTPR on Intel Titan Ridge (git-fixes).
- thunderbolt: Explicitly enable lane adapter hotplug events at startup (git-fixes).
- thunderbolt: Explicitly reset plug events delay back to USB4 spec value (git-fixes).
- thunderbolt: Fix buffer allocation of devices with no DisplayPort adapters (git-fixes).
- tracing/osnoise: Fix possible recursive locking in stop_per_cpu_kthreads (git-fixes).
- tracing: Add '(fault)' name injection to kernel probes (git-fixes).
- tracing: Add ioctl() to force ring buffer waiters to wake up (git-fixes).
- tracing: Disable interrupt or preemption before acquiring arch_spinlock_t (git-fixes).
- tracing: Do not free snapshot if tracer is on cmdline (git-fixes).
- tracing: Fix reading strings from synthetic events (git-fixes).
- tracing: Move duplicate code of trace_kprobe/eprobe.c into header (git-fixes).
- tracing: Replace deprecated CPU-hotplug functions (git-fixes).
- tracing: Simplify conditional compilation code in tracing_set_tracer() (git-fixes).
- tracing: Wake up ring buffer waiters on closing of the file (git-fixes).
- tracing: Wake up waiters when tracing is disabled (git-fixes).
- tracing: kprobe: Fix kprobe event gen test module on exit (git-fixes).
- tracing: kprobe: Make gen test module work in arm and riscv (git-fixes).
- tty: serial: fsl_lpuart: disable dma rx/tx use flags in lpuart_dma_shutdown (git-fixes).
- tty: xilinx_uartps: Fix the ignore_status (git-fixes).
- uas: add no-uas quirk for Hiksemi usb_disk (git-fixes).
- uas: ignore UAS for Thinkplus chips (git-fixes).
- udmabuf: Set ubuf-&gt;sg = NULL if the creation of sg table fails (git-fixes).
- usb-storage: Add Hiksemi USB3-FW to IGNORE_UAS (git-fixes).
- usb/hcd: Fix dma_map_sg error check (git-fixes).
- usb: add RESET_RESUME quirk for NVIDIA Jetson devices in RCM (git-fixes).
- usb: add quirks for Lenovo OneLink+ Dock (git-fixes).
- usb: bdc: change state when port disconnected (git-fixes).
- usb: cdc-wdm: Use skb_put_data() instead of skb_put/memcpy pair (git-fixes).
- usb: common: debug: Check non-standard control requests (git-fixes).
- usb: dwc3: core: Enable GUCTL1 bit 10 for fixing termination error after resume bug (git-fixes).
- usb: dwc3: gadget: Do not set IMI for no_interrupt (git-fixes).
- usb: dwc3: gadget: Stop processing more requests on IMI (git-fixes).
- usb: ehci: Fix a function name in comments (git-fixes).
- usb: gadget: bdc: fix typo in comment (git-fixes).
- usb: gadget: f_fs: stricter integer overflow checks (git-fixes).
- usb: gadget: function: fix dangling pnp_string in f_printer.c (git-fixes).
- usb: host: xhci-plat: suspend and resume clocks (git-fixes).
- usb: host: xhci-plat: suspend/resume clks for brcm (git-fixes).
- usb: host: xhci: Fix potential memory leak in xhci_alloc_stream_info() (git-fixes).
- usb: idmouse: fix an uninit-value in idmouse_open (git-fixes).
- usb: mon: make mmapped memory read only (git-fixes).
- usb: mtu3: fix failed runtime suspend in host only mode (git-fixes).
- usb: musb: Fix musb_gadget.c rxstate overflow bug (git-fixes).
- usb: serial: console: move mutex_unlock() before usb_serial_put() (git-fixes).
- usb: serial: ftdi_sio: fix 300 bps rate for SIO (git-fixes).
- usb: serial: qcserial: add new usb-id for Dell branded EM7455 (git-fixes).
- usb: typec: tcpm: fix typo in comment (git-fixes).
- usb: xhci: add XHCI_SPURIOUS_SUCCESS to ASM1042 despite being a V0.96 controller (git-fixes).
- virt: vbox: convert to use dev_groups (git-fixes).
- vsock: fix possible infinite sleep in vsock_connectible_wait_data() (git-fixes).
- vsock: remove the unused 'wait' in vsock_connectible_recvmsg() (git-fixes).
- watchdog/hpwdt: Include nmi.h only if CONFIG_HPWDT_NMI_DECODING (git-fixes).
- watchdog: armada_37xx_wdt: Fix .set_timeout callback (git-fixes).
- watchdog: ftwdt010_wdt: fix test for platform_get_irq() failure (git-fixes).
- wifi: ath9k: avoid uninit memory read in ath9k_htc_rx_msg() (git-fixes).
- wifi: brcmfmac: fix invalid address access when enabling SCAN log level (git-fixes).
- wifi: brcmfmac: fix use-after-free bug in brcmf_netdev_start_xmit() (git-fixes).
- wifi: cfg80211/mac80211: reject bad MBSSID elements (git-fixes).
- wifi: cfg80211: fix ieee80211_data_to_8023_exthdr handling of small packets (git-fixes).
- wifi: cfg80211: update hidden BSSes to avoid WARN_ON (git-fixes).
- wifi: iwlwifi: mvm: fix double list_add at iwl_mvm_mac_wake_tx_queue (other cases) (git-fixes).
- wifi: mac80211: do not drop packets smaller than the LLC-SNAP header on fast-rx (git-fixes).
- wifi: mac80211: fix decap offload for stations on AP_VLAN interfaces (git-fixes).
- wifi: mac80211: fix probe req HE capabilities access (git-fixes).
- wifi: mac80211_hwsim: avoid mac80211 warning on bad rate (git-fixes).
- wifi: mt76: mt7921: reset msta-&gt;airtime_ac while clearing up hw value (git-fixes).
- wifi: rt2x00: correctly set BBP register 86 for MT7620 (git-fixes).
- wifi: rt2x00: do not run Rt5592 IQ calibration on MT7620 (git-fixes).
- wifi: rt2x00: set SoC wmac clock register (git-fixes).
- wifi: rt2x00: set VGC gain for both chains of MT7620 (git-fixes).
- wifi: rt2x00: set correct TX_SW_CFG1 MAC register for MT7620 (git-fixes).
- wwan_hwsim: fix possible memory leak in wwan_hwsim_dev_new() (git-fixes).
- x86/boot: Do not propagate uninitialized boot_params-&gt;cc_blob_address (bsc#1204970).
- x86/boot: Fix the setup data types max limit (bsc#1204970).
- x86/compressed/64: Add identity mappings for setup_data entries (bsc#1204970).
- x86/sev: Annotate stack change in the #VC handler (bsc#1204970).
- x86/sev: Do not use cc_platform_has() for early SEV-SNP calls (bsc#1204970).
- x86/sev: Remove duplicated assignment to variable info (bsc#1204970).
- xen/gntdev: Prevent leaking grants (git-fixes).
- xhci-pci: Set runtime PM as default policy on all xHC 1.2 or later devices (git-fixes).
- xhci: Add quirk to reset host back to default state at shutdown (git-fixes).
- xhci: Do not show warning for reinit on known broken suspend (git-fixes).
- xhci: Remove device endpoints from bandwidth list when freeing the device (git-fixes).
- xhci: dbc: Fix memory leak in xhci_alloc_dbc() (git-fixes).

</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">Image SLES15-SP4-Azure-Basic-2022-3998,Image SLES15-SP4-Azure-Standard-2022-3998,Image SLES15-SP4-HPC-2022-3998,Image SLES15-SP4-HPC-Azure-2022-3998,SUSE-2022-3998,SUSE-SLE-Module-Public-Cloud-15-SP4-2022-3998,openSUSE-SLE-15.4-2022-3998</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      <Description>Link for SUSE-SU-2022:3998-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2022-November/012930.html</URL>
      <Description>E-Mail link for SUSE-SU-2022:3998-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1065729</URL>
      <Description>SUSE Bug 1065729</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1071995</URL>
      <Description>SUSE Bug 1071995</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1152472</URL>
      <Description>SUSE Bug 1152472</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1152489</URL>
      <Description>SUSE Bug 1152489</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1188238</URL>
      <Description>SUSE Bug 1188238</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1194869</URL>
      <Description>SUSE Bug 1194869</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1196018</URL>
      <Description>SUSE Bug 1196018</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1196632</URL>
      <Description>SUSE Bug 1196632</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1199904</URL>
      <Description>SUSE Bug 1199904</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1200567</URL>
      <Description>SUSE Bug 1200567</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1200692</URL>
      <Description>SUSE Bug 1200692</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1200788</URL>
      <Description>SUSE Bug 1200788</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1202187</URL>
      <Description>SUSE Bug 1202187</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1202686</URL>
      <Description>SUSE Bug 1202686</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1202700</URL>
      <Description>SUSE Bug 1202700</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1202914</URL>
      <Description>SUSE Bug 1202914</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1203098</URL>
      <Description>SUSE Bug 1203098</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1203229</URL>
      <Description>SUSE Bug 1203229</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1203290</URL>
      <Description>SUSE Bug 1203290</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1203435</URL>
      <Description>SUSE Bug 1203435</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1203514</URL>
      <Description>SUSE Bug 1203514</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1203699</URL>
      <Description>SUSE Bug 1203699</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1203701</URL>
      <Description>SUSE Bug 1203701</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1203767</URL>
      <Description>SUSE Bug 1203767</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1203770</URL>
      <Description>SUSE Bug 1203770</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1203802</URL>
      <Description>SUSE Bug 1203802</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1203922</URL>
      <Description>SUSE Bug 1203922</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1203979</URL>
      <Description>SUSE Bug 1203979</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204017</URL>
      <Description>SUSE Bug 1204017</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204051</URL>
      <Description>SUSE Bug 1204051</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204059</URL>
      <Description>SUSE Bug 1204059</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204060</URL>
      <Description>SUSE Bug 1204060</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204125</URL>
      <Description>SUSE Bug 1204125</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204142</URL>
      <Description>SUSE Bug 1204142</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204166</URL>
      <Description>SUSE Bug 1204166</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204168</URL>
      <Description>SUSE Bug 1204168</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204171</URL>
      <Description>SUSE Bug 1204171</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204241</URL>
      <Description>SUSE Bug 1204241</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204353</URL>
      <Description>SUSE Bug 1204353</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204354</URL>
      <Description>SUSE Bug 1204354</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204355</URL>
      <Description>SUSE Bug 1204355</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204402</URL>
      <Description>SUSE Bug 1204402</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204413</URL>
      <Description>SUSE Bug 1204413</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204415</URL>
      <Description>SUSE Bug 1204415</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204417</URL>
      <Description>SUSE Bug 1204417</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204428</URL>
      <Description>SUSE Bug 1204428</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204431</URL>
      <Description>SUSE Bug 1204431</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204439</URL>
      <Description>SUSE Bug 1204439</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204470</URL>
      <Description>SUSE Bug 1204470</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204479</URL>
      <Description>SUSE Bug 1204479</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204498</URL>
      <Description>SUSE Bug 1204498</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204533</URL>
      <Description>SUSE Bug 1204533</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204569</URL>
      <Description>SUSE Bug 1204569</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204574</URL>
      <Description>SUSE Bug 1204574</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204575</URL>
      <Description>SUSE Bug 1204575</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204619</URL>
      <Description>SUSE Bug 1204619</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204635</URL>
      <Description>SUSE Bug 1204635</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204637</URL>
      <Description>SUSE Bug 1204637</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204646</URL>
      <Description>SUSE Bug 1204646</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204647</URL>
      <Description>SUSE Bug 1204647</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204650</URL>
      <Description>SUSE Bug 1204650</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204653</URL>
      <Description>SUSE Bug 1204653</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204693</URL>
      <Description>SUSE Bug 1204693</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204705</URL>
      <Description>SUSE Bug 1204705</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204719</URL>
      <Description>SUSE Bug 1204719</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204728</URL>
      <Description>SUSE Bug 1204728</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204753</URL>
      <Description>SUSE Bug 1204753</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204868</URL>
      <Description>SUSE Bug 1204868</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204926</URL>
      <Description>SUSE Bug 1204926</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204933</URL>
      <Description>SUSE Bug 1204933</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204934</URL>
      <Description>SUSE Bug 1204934</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204947</URL>
      <Description>SUSE Bug 1204947</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204957</URL>
      <Description>SUSE Bug 1204957</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204963</URL>
      <Description>SUSE Bug 1204963</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1204970</URL>
      <Description>SUSE Bug 1204970</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-1882/</URL>
      <Description>SUSE CVE CVE-2022-1882 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-2153/</URL>
      <Description>SUSE CVE CVE-2022-2153 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-28748/</URL>
      <Description>SUSE CVE CVE-2022-28748 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-2964/</URL>
      <Description>SUSE CVE CVE-2022-2964 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-2978/</URL>
      <Description>SUSE CVE CVE-2022-2978 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3169/</URL>
      <Description>SUSE CVE CVE-2022-3169 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-33981/</URL>
      <Description>SUSE CVE CVE-2022-33981 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3424/</URL>
      <Description>SUSE CVE CVE-2022-3424 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3435/</URL>
      <Description>SUSE CVE CVE-2022-3435 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3521/</URL>
      <Description>SUSE CVE CVE-2022-3521 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3524/</URL>
      <Description>SUSE CVE CVE-2022-3524 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3526/</URL>
      <Description>SUSE CVE CVE-2022-3526 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3535/</URL>
      <Description>SUSE CVE CVE-2022-3535 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3542/</URL>
      <Description>SUSE CVE CVE-2022-3542 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3545/</URL>
      <Description>SUSE CVE CVE-2022-3545 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3565/</URL>
      <Description>SUSE CVE CVE-2022-3565 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3577/</URL>
      <Description>SUSE CVE CVE-2022-3577 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3586/</URL>
      <Description>SUSE CVE CVE-2022-3586 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3594/</URL>
      <Description>SUSE CVE CVE-2022-3594 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3619/</URL>
      <Description>SUSE CVE CVE-2022-3619 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3621/</URL>
      <Description>SUSE CVE CVE-2022-3621 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3625/</URL>
      <Description>SUSE CVE CVE-2022-3625 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3628/</URL>
      <Description>SUSE CVE CVE-2022-3628 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3629/</URL>
      <Description>SUSE CVE CVE-2022-3629 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3633/</URL>
      <Description>SUSE CVE CVE-2022-3633 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3640/</URL>
      <Description>SUSE CVE CVE-2022-3640 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3646/</URL>
      <Description>SUSE CVE CVE-2022-3646 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3649/</URL>
      <Description>SUSE CVE CVE-2022-3649 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-40476/</URL>
      <Description>SUSE CVE CVE-2022-40476 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-40768/</URL>
      <Description>SUSE CVE CVE-2022-40768 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-41674/</URL>
      <Description>SUSE CVE CVE-2022-41674 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-42703/</URL>
      <Description>SUSE CVE CVE-2022-42703 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-42719/</URL>
      <Description>SUSE CVE CVE-2022-42719 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-42720/</URL>
      <Description>SUSE CVE CVE-2022-42720 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-42721/</URL>
      <Description>SUSE CVE CVE-2022-42721 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-42722/</URL>
      <Description>SUSE CVE CVE-2022-42722 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-43750/</URL>
      <Description>SUSE CVE CVE-2022-43750 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="Image SLES15-SP4-Azure-Basic">
      <Branch Type="Product Name" Name="Image SLES15-SP4-Azure-Basic">
        <FullProductName ProductID="Image SLES15-SP4-Azure-Basic">Image SLES15-SP4-Azure-Basic</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP4-Azure-Standard">
      <Branch Type="Product Name" Name="Image SLES15-SP4-Azure-Standard">
        <FullProductName ProductID="Image SLES15-SP4-Azure-Standard">Image SLES15-SP4-Azure-Standard</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP4-HPC">
      <Branch Type="Product Name" Name="Image SLES15-SP4-HPC">
        <FullProductName ProductID="Image SLES15-SP4-HPC">Image SLES15-SP4-HPC</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="Image SLES15-SP4-HPC-Azure">
      <Branch Type="Product Name" Name="Image SLES15-SP4-HPC-Azure">
        <FullProductName ProductID="Image SLES15-SP4-HPC-Azure">Image SLES15-SP4-HPC-Azure</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Module for Public Cloud 15 SP4">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Module for Public Cloud 15 SP4">
        <FullProductName ProductID="SUSE Linux Enterprise Module for Public Cloud 15 SP4" CPE="cpe:/o:suse:sle-module-public-cloud:15:sp4">SUSE Linux Enterprise Module for Public Cloud 15 SP4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Family" Name="openSUSE Leap 15.4">
      <Branch Type="Product Name" Name="openSUSE Leap 15.4">
        <FullProductName ProductID="openSUSE Leap 15.4" CPE="cpe:/o:opensuse:leap:15.4">openSUSE Leap 15.4</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="kernel-azure-5.14.21-150400.14.21.2">
      <FullProductName ProductID="kernel-azure-5.14.21-150400.14.21.2">kernel-azure-5.14.21-150400.14.21.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="cluster-md-kmp-azure-5.14.21-150400.14.21.2">
      <FullProductName ProductID="cluster-md-kmp-azure-5.14.21-150400.14.21.2">cluster-md-kmp-azure-5.14.21-150400.14.21.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dlm-kmp-azure-5.14.21-150400.14.21.2">
      <FullProductName ProductID="dlm-kmp-azure-5.14.21-150400.14.21.2">dlm-kmp-azure-5.14.21-150400.14.21.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gfs2-kmp-azure-5.14.21-150400.14.21.2">
      <FullProductName ProductID="gfs2-kmp-azure-5.14.21-150400.14.21.2">gfs2-kmp-azure-5.14.21-150400.14.21.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-azure-devel-5.14.21-150400.14.21.2">
      <FullProductName ProductID="kernel-azure-devel-5.14.21-150400.14.21.2">kernel-azure-devel-5.14.21-150400.14.21.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-azure-extra-5.14.21-150400.14.21.2">
      <FullProductName ProductID="kernel-azure-extra-5.14.21-150400.14.21.2">kernel-azure-extra-5.14.21-150400.14.21.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-azure-livepatch-devel-5.14.21-150400.14.21.2">
      <FullProductName ProductID="kernel-azure-livepatch-devel-5.14.21-150400.14.21.2">kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-azure-optional-5.14.21-150400.14.21.2">
      <FullProductName ProductID="kernel-azure-optional-5.14.21-150400.14.21.2">kernel-azure-optional-5.14.21-150400.14.21.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-devel-azure-5.14.21-150400.14.21.1">
      <FullProductName ProductID="kernel-devel-azure-5.14.21-150400.14.21.1">kernel-devel-azure-5.14.21-150400.14.21.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-source-azure-5.14.21-150400.14.21.1">
      <FullProductName ProductID="kernel-source-azure-5.14.21-150400.14.21.1">kernel-source-azure-5.14.21-150400.14.21.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-syms-azure-5.14.21-150400.14.21.1">
      <FullProductName ProductID="kernel-syms-azure-5.14.21-150400.14.21.1">kernel-syms-azure-5.14.21-150400.14.21.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kselftests-kmp-azure-5.14.21-150400.14.21.2">
      <FullProductName ProductID="kselftests-kmp-azure-5.14.21-150400.14.21.2">kselftests-kmp-azure-5.14.21-150400.14.21.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ocfs2-kmp-azure-5.14.21-150400.14.21.2">
      <FullProductName ProductID="ocfs2-kmp-azure-5.14.21-150400.14.21.2">ocfs2-kmp-azure-5.14.21-150400.14.21.2</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="reiserfs-kmp-azure-5.14.21-150400.14.21.2">
      <FullProductName ProductID="reiserfs-kmp-azure-5.14.21-150400.14.21.2">reiserfs-kmp-azure-5.14.21-150400.14.21.2</FullProductName>
    </Branch>
    <Relationship ProductReference="kernel-azure-5.14.21-150400.14.21.2" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Azure-Basic">
      <FullProductName ProductID="Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2">kernel-azure-5.14.21-150400.14.21.2 as a component of Image SLES15-SP4-Azure-Basic</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-azure-5.14.21-150400.14.21.2" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-Azure-Standard">
      <FullProductName ProductID="Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2">kernel-azure-5.14.21-150400.14.21.2 as a component of Image SLES15-SP4-Azure-Standard</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-azure-5.14.21-150400.14.21.2" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-HPC">
      <FullProductName ProductID="Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2">kernel-azure-5.14.21-150400.14.21.2 as a component of Image SLES15-SP4-HPC</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-azure-5.14.21-150400.14.21.2" RelationType="Default Component Of" RelatesToProductReference="Image SLES15-SP4-HPC-Azure">
      <FullProductName ProductID="Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2">kernel-azure-5.14.21-150400.14.21.2 as a component of Image SLES15-SP4-HPC-Azure</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-azure-5.14.21-150400.14.21.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Public Cloud 15 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2">kernel-azure-5.14.21-150400.14.21.2 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-azure-devel-5.14.21-150400.14.21.2" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Public Cloud 15 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2">kernel-azure-devel-5.14.21-150400.14.21.2 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-devel-azure-5.14.21-150400.14.21.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Public Cloud 15 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1">kernel-devel-azure-5.14.21-150400.14.21.1 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source-azure-5.14.21-150400.14.21.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Public Cloud 15 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1">kernel-source-azure-5.14.21-150400.14.21.1 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-syms-azure-5.14.21-150400.14.21.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Module for Public Cloud 15 SP4">
      <FullProductName ProductID="SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1">kernel-syms-azure-5.14.21-150400.14.21.1 as a component of SUSE Linux Enterprise Module for Public Cloud 15 SP4</FullProductName>
    </Relationship>
    <Relationship ProductReference="cluster-md-kmp-azure-5.14.21-150400.14.21.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.4">
      <FullProductName ProductID="openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2">cluster-md-kmp-azure-5.14.21-150400.14.21.2 as a component of openSUSE Leap 15.4</FullProductName>
    </Relationship>
    <Relationship ProductReference="dlm-kmp-azure-5.14.21-150400.14.21.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.4">
      <FullProductName ProductID="openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2">dlm-kmp-azure-5.14.21-150400.14.21.2 as a component of openSUSE Leap 15.4</FullProductName>
    </Relationship>
    <Relationship ProductReference="gfs2-kmp-azure-5.14.21-150400.14.21.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.4">
      <FullProductName ProductID="openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2">gfs2-kmp-azure-5.14.21-150400.14.21.2 as a component of openSUSE Leap 15.4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-azure-5.14.21-150400.14.21.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.4">
      <FullProductName ProductID="openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2">kernel-azure-5.14.21-150400.14.21.2 as a component of openSUSE Leap 15.4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-azure-devel-5.14.21-150400.14.21.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.4">
      <FullProductName ProductID="openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2">kernel-azure-devel-5.14.21-150400.14.21.2 as a component of openSUSE Leap 15.4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-azure-extra-5.14.21-150400.14.21.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.4">
      <FullProductName ProductID="openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2">kernel-azure-extra-5.14.21-150400.14.21.2 as a component of openSUSE Leap 15.4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-azure-livepatch-devel-5.14.21-150400.14.21.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.4">
      <FullProductName ProductID="openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2">kernel-azure-livepatch-devel-5.14.21-150400.14.21.2 as a component of openSUSE Leap 15.4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-azure-optional-5.14.21-150400.14.21.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.4">
      <FullProductName ProductID="openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2">kernel-azure-optional-5.14.21-150400.14.21.2 as a component of openSUSE Leap 15.4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-devel-azure-5.14.21-150400.14.21.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.4">
      <FullProductName ProductID="openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1">kernel-devel-azure-5.14.21-150400.14.21.1 as a component of openSUSE Leap 15.4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source-azure-5.14.21-150400.14.21.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.4">
      <FullProductName ProductID="openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1">kernel-source-azure-5.14.21-150400.14.21.1 as a component of openSUSE Leap 15.4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-syms-azure-5.14.21-150400.14.21.1" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.4">
      <FullProductName ProductID="openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1">kernel-syms-azure-5.14.21-150400.14.21.1 as a component of openSUSE Leap 15.4</FullProductName>
    </Relationship>
    <Relationship ProductReference="kselftests-kmp-azure-5.14.21-150400.14.21.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.4">
      <FullProductName ProductID="openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2">kselftests-kmp-azure-5.14.21-150400.14.21.2 as a component of openSUSE Leap 15.4</FullProductName>
    </Relationship>
    <Relationship ProductReference="ocfs2-kmp-azure-5.14.21-150400.14.21.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.4">
      <FullProductName ProductID="openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2">ocfs2-kmp-azure-5.14.21-150400.14.21.2 as a component of openSUSE Leap 15.4</FullProductName>
    </Relationship>
    <Relationship ProductReference="reiserfs-kmp-azure-5.14.21-150400.14.21.2" RelationType="Default Component Of" RelatesToProductReference="openSUSE Leap 15.4">
      <FullProductName ProductID="openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2">reiserfs-kmp-azure-5.14.21-150400.14.21.2 as a component of openSUSE Leap 15.4</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A use-after-free flaw was found in the Linux kernel’s pipes functionality in how a user performs manipulations with the pipe post_one_notification() after free_pipe_info() that is already called. This flaw allows a local user to crash or potentially escalate their privileges on the system.</Note>
    </Notes>
    <CVE>CVE-2022-1882</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>7.2</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:C/I:C/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>8.4</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-1882.html</URL>
        <Description>CVE-2022-1882</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1199904</URL>
        <Description>SUSE Bug 1199904</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1200058</URL>
        <Description>SUSE Bug 1200058</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in the Linux kernel’s KVM when attempting to set a SynIC IRQ. This issue makes it possible for a misbehaving VMM to write to SYNIC/STIMER MSRs, causing a NULL pointer dereference. This flaw allows an unprivileged local attacker on the host to issue specific ioctl calls, causing a kernel oops condition that results in a denial of service.</Note>
    </Notes>
    <CVE>CVE-2022-2153</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>6.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-2153.html</URL>
        <Description>CVE-2022-2153</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1200788</URL>
        <Description>SUSE Bug 1200788</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-2964. Reason: This candidate is a reservation duplicate of CVE-2022-2964. Notes: All CVE users should reference CVE-2022-2964 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.</Note>
    </Notes>
    <CVE>CVE-2022-28748</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>3.7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-28748.html</URL>
        <Description>CVE-2022-28748</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1196018</URL>
        <Description>SUSE Bug 1196018</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in the Linux kernel’s driver for the ASIX AX88179_178A-based USB 2.0/3.0 Gigabit Ethernet Devices. The vulnerability contains multiple out-of-bounds reads and possible out-of-bounds writes.</Note>
    </Notes>
    <CVE>CVE-2022-2964</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7.8</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-2964.html</URL>
        <Description>CVE-2022-2964</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1202686</URL>
        <Description>SUSE Bug 1202686</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1203008</URL>
        <Description>SUSE Bug 1203008</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1208044</URL>
        <Description>SUSE Bug 1208044</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw use after free in the Linux kernel NILFS file system was found in the way user triggers function security_inode_alloc to fail with following call to function nilfs_mdt_destroy. A local user could use this flaw to crash the system or potentially escalate their privileges on the system.</Note>
    </Notes>
    <CVE>CVE-2022-2978</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-2978.html</URL>
        <Description>CVE-2022-2978</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1202700</URL>
        <Description>SUSE Bug 1202700</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204745</URL>
        <Description>SUSE Bug 1204745</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in the Linux kernel. A denial of service flaw may occur if there is a consecutive request of the NVME_IOCTL_RESET and the NVME_IOCTL_SUBSYS_RESET through the device file of the driver, resulting in a PCIe link disconnect.</Note>
    </Notes>
    <CVE>CVE-2022-3169</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>6.2</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3169.html</URL>
        <Description>CVE-2022-3169</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1203290</URL>
        <Description>SUSE Bug 1203290</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">drivers/block/floppy.c in the Linux kernel before 5.17.6 is vulnerable to a denial of service, because of a concurrency use-after-free flaw after deallocating raw_cmd in the raw_cmd_ioctl function.</Note>
    </Notes>
    <CVE>CVE-2022-33981</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.1</BaseScoreV2>
        <VectorV2>AV:L/AC:L/Au:N/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-33981.html</URL>
        <Description>CVE-2022-33981</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1200692</URL>
        <Description>SUSE Bug 1200692</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first gru_file_unlocked_ioctl function is called by the user, where a fail pass occurs in the gru_check_chiplet_assignment function. This flaw allows a local user to crash or potentially escalate their privileges on the system.</Note>
    </Notes>
    <CVE>CVE-2022-3424</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3424.html</URL>
        <Description>CVE-2022-3424</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204166</URL>
        <Description>SUSE Bug 1204166</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204167</URL>
        <Description>SUSE Bug 1204167</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1208044</URL>
        <Description>SUSE Bug 1208044</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212309</URL>
        <Description>SUSE Bug 1212309</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability classified as problematic has been found in Linux Kernel. This affects the function fib_nh_match of the file net/ipv4/fib_semantics.c of the component IPv4 Handler. The manipulation leads to out-of-bounds read. It is possible to initiate the attack remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-210357 was assigned to this vulnerability.</Note>
    </Notes>
    <CVE>CVE-2022-3435</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>5.3</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3435.html</URL>
        <Description>CVE-2022-3435</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204171</URL>
        <Description>SUSE Bug 1204171</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="10">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function kcm_tx_work of the file net/kcm/kcmsock.c of the component kcm. The manipulation leads to race condition. It is recommended to apply a patch to fix this issue. VDB-211018 is the identifier assigned to this vulnerability.</Note>
    </Notes>
    <CVE>CVE-2022-3521</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>5.1</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3521.html</URL>
        <Description>CVE-2022-3521</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204355</URL>
        <Description>SUSE Bug 1204355</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1217458</URL>
        <Description>SUSE Bug 1217458</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="11">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function ipv6_renew_options of the component IPv6 Handler. The manipulation leads to memory leak. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211021 was assigned to this vulnerability.</Note>
    </Notes>
    <CVE>CVE-2022-3524</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>4.7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3524.html</URL>
        <Description>CVE-2022-3524</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204354</URL>
        <Description>SUSE Bug 1204354</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212320</URL>
        <Description>SUSE Bug 1212320</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="12">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability classified as problematic was found in Linux Kernel. This vulnerability affects the function macvlan_handle_frame of the file drivers/net/macvlan.c of the component skb. The manipulation leads to memory leak. The attack can be initiated remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211024.</Note>
    </Notes>
    <CVE>CVE-2022-3526</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>5.9</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3526.html</URL>
        <Description>CVE-2022-3526</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204353</URL>
        <Description>SUSE Bug 1204353</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="13">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.</Note>
    </Notes>
    <CVE>CVE-2022-3535</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>2.3</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3535.html</URL>
        <Description>CVE-2022-3535</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204417</URL>
        <Description>SUSE Bug 1204417</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="14">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.</Note>
    </Notes>
    <CVE>CVE-2022-3542</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>5.9</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3542.html</URL>
        <Description>CVE-2022-3542</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204402</URL>
        <Description>SUSE Bug 1204402</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1217458</URL>
        <Description>SUSE Bug 1217458</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="15">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability has been found in Linux Kernel and classified as critical. Affected by this vulnerability is the function area_cache_get of the file drivers/net/ethernet/netronome/nfp/nfpcore/nfp_cppcore.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211045 was assigned to this vulnerability.</Note>
    </Notes>
    <CVE>CVE-2022-3545</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7.4</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3545.html</URL>
        <Description>CVE-2022-3545</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204415</URL>
        <Description>SUSE Bug 1204415</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204424</URL>
        <Description>SUSE Bug 1204424</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1209225</URL>
        <Description>SUSE Bug 1209225</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1217531</URL>
        <Description>SUSE Bug 1217531</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="16">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability, which was classified as critical, has been found in Linux Kernel. Affected by this issue is the function del_timer of the file drivers/isdn/mISDN/l1oip_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211088.</Note>
    </Notes>
    <CVE>CVE-2022-3565</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7.4</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3565.html</URL>
        <Description>CVE-2022-3565</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204431</URL>
        <Description>SUSE Bug 1204431</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204432</URL>
        <Description>SUSE Bug 1204432</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1208044</URL>
        <Description>SUSE Bug 1208044</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212323</URL>
        <Description>SUSE Bug 1212323</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="17">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An out-of-bounds memory write flaw was found in the Linux kernel’s Kid-friendly Wired Controller driver. This flaw allows a local user to crash or potentially escalate their privileges on the system. It is in bigben_probe of drivers/hid/hid-bigbenff.c. The reason is incorrect assumption - bigben devices all have inputs. However, malicious devices can break this assumption, leaking to out-of-bound write.</Note>
    </Notes>
    <CVE>CVE-2022-3577</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3577.html</URL>
        <Description>CVE-2022-3577</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204470</URL>
        <Description>SUSE Bug 1204470</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204486</URL>
        <Description>SUSE Bug 1204486</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="18">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw was found in the Linux kernel’s networking code. A use-after-free was found in the way the sch_sfb enqueue function used the socket buffer (SKB) cb field after the same SKB had been enqueued (and freed) into a child qdisc. This flaw allows a local, unprivileged user to crash the system, causing a denial of service.</Note>
    </Notes>
    <CVE>CVE-2022-3586</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3586.html</URL>
        <Description>CVE-2022-3586</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204439</URL>
        <Description>SUSE Bug 1204439</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204576</URL>
        <Description>SUSE Bug 1204576</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1208044</URL>
        <Description>SUSE Bug 1208044</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1209225</URL>
        <Description>SUSE Bug 1209225</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212294</URL>
        <Description>SUSE Bug 1212294</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="19">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability was found in Linux Kernel. It has been declared as problematic. Affected by this vulnerability is the function intr_callback of the file drivers/net/usb/r8152.c of the component BPF. The manipulation leads to logging of excessive data. The attack can be launched remotely. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-211363.</Note>
    </Notes>
    <CVE>CVE-2022-3594</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>5.1</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3594.html</URL>
        <Description>CVE-2022-3594</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204479</URL>
        <Description>SUSE Bug 1204479</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1217458</URL>
        <Description>SUSE Bug 1217458</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="20">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability has been found in Linux Kernel and classified as problematic. This vulnerability affects the function l2cap_recv_acldata of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. VDB-211918 is the identifier assigned to this vulnerability.</Note>
    </Notes>
    <CVE>CVE-2022-3619</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>5.3</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3619.html</URL>
        <Description>CVE-2022-3619</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204569</URL>
        <Description>SUSE Bug 1204569</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="21">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_bmap_lookup_at_level of the file fs/nilfs2/inode.c of the component nilfs2. The manipulation leads to null pointer dereference. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211920.</Note>
    </Notes>
    <CVE>CVE-2022-3621</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>4.3</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3621.html</URL>
        <Description>CVE-2022-3621</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204574</URL>
        <Description>SUSE Bug 1204574</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212295</URL>
        <Description>SUSE Bug 1212295</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="22">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability was found in Linux Kernel. It has been classified as critical. This affects the function devlink_param_set/devlink_param_get of the file net/core/devlink.c of the component IPsec. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier VDB-211929 was assigned to this vulnerability.</Note>
    </Notes>
    <CVE>CVE-2022-3625</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>6.4</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3625.html</URL>
        <Description>CVE-2022-3625</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204637</URL>
        <Description>SUSE Bug 1204637</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="23">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver. This issue occurs when a user connects to a malicious USB device. This can allow a local user to crash the system or escalate their privileges.</Note>
    </Notes>
    <CVE>CVE-2022-3628</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>4.6</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3628.html</URL>
        <Description>CVE-2022-3628</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204868</URL>
        <Description>SUSE Bug 1204868</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="24">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability was found in Linux Kernel. It has been declared as problematic. This vulnerability affects the function vsock_connect of the file net/vmw_vsock/af_vsock.c. The manipulation leads to memory leak. The complexity of an attack is rather high. The exploitation appears to be difficult. It is recommended to apply a patch to fix this issue. VDB-211930 is the identifier assigned to this vulnerability.</Note>
    </Notes>
    <CVE>CVE-2022-3629</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>1.4</BaseScoreV2>
        <VectorV2>AV:A/AC:H/Au:S/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>2.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3629.html</URL>
        <Description>CVE-2022-3629</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204635</URL>
        <Description>SUSE Bug 1204635</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="25">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability classified as problematic has been found in Linux Kernel. Affected is the function j1939_session_destroy of the file net/can/j1939/transport.c. The manipulation leads to memory leak. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211932.</Note>
    </Notes>
    <CVE>CVE-2022-3633</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>2.7</BaseScoreV2>
        <VectorV2>AV:A/AC:L/Au:S/C:N/I:N/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>2.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3633.html</URL>
        <Description>CVE-2022-3633</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204650</URL>
        <Description>SUSE Bug 1204650</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="26">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability, which was classified as critical, was found in Linux Kernel. Affected is the function l2cap_conn_del of the file net/bluetooth/l2cap_core.c of the component Bluetooth. The manipulation leads to use after free. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211944.</Note>
    </Notes>
    <CVE>CVE-2022-3640</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7.1</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3640.html</URL>
        <Description>CVE-2022-3640</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204619</URL>
        <Description>SUSE Bug 1204619</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204624</URL>
        <Description>SUSE Bug 1204624</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1209225</URL>
        <Description>SUSE Bug 1209225</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="27">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability, which was classified as problematic, has been found in Linux Kernel. This issue affects the function nilfs_attach_log_writer of the file fs/nilfs2/segment.c of the component BPF. The manipulation leads to memory leak. The attack may be initiated remotely. It is recommended to apply a patch to fix this issue. The identifier VDB-211961 was assigned to this vulnerability.</Note>
    </Notes>
    <CVE>CVE-2022-3646</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>2.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3646.html</URL>
        <Description>CVE-2022-3646</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204646</URL>
        <Description>SUSE Bug 1204646</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="28">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A vulnerability was found in Linux Kernel. It has been classified as problematic. Affected is the function nilfs_new_inode of the file fs/nilfs2/inode.c of the component BPF. The manipulation leads to use after free. It is possible to launch the attack remotely. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-211992.</Note>
    </Notes>
    <CVE>CVE-2022-3649</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>low</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>3.1</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3649.html</URL>
        <Description>CVE-2022-3649</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204647</URL>
        <Description>SUSE Bug 1204647</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212318</URL>
        <Description>SUSE Bug 1212318</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="29">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A null pointer dereference issue was discovered in fs/io_uring.c in the Linux kernel before 5.15.62. A local user could use this flaw to crash the system or potentially cause a denial of service.</Note>
    </Notes>
    <CVE>CVE-2022-40476</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>5.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-40476.html</URL>
        <Description>CVE-2022-40476</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1203435</URL>
        <Description>SUSE Bug 1203435</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="30">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">drivers/scsi/stex.c in the Linux kernel through 5.19.9 allows local users to obtain sensitive information from kernel memory because stex_queuecommand_lck lacks a memset for the PASSTHRU_CMD case.</Note>
    </Notes>
    <CVE>CVE-2022-40768</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>5.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-40768.html</URL>
        <Description>CVE-2022-40768</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1203514</URL>
        <Description>SUSE Bug 1203514</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="31">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An issue was discovered in the Linux kernel before 5.19.16. Attackers able to inject WLAN frames could cause a buffer overflow in the ieee80211_bss_info_update function in net/mac80211/scan.c.</Note>
    </Notes>
    <CVE>CVE-2022-41674</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>8.8</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-41674.html</URL>
        <Description>CVE-2022-41674</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1203770</URL>
        <Description>SUSE Bug 1203770</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1203994</URL>
        <Description>SUSE Bug 1203994</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1209225</URL>
        <Description>SUSE Bug 1209225</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="32">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">mm/rmap.c in the Linux kernel before 5.19.7 has a use-after-free related to leaf anon_vma double reuse.</Note>
    </Notes>
    <CVE>CVE-2022-42703</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-42703.html</URL>
        <Description>CVE-2022-42703</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204168</URL>
        <Description>SUSE Bug 1204168</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204170</URL>
        <Description>SUSE Bug 1204170</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1206463</URL>
        <Description>SUSE Bug 1206463</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1208044</URL>
        <Description>SUSE Bug 1208044</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1209225</URL>
        <Description>SUSE Bug 1209225</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="33">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A use-after-free in the mac80211 stack when parsing a multi-BSSID element in the Linux kernel 5.2 through 5.19.x before 5.19.16 could be used by attackers (able to inject WLAN frames) to crash the kernel and potentially execute code.</Note>
    </Notes>
    <CVE>CVE-2022-42719</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-42719.html</URL>
        <Description>CVE-2022-42719</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204051</URL>
        <Description>SUSE Bug 1204051</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204292</URL>
        <Description>SUSE Bug 1204292</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1209225</URL>
        <Description>SUSE Bug 1209225</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="34">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Various refcounting bugs in the multi-BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to trigger use-after-free conditions to potentially execute code.</Note>
    </Notes>
    <CVE>CVE-2022-42720</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-42720.html</URL>
        <Description>CVE-2022-42720</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204059</URL>
        <Description>SUSE Bug 1204059</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204291</URL>
        <Description>SUSE Bug 1204291</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1209225</URL>
        <Description>SUSE Bug 1209225</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="35">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A list management bug in BSS handling in the mac80211 stack in the Linux kernel 5.1 through 5.19.x before 5.19.16 could be used by local attackers (able to inject WLAN frames) to corrupt a linked list and, in turn, potentially execute code.</Note>
    </Notes>
    <CVE>CVE-2022-42721</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-42721.html</URL>
        <Description>CVE-2022-42721</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204060</URL>
        <Description>SUSE Bug 1204060</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204290</URL>
        <Description>SUSE Bug 1204290</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1209225</URL>
        <Description>SUSE Bug 1209225</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="36">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In the Linux kernel 5.8 through 5.19.x before 5.19.16, local attackers able to inject WLAN frames into the mac80211 stack could cause a NULL pointer dereference denial-of-service attack against the beacon protection of P2P devices.</Note>
    </Notes>
    <CVE>CVE-2022-42722</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-42722.html</URL>
        <Description>CVE-2022-42722</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204125</URL>
        <Description>SUSE Bug 1204125</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204289</URL>
        <Description>SUSE Bug 1204289</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1209225</URL>
        <Description>SUSE Bug 1209225</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="37">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">drivers/usb/mon/mon_bin.c in usbmon in the Linux kernel before 5.19.15 and 6.x before 6.0.1 allows a user-space client to corrupt the monitor's internal memory.</Note>
    </Notes>
    <CVE>CVE-2022-43750</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>Image SLES15-SP4-Azure-Basic:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-Azure-Standard:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC-Azure:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>Image SLES15-SP4-HPC:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>SUSE Linux Enterprise Module for Public Cloud 15 SP4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:cluster-md-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:dlm-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:gfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-extra-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-livepatch-devel-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-azure-optional-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-devel-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-source-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kernel-syms-azure-5.14.21-150400.14.21.1</ProductID>
        <ProductID>openSUSE Leap 15.4:kselftests-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:ocfs2-kmp-azure-5.14.21-150400.14.21.2</ProductID>
        <ProductID>openSUSE Leap 15.4:reiserfs-kmp-azure-5.14.21-150400.14.21.2</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>6.7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223998-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-43750.html</URL>
        <Description>CVE-2022-43750</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204653</URL>
        <Description>SUSE Bug 1204653</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1211484</URL>
        <Description>SUSE Bug 1211484</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
