<?xml version="1.0" encoding="UTF-8"?>
<cvrfdoc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:cpe="http://cpe.mitre.org/language/2.0" xmlns:cvrf="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf" xmlns:cvrf-common="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/common" xmlns:cvssv2="http://scap.nist.gov/schema/cvss-v2/1.0" xmlns:cvssv3="https://www.first.org/cvss/cvss-v3.0.xsd" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:ns0="http://purl.org/dc/elements/1.1/" xmlns:prod="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod" xmlns:scap-core="http://scap.nist.gov/schema/scap-core/1.0" xmlns:sch="http://purl.oclc.org/dsdl/schematron" xmlns:vuln="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/cvrf">
  <DocumentTitle xml:lang="en">Security update for the Linux Kernel</DocumentTitle>
  <DocumentType>SUSE Patch</DocumentType>
  <DocumentPublisher Type="Vendor">
    <ContactDetails>security@suse.de</ContactDetails>
    <IssuingAuthority>SUSE Security Team</IssuingAuthority>
  </DocumentPublisher>
  <DocumentTracking>
    <Identification>
      <ID>SUSE-SU-2022:3263-1</ID>
    </Identification>
    <Status>Final</Status>
    <Version>1</Version>
    <RevisionHistory>
      <Revision>
        <Number>1</Number>
        <Date>2022-09-14T04:14:47Z</Date>
        <Description>current</Description>
      </Revision>
    </RevisionHistory>
    <InitialReleaseDate>2022-09-14T04:14:47Z</InitialReleaseDate>
    <CurrentReleaseDate>2022-09-14T04:14:47Z</CurrentReleaseDate>
    <Generator>
      <Engine>cve-database/bin/generate-cvrf.pl</Engine>
      <Date>2017-02-24T01:00:00Z</Date>
    </Generator>
  </DocumentTracking>
  <DocumentNotes>
    <Note Title="Topic" Type="Summary" Ordinal="1" xml:lang="en">Security update for the Linux Kernel</Note>
    <Note Title="Details" Type="General" Ordinal="2" xml:lang="en">
The SUSE Linux Enterprise 12 SP3 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

- CVE-2022-39188: Fixed race condition in include/asm-generic/tlb.h where a device driver can free a page while it still has stale TLB entries (bnc#1203107).
- CVE-2022-36879: Fixed an issue in xfrm_expand_policies in net/xfrm/xfrm_policy.c where a refcount could be dropped twice (bnc#1201948).
- CVE-2022-3028: Fixed race condition that was found in the IP framework for transforming packets (XFRM subsystem) (bnc#1202898).
- CVE-2022-2991: Fixed an heap-based overflow in the lightnvm implemenation (bsc#1201420).
- CVE-2022-26373: Fixed non-transparent sharing of return predictor targets between contexts in some Intel Processors (bnc#1201726).
- CVE-2022-2588: Fixed use-after-free in cls_route (bsc#1202096).
- CVE-2022-21385: Fixed a flaw in net_rds_alloc_sgs() that allowed unprivileged local users to crash the machine (bnc#1202897).
- CVE-2022-20369: Fixed out of bounds write in v4l2_m2m_querybuf of v4l2-mem2mem.c (bnc#1202347).
- CVE-2022-20368: Fixed slab-out-of-bounds access in packet_recvmsg() (bsc#1202346).
- CVE-2020-36516: Fixed an issue in the mixed IPID assignment method where an attacker was able to inject data into or terminate a victim's TCP session (bnc#1196616).
- CVE-2019-3900: Fixed infinite loop the vhost_net kernel module that could result in a DoS scenario (bnc#1133374).

The following non-security bugs were fixed:

- net_sched: cls_route: Disallowed handle of 0 (bsc#1202393).
- mm, rmap: Fixed anon_vma-&gt;degree ambiguity leading to double-reuse (bsc#1203098).
- lightnvm: Removed lightnvm implemenation (bsc#1191881).
</Note>
    <Note Title="Terms of Use" Type="Legal Disclaimer" Ordinal="3" xml:lang="en">The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).</Note>
    <Note Title="Patchnames" Type="Details" Ordinal="4" xml:lang="en">SUSE-2022-3263,SUSE-SLE-SERVER-12-SP3-BCL-2022-3263</Note>
  </DocumentNotes>
  <DocumentDistribution xml:lang="en">Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0)</DocumentDistribution>
  <DocumentReferences>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223263-1/</URL>
      <Description>Link for SUSE-SU-2022:3263-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://lists.suse.com/pipermail/sle-security-updates/2022-September/012222.html</URL>
      <Description>E-Mail link for SUSE-SU-2022:3263-1</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/support/security/rating/</URL>
      <Description>SUSE Security Ratings</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1133374</URL>
      <Description>SUSE Bug 1133374</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1191881</URL>
      <Description>SUSE Bug 1191881</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1196616</URL>
      <Description>SUSE Bug 1196616</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1201420</URL>
      <Description>SUSE Bug 1201420</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1201726</URL>
      <Description>SUSE Bug 1201726</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1201948</URL>
      <Description>SUSE Bug 1201948</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1202096</URL>
      <Description>SUSE Bug 1202096</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1202346</URL>
      <Description>SUSE Bug 1202346</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1202347</URL>
      <Description>SUSE Bug 1202347</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1202393</URL>
      <Description>SUSE Bug 1202393</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1202897</URL>
      <Description>SUSE Bug 1202897</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1202898</URL>
      <Description>SUSE Bug 1202898</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1203098</URL>
      <Description>SUSE Bug 1203098</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://bugzilla.suse.com/1203107</URL>
      <Description>SUSE Bug 1203107</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2019-3900/</URL>
      <Description>SUSE CVE CVE-2019-3900 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2020-36516/</URL>
      <Description>SUSE CVE CVE-2020-36516 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-20368/</URL>
      <Description>SUSE CVE CVE-2022-20368 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-20369/</URL>
      <Description>SUSE CVE CVE-2022-20369 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-21385/</URL>
      <Description>SUSE CVE CVE-2022-21385 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-2588/</URL>
      <Description>SUSE CVE CVE-2022-2588 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-26373/</URL>
      <Description>SUSE CVE CVE-2022-26373 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-2991/</URL>
      <Description>SUSE CVE CVE-2022-2991 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-3028/</URL>
      <Description>SUSE CVE CVE-2022-3028 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-36879/</URL>
      <Description>SUSE CVE CVE-2022-36879 page</Description>
    </Reference>
    <Reference Type="Self">
      <URL>https://www.suse.com/security/cve/CVE-2022-39188/</URL>
      <Description>SUSE CVE CVE-2022-39188 page</Description>
    </Reference>
  </DocumentReferences>
  <ProductTree xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/prod">
    <Branch Type="Product Family" Name="SUSE Linux Enterprise Server 12 SP3-BCL">
      <Branch Type="Product Name" Name="SUSE Linux Enterprise Server 12 SP3-BCL">
        <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL" CPE="cpe:/o:suse:sles-bcl:12:sp3">SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
      </Branch>
    </Branch>
    <Branch Type="Product Version" Name="cluster-md-kmp-debug-4.4.180-94.174.1">
      <FullProductName ProductID="cluster-md-kmp-debug-4.4.180-94.174.1">cluster-md-kmp-debug-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="cluster-md-kmp-default-4.4.180-94.174.1">
      <FullProductName ProductID="cluster-md-kmp-default-4.4.180-94.174.1">cluster-md-kmp-default-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dlm-kmp-debug-4.4.180-94.174.1">
      <FullProductName ProductID="dlm-kmp-debug-4.4.180-94.174.1">dlm-kmp-debug-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="dlm-kmp-default-4.4.180-94.174.1">
      <FullProductName ProductID="dlm-kmp-default-4.4.180-94.174.1">dlm-kmp-default-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gfs2-kmp-debug-4.4.180-94.174.1">
      <FullProductName ProductID="gfs2-kmp-debug-4.4.180-94.174.1">gfs2-kmp-debug-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="gfs2-kmp-default-4.4.180-94.174.1">
      <FullProductName ProductID="gfs2-kmp-default-4.4.180-94.174.1">gfs2-kmp-default-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-debug-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-debug-4.4.180-94.174.1">kernel-debug-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-debug-base-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-debug-base-4.4.180-94.174.1">kernel-debug-base-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-debug-devel-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-debug-devel-4.4.180-94.174.1">kernel-debug-devel-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-debug-extra-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-debug-extra-4.4.180-94.174.1">kernel-debug-extra-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-debug-kgraft-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-debug-kgraft-4.4.180-94.174.1">kernel-debug-kgraft-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-default-4.4.180-94.174.1">kernel-default-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-base-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-default-base-4.4.180-94.174.1">kernel-default-base-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-devel-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-default-devel-4.4.180-94.174.1">kernel-default-devel-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-extra-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-default-extra-4.4.180-94.174.1">kernel-default-extra-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-kgraft-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-default-kgraft-4.4.180-94.174.1">kernel-default-kgraft-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-default-man-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-default-man-4.4.180-94.174.1">kernel-default-man-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-devel-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-devel-4.4.180-94.174.1">kernel-devel-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-docs-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-docs-4.4.180-94.174.1">kernel-docs-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-docs-html-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-docs-html-4.4.180-94.174.1">kernel-docs-html-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-docs-pdf-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-docs-pdf-4.4.180-94.174.1">kernel-docs-pdf-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-macros-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-macros-4.4.180-94.174.1">kernel-macros-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-obs-build-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-obs-build-4.4.180-94.174.1">kernel-obs-build-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-obs-qa-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-obs-qa-4.4.180-94.174.1">kernel-obs-qa-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-source-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-source-4.4.180-94.174.1">kernel-source-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-source-vanilla-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-source-vanilla-4.4.180-94.174.1">kernel-source-vanilla-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-syms-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-syms-4.4.180-94.174.1">kernel-syms-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-vanilla-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-vanilla-4.4.180-94.174.1">kernel-vanilla-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-vanilla-base-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-vanilla-base-4.4.180-94.174.1">kernel-vanilla-base-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-vanilla-devel-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-vanilla-devel-4.4.180-94.174.1">kernel-vanilla-devel-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kernel-zfcpdump-4.4.180-94.174.1">
      <FullProductName ProductID="kernel-zfcpdump-4.4.180-94.174.1">kernel-zfcpdump-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kselftests-kmp-debug-4.4.180-94.174.1">
      <FullProductName ProductID="kselftests-kmp-debug-4.4.180-94.174.1">kselftests-kmp-debug-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="kselftests-kmp-default-4.4.180-94.174.1">
      <FullProductName ProductID="kselftests-kmp-default-4.4.180-94.174.1">kselftests-kmp-default-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ocfs2-kmp-debug-4.4.180-94.174.1">
      <FullProductName ProductID="ocfs2-kmp-debug-4.4.180-94.174.1">ocfs2-kmp-debug-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Branch Type="Product Version" Name="ocfs2-kmp-default-4.4.180-94.174.1">
      <FullProductName ProductID="ocfs2-kmp-default-4.4.180-94.174.1">ocfs2-kmp-default-4.4.180-94.174.1</FullProductName>
    </Branch>
    <Relationship ProductReference="kernel-default-4.4.180-94.174.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-4.4.180-94.174.1">kernel-default-4.4.180-94.174.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-base-4.4.180-94.174.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-base-4.4.180-94.174.1">kernel-default-base-4.4.180-94.174.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-default-devel-4.4.180-94.174.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-devel-4.4.180-94.174.1">kernel-default-devel-4.4.180-94.174.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-devel-4.4.180-94.174.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:kernel-devel-4.4.180-94.174.1">kernel-devel-4.4.180-94.174.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-macros-4.4.180-94.174.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:kernel-macros-4.4.180-94.174.1">kernel-macros-4.4.180-94.174.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-source-4.4.180-94.174.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:kernel-source-4.4.180-94.174.1">kernel-source-4.4.180-94.174.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
    <Relationship ProductReference="kernel-syms-4.4.180-94.174.1" RelationType="Default Component Of" RelatesToProductReference="SUSE Linux Enterprise Server 12 SP3-BCL">
      <FullProductName ProductID="SUSE Linux Enterprise Server 12 SP3-BCL:kernel-syms-4.4.180-94.174.1">kernel-syms-4.4.180-94.174.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL</FullProductName>
    </Relationship>
  </ProductTree>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="1">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx(). It could occur if one end sends packets faster than the other end can process them. A guest user, maybe remote one, could use this flaw to stall the vhost_net kernel thread, resulting in a DoS scenario.</Note>
    </Notes>
    <CVE>CVE-2019-3900</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-base-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-devel-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-devel-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-macros-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-source-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-syms-4.4.180-94.174.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>6.8</BaseScoreV2>
        <VectorV2>AV:N/AC:L/Au:S/C:N/I:N/A:C</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>5.5</BaseScoreV3>
        <VectorV3>CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223263-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2019-3900.html</URL>
        <Description>CVE-2019-3900</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1133374</URL>
        <Description>SUSE Bug 1133374</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="2">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP session or terminate that session.</Note>
    </Notes>
    <CVE>CVE-2020-36516</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-base-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-devel-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-devel-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-macros-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-source-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-syms-4.4.180-94.174.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV2>
        <BaseScoreV2>4.9</BaseScoreV2>
        <VectorV2>AV:N/AC:M/Au:S/C:N/I:P/A:P</VectorV2>
      </ScoreSetV2>
      <ScoreSetV3>
        <BaseScoreV3>8.1</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223263-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2020-36516.html</URL>
        <Description>CVE-2020-36516</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1196616</URL>
        <Description>SUSE Bug 1196616</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1196867</URL>
        <Description>SUSE Bug 1196867</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204092</URL>
        <Description>SUSE Bug 1204092</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204183</URL>
        <Description>SUSE Bug 1204183</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="3">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Product: AndroidVersions: Android kernelAndroid ID: A-224546354References: Upstream kernel</Note>
    </Notes>
    <CVE>CVE-2022-20368</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-base-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-devel-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-devel-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-macros-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-source-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-syms-4.4.180-94.174.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>5.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223263-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-20368.html</URL>
        <Description>CVE-2022-20368</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1202346</URL>
        <Description>SUSE Bug 1202346</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212311</URL>
        <Description>SUSE Bug 1212311</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="4">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">In v4l2_m2m_querybuf of v4l2-mem2mem.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-223375145References: Upstream kernel</Note>
    </Notes>
    <CVE>CVE-2022-20369</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-base-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-devel-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-devel-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-macros-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-source-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-syms-4.4.180-94.174.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>5.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223263-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-20369.html</URL>
        <Description>CVE-2022-20369</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1202347</URL>
        <Description>SUSE Bug 1202347</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212321</URL>
        <Description>SUSE Bug 1212321</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="5">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A flaw in net_rds_alloc_sgs() in Oracle Linux kernels allows unprivileged local users to crash the machine. CVSS 3.1 Base Score 6.2 (Availability impacts). CVSS Vector (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)</Note>
    </Notes>
    <CVE>CVE-2022-21385</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-base-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-devel-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-devel-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-macros-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-source-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-syms-4.4.180-94.174.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>6.2</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223263-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-21385.html</URL>
        <Description>CVE-2022-21385</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1202897</URL>
        <Description>SUSE Bug 1202897</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212285</URL>
        <Description>SUSE Bug 1212285</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="6">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the hashtable before freeing it if its handle had the value 0.</Note>
    </Notes>
    <CVE>CVE-2022-2588</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-base-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-devel-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-devel-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-macros-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-source-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-syms-4.4.180-94.174.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7.8</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223263-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-2588.html</URL>
        <Description>CVE-2022-2588</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1202096</URL>
        <Description>SUSE Bug 1202096</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1203613</URL>
        <Description>SUSE Bug 1203613</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1204183</URL>
        <Description>SUSE Bug 1204183</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1209225</URL>
        <Description>SUSE Bug 1209225</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="7">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.</Note>
    </Notes>
    <CVE>CVE-2022-26373</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-base-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-devel-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-devel-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-macros-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-source-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-syms-4.4.180-94.174.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>5.5</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223263-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-26373.html</URL>
        <Description>CVE-2022-26373</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1201726</URL>
        <Description>SUSE Bug 1201726</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1209619</URL>
        <Description>SUSE Bug 1209619</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="8">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A heap-based buffer overflow was found in the Linux kernel's LightNVM subsystem. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. This vulnerability allows a local attacker to escalate privileges and execute arbitrary code in the context of the kernel. The attacker must first obtain the ability to execute high-privileged code on the target system to exploit this vulnerability.</Note>
    </Notes>
    <CVE>CVE-2022-2991</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-base-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-devel-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-devel-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-macros-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-source-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-syms-4.4.180-94.174.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>important</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>8.2</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223263-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-2991.html</URL>
        <Description>CVE-2022-2991</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1201420</URL>
        <Description>SUSE Bug 1201420</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1203993</URL>
        <Description>SUSE Bug 1203993</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1211495</URL>
        <Description>SUSE Bug 1211495</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="9">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">A race condition was found in the Linux kernel's IP framework for transforming packets (XFRM subsystem) when multiple calls to xfrm_probe_algs occurred simultaneously. This flaw could allow a local attacker to potentially trigger an out-of-bounds write or leak kernel heap memory by performing an out-of-bounds read and copying it into a socket.</Note>
    </Notes>
    <CVE>CVE-2022-3028</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-base-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-devel-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-devel-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-macros-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-source-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-syms-4.4.180-94.174.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>6.7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223263-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-3028.html</URL>
        <Description>CVE-2022-3028</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1202898</URL>
        <Description>SUSE Bug 1202898</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212296</URL>
        <Description>SUSE Bug 1212296</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="10">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An issue was discovered in the Linux kernel through 5.18.14. xfrm_expand_policies in net/xfrm/xfrm_policy.c can cause a refcount to be dropped twice.</Note>
    </Notes>
    <CVE>CVE-2022-36879</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-base-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-devel-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-devel-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-macros-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-source-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-syms-4.4.180-94.174.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>4.1</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223263-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-36879.html</URL>
        <Description>CVE-2022-36879</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1201948</URL>
        <Description>SUSE Bug 1201948</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212327</URL>
        <Description>SUSE Bug 1212327</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
  <vuln:Vulnerability xmlns="http://docs.oasis-open.org/csaf/ns/csaf-cvrf/v1.2/vuln" Ordinal="11">
    <Notes>
      <Note Title="Vulnerability Description" Type="General" Ordinal="1" xml:lang="en">An issue was discovered in include/asm-generic/tlb.h in the Linux kernel before 5.19. Because of a race condition (unmap_mapping_range versus munmap), a device driver can free a page while it still has stale TLB entries. This only occurs in situations with VM_PFNMAP VMAs.</Note>
    </Notes>
    <CVE>CVE-2022-39188</CVE>
    <ProductStatuses>
      <Status Type="Fixed">
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-base-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-default-devel-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-devel-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-macros-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-source-4.4.180-94.174.1</ProductID>
        <ProductID>SUSE Linux Enterprise Server 12 SP3-BCL:kernel-syms-4.4.180-94.174.1</ProductID>
      </Status>
    </ProductStatuses>
    <Threats>
      <Threat Type="Impact">
        <Description>moderate</Description>
      </Threat>
    </Threats>
    <CVSSScoreSets>
      <ScoreSetV3>
        <BaseScoreV3>7</BaseScoreV3>
        <VectorV3>CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H</VectorV3>
      </ScoreSetV3>
    </CVSSScoreSets>
    <Remediations>
      <Remediation Type="Vendor Fix">
        <Description xml:lang="en">To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
</Description>
        <URL>https://www.suse.com/support/update/announcement/2022/suse-su-20223263-1/</URL>
      </Remediation>
    </Remediations>
    <References>
      <Reference>
        <URL>https://www.suse.com/security/cve/CVE-2022-39188.html</URL>
        <Description>CVE-2022-39188</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1203107</URL>
        <Description>SUSE Bug 1203107</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1203116</URL>
        <Description>SUSE Bug 1203116</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1205313</URL>
        <Description>SUSE Bug 1205313</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1209225</URL>
        <Description>SUSE Bug 1209225</Description>
      </Reference>
      <Reference>
        <URL>https://bugzilla.suse.com/1212326</URL>
        <Description>SUSE Bug 1212326</Description>
      </Reference>
    </References>
  </vuln:Vulnerability>
</cvrfdoc>
