漏洞分享 - SUSE Linux 內核存在多個漏洞

                                                                                                        

 SUSE Linux 內核存在多個漏洞

一、摘要

        SUSE Linux 內核存在多個漏洞，允許遠端攻擊者利用這些漏洞，於目標系統觸發阻斷服務狀況、權限提升、遠端執行任意程式碼、洩露敏感資料及繞過保安限制。

二、存在風險

       SUSE Linux 內核存在多個漏洞，允許遠端攻擊者利用這些漏洞，於目標系統觸發阻斷服務狀況、權限提升、遠端執行任意程式碼、洩露敏感資料及繞過保安限制，其影響系統或版本如下：

• openSUSE Leap 15.5
• openSUSE Leap Micro 5.3
• openSUSE Leap Micro 5.4
• SUSE CaaS Platform 4.0
• SUSE Linux Enterprise High Availability Extension 12 SP5
• SUSE Linux Enterprise High Availability Extension 15 SP1
• SUSE Linux Enterprise High Performance Computing 12 SP5
• SUSE Linux Enterprise High Performance Computing 12 SP5
• SUSE Linux Enterprise High Performance Computing 15 SP1
• SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1
• SUSE Linux Enterprise High Performance Computing 15 SP4
• SUSE Linux Enterprise High Performance Computing 15 SP5
• SUSE Linux Enterprise Live Patching 12-SP5
• SUSE Linux Enterprise Live Patching 15-SP1
• SUSE Linux Enterprise Live Patching 15-SP4
• SUSE Linux Enterprise Live Patching 15-SP5
• SUSE Linux Enterprise Micro 5.1
• SUSE Linux Enterprise Micro 5.2
• SUSE Linux Enterprise Micro 5.3
• SUSE Linux Enterprise Micro 5.4
• SUSE Linux Enterprise Micro 5.5
• SUSE Linux Enterprise Micro for Rancher 5.2
• SUSE Linux Enterprise Micro for Rancher 5.3
• SUSE Linux Enterprise Micro for Rancher 5.4
• SUSE Linux Enterprise Real Time 12 SP5
• SUSE Linux Enterprise Real Time 15 SP4
• SUSE Linux Enterprise Real Time 15 SP5
• SUSE Linux Enterprise Server 11 SP4
• SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE 11-SP4
• SUSE Linux Enterprise Server 12 SP5
• SUSE Linux Enterprise Server 15 SP1
• SUSE Linux Enterprise Server 15 SP1 Business Critical Linux 15-SP1
• SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1
• SUSE Linux Enterprise Server 15 SP4
• SUSE Linux Enterprise Server 15 SP5
• SUSE Linux Enterprise Server for SAP Applications 12 SP5
• SUSE Linux Enterprise Server for SAP Applications 15 SP1
• SUSE Linux Enterprise Server for SAP Applications 15 SP4
• SUSE Linux Enterprise Server for SAP Applications 15 SP5
• SUSE Linux Enterprise Software Development Kit 12 SP5
• SUSE Linux Enterprise Workstation Extension 12 12-SP5
• SUSE Manager Proxy 4.0
• SUSE Manager Retail Branch Server 4.0
• SUSE Manager Server 4.0
• SUSE Real Time Module 15-SP4
• SUSE Real Time Module 15-SP5
  

        建議改善措施：請依官方提供之修補程式進行修補作業。

1. SUSE Linux Enterprise Micro 5.1
• zypper in -t patch SUSE-SUSE-MicroOS-5.1-2024-110=1
  
  
2. SUSE Linux Enterprise Micro 5.2
• zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-110=1
  
  
3. SUSE Linux Enterprise Micro for Rancher 5.2
• zypper in -t patch SUSE-SUSE-MicroOS-5.2-2024-110=1
  
  
4. SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE 11-SP4
• zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2024-112=1
  
  
5. SUSE Linux Enterprise Server 11 SP4
• zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2024-112=1
  
  
6. SUSE Linux Enterprise Server for SAP Applications 12 SP5
• zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-113=1
  
  
7. SUSE Linux Enterprise High Performance Computing 12 SP5
• zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-113=1
  
  
8. SUSE Linux Enterprise Server 12 SP5
• zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-113=1
  
  
9. SUSE Linux Enterprise Real Time 12 SP5
• zypper in -t patch SUSE-SLE-RT-12-SP5-2024-118=1
  
  
10. openSUSE Leap 15.5
• zypper in -t patch SUSE-2024-115=1 openSUSE-SLE-15.5-2024-115=1
  
  
11. SUSE Linux Enterprise Micro 5.5
• zypper in -t patch SUSE-SLE-Micro-5.5-2024-115=1
  
  
12. SUSE Linux Enterprise Live Patching 15-SP5
• zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP5-2024-115=1
  
  
13. SUSE Real Time Module 15-SP5
• zypper in -t patch SUSE-SLE-Module-RT-15-SP5-2024-115=1
  
  
14. SUSE Linux Enterprise Server for SAP Applications 12 SP5
• zypper in -t patch SUSE-SLE-HA-12-SP5-2024-117=1 SUSE-SLE-SERVER-12-SP5-2024-117=1
  
  
15. SUSE Linux Enterprise High Availability Extension 12 SP5
• zypper in -t patch SUSE-SLE-HA-12-SP5-2024-117=1
  
  
16. SUSE Linux Enterprise Live Patching 12-SP5
• zypper in -t patch SUSE-SLE-Live-Patching-12-SP5-2024-117=1
  
  
17. SUSE Linux Enterprise Software Development Kit 12 SP5
• zypper in -t patch SUSE-SLE-SDK-12-SP5-2024-117=1
  
  
18. SUSE Linux Enterprise High Performance Computing 12 SP5
• zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-117=1
  
  
19. SUSE Linux Enterprise Server 12 SP5
• zypper in -t patch SUSE-SLE-SERVER-12-SP5-2024-117=1
  
  
20. SUSE Linux Enterprise Workstation Extension 12 12-SP5
• zypper in -t patch SUSE-SLE-WE-12-SP5-2024-117=1
  
  
21. SUSE Linux Enterprise Live Patching 15-SP1
• zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP1-2024-120=1
  
  
22. SUSE Linux Enterprise High Availability Extension 15 SP1
• zypper in -t patch SUSE-SLE-Product-HA-15-SP1-2024-120=1
  
  
23. SUSE Linux Enterprise High Performance Computing 15 SP1 LTSS 15-SP1
• zypper in -t patch SUSE-SLE-Product-HPC-15-SP1-LTSS-2024-120=1
  
  
24. SUSE Linux Enterprise Server 15 SP1 LTSS 15-SP1
• zypper in -t patch SUSE-SLE-Product-SLES-15-SP1-LTSS-2024-120=1
  
  
25. SUSE Linux Enterprise Server for SAP Applications 15 SP1
• zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-SP1-2024-120=1
  
  
26. SUSE Real Time Module 15-SP4
• zypper in -t patch SUSE-SLE-Module-RT-15-SP4-2024-129=1
  
  
27. openSUSE Leap Micro 5.3
• zypper in -t patch openSUSE-Leap-Micro-5.3-2024-129=1
  
  
28. openSUSE Leap Micro 5.4
• zypper in -t patch openSUSE-Leap-Micro-5.4-2024-129=1
  
  
29. SUSE Linux Enterprise Micro for Rancher 5.3
• zypper in -t patch SUSE-SLE-Micro-5.3-2024-129=1
  
  
30. SUSE Linux Enterprise Micro 5.3
• zypper in -t patch SUSE-SLE-Micro-5.3-2024-129=1
  
  
31. SUSE Linux Enterprise Micro for Rancher 5.4
• zypper in -t patch SUSE-SLE-Micro-5.4-2024-129=1
  
  
32. SUSE Linux Enterprise Micro 5.4
• zypper in -t patch SUSE-SLE-Micro-5.4-2024-129=1
  
  
33. SUSE Linux Enterprise Live Patching 15-SP4
• zypper in -t patch SUSE-SLE-Module-Live-Patching-15-SP4-2024-129=1
  

        情資報告連結：https://www.hkcert.org/tc/security-bulletin/suse-linux-kernel-multiple-vulnerabilities_20240118