opensuse/kernel-source&distro=openSUSE Tumbleweed

Vulnerabilities (1,862)

• CVE-2020-8648HigFeb 6, 2020
  affected < 5.14.6-1.4fixed 5.14.6-1.4

  There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c.

• CVE-2019-3016MedJan 31, 2020
  affected < 5.14.6-1.4fixed 5.14.6-1.4

  In a Linux KVM guest that has PV TLB enabled, a process in the guest kernel may be able to read memory locations from another process in the same guest. This problem is limit to the host running linux kernel 4.10 with a guest running linux kernel 4.16 or later. The problem mainly

• CVE-2019-14615MedJan 17, 2020
  affected < 5.14.6-1.4fixed 5.14.6-1.4

  Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticated user to potentially enable information disclosure via local access.

• CVE-2019-9500HigJan 16, 2020
  affected < 5.14.6-1.4fixed 5.14.6-1.4

  The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN functionality is configured, a malicious event frame can be constructed to trigger an heap buffer overflow in the brc

• CVE-2019-19332MedJan 9, 2020
  affected < 5.14.6-1.4fixed 5.14.6-1.4

  An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access t

• CVE-2019-14896CriNov 27, 2019
  affected < 5.14.6-1.4fixed 5.14.6-1.4

  A heap-based buffer overflow vulnerability was found in the Linux kernel, version kernel-2.6.32, in Marvell WiFi chip driver. A remote attacker could cause a denial of service (system crash) or, possibly execute arbitrary code, when the lbs_ibss_join_existing function is called a

• CVE-2019-19252HigNov 25, 2019
  affected < 5.14.6-1.4fixed 5.14.6-1.4

  vcs_write in drivers/tty/vt/vc_screen.c in the Linux kernel through 5.3.13 does not prevent write access to vcsu devices, aka CID-0c9acb1af77a.

• CVE-2019-10207MedNov 25, 2019
  affected < 5.14.6-1.4fixed 5.14.6-1.4

  A flaw was found in the Linux kernel's Bluetooth implementation of UART, all versions kernel 3.x.x before 4.18.0 and kernel 5.x.x. An attacker with local access and write permissions to the Bluetooth hardware could use this flaw to issue a specially crafted ioctl function call an

• CVE-2019-18813HigNov 7, 2019
  affected < 5.14.6-1.4fixed 5.14.6-1.4

  A memory leak in the dwc3_pci_probe() function in drivers/usb/dwc3/dwc3-pci.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption) by triggering platform_device_add_properties() failures, aka CID-9bbfceea12a8.

• CVE-2019-18812HigNov 7, 2019
  affected < 5.14.6-1.4fixed 5.14.6-1.4

  A memory leak in the sof_dfsentry_write() function in sound/soc/sof/debug.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-c0a333d842ef.

• CVE-2019-18808MedNov 7, 2019
  affected < 5.14.6-1.4fixed 5.14.6-1.4

  A memory leak in the ccp_run_sha_cmd() function in drivers/crypto/ccp/ccp-ops.c in the Linux kernel through 5.3.9 allows attackers to cause a denial of service (memory consumption), aka CID-128c66429247.

• CVE-2019-17666HigOct 17, 2019
  affected < 5.14.6-1.4fixed 5.14.6-1.4

  rtl_p2p_noa_ie in drivers/net/wireless/realtek/rtlwifi/ps.c in the Linux kernel through 5.3.6 lacks a certain upper-bound check, leading to a buffer overflow.

• CVE-2019-17133CriOct 4, 2019
  affected < 5.14.6-1.4fixed 5.14.6-1.4

  In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.

• CVE-2019-14814HigSep 20, 2019
  affected < 5.14.6-1.4fixed 5.14.6-1.4

  There is heap-based buffer overflow in Linux kernel, all versions up to, excluding 5.3, in the marvell wifi chip driver in Linux kernel, that allows local users to cause a denial of service(system crash) or possibly execute arbitrary code.

• CVE-2019-15031MedSep 13, 2019
  affected < 5.14.6-1.4fixed 5.14.6-1.4

  In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via an interrupt. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbegin) and then access

• CVE-2019-15030MedSep 13, 2019
  affected < 5.14.6-1.4fixed 5.14.6-1.4

  In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To exploit the venerability, a local user starts a transaction (via the hardware transactional memory instruction tbe

• CVE-2019-16234MedSep 11, 2019
  affected < 5.14.6-1.4fixed 5.14.6-1.4

  drivers/net/wireless/intel/iwlwifi/pcie/trans.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.

• CVE-2019-16232MedSep 11, 2019
  affected < 5.14.6-1.4fixed 5.14.6-1.4

  drivers/net/wireless/marvell/libertas/if_sdio.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.

• CVE-2019-16231MedSep 11, 2019
  affected < 5.14.6-1.4fixed 5.14.6-1.4

  drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14 does not check the alloc_workqueue return value, leading to a NULL pointer dereference.

• CVE-2019-15902MedSep 4, 2019
  affected < 5.14.6-1.4fixed 5.14.6-1.4

  A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" co