suse/kernel-azure&distro=SUSE Linux Enterprise Module for Public Cloud 15

Vulnerabilities (193)

• CVE-2018-20836HigMay 7, 2019
  affected < 4.12.14-5.33.1fixed 4.12.14-5.33.1

  An issue was discovered in the Linux kernel before 4.20. There is a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free.

• CVE-2019-11599HigApr 29, 2019
  affected < 4.12.14-5.33.1fixed 4.12.14-5.33.1

  The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, which allows local users to obtain sensitive information, cause a denial of service, or possibly have unspecified other

• CVE-2019-3882MedApr 24, 2019
  affected < 4.12.14-5.27.1fixed 4.12.14-5.27.1

  A flaw was found in the Linux kernel's vfio interface implementation that permits violation of the user's locked memory limit. If a device is bound to a vfio driver, such as vfio-pci, and the local attacker is administratively granted ownership of the device, it may cause a syste

• CVE-2019-11487HigApr 23, 2019
  affected < 4.12.14-5.30.1fixed 4.12.14-5.30.1

  The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm

• CVE-2019-11486HigApr 23, 2019
  affected < 4.12.14-5.30.1fixed 4.12.14-5.30.1

  The Siemens R3964 line discipline driver in drivers/tty/n_r3964.c in the Linux kernel before 5.0.8 has multiple race conditions.

• CVE-2019-3460MedApr 11, 2019
  affected < 4.12.14-5.24.1fixed 4.12.14-5.24.1

  A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1.

• CVE-2019-3459MedApr 11, 2019
  affected < 4.12.14-5.24.1fixed 4.12.14-5.24.1

  A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1.

• CVE-2019-7222MedMar 21, 2019
  affected < 4.12.14-5.24.1fixed 4.12.14-5.24.1

  The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.

• CVE-2019-7221HigMar 21, 2019
  affected < 4.12.14-5.24.1fixed 4.12.14-5.24.1

  The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.

• CVE-2018-20669HigMar 21, 2019
  affected < 4.12.14-5.24.1fixed 4.12.14-5.24.1

  An issue where a provided address with access_ok() is not checked was discovered in i915_gem_execbuffer2_ioctl in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the Linux kernel through 4.19.13. A local attacker can craft a malicious IOCTL function call to overwrite arbitrary kern

• CVE-2018-19985MedMar 21, 2019
  affected < 4.12.14-5.19.1fixed 4.12.14-5.19.1

  The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object out-of-bounds (OOB) read that potentially allows arbitrary read in the kernel address

• CVE-2019-9213MedMar 5, 2019
  affected < 4.12.14-5.24.1fixed 4.12.14-5.24.1

  In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task.

• CVE-2019-9003HigFeb 22, 2019
  affected < 4.12.14-5.27.1fixed 4.12.14-5.27.1

  In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for certain simultaneous execution of the code, as demonstrated by a "service ipmievd restart" loop.

• CVE-2019-8980HigFeb 21, 2019
  affected < 4.12.14-5.24.1fixed 4.12.14-5.24.1

  A memory leak in the kernel_read_file function in fs/exec.c in the Linux kernel through 4.20.11 allows attackers to cause a denial of service (memory consumption) by triggering vfs_read failures.

• CVE-2019-8912HigFeb 18, 2019
  affected < 4.12.14-5.24.1fixed 4.12.14-5.24.1

  In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr.

• CVE-2019-6974HigFeb 15, 2019
  affected < 4.12.14-5.24.1fixed 4.12.14-5.24.1

  In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.

• CVE-2019-7308MedFeb 1, 2019
  affected < 4.12.14-5.24.1fixed 4.12.14-5.24.1

  kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of different branches with different state or limits to sanitize, leading to side-channel attacks.

• CVE-2018-16880HigJan 29, 2019
  affected < 4.12.14-5.27.1fixed 4.12.14-5.27.1

  A flaw was found in the Linux kernel's handle_rx() function in the [vhost_net] driver. A malicious virtual guest, under specific conditions, can trigger an out-of-bounds write in a kmalloc-8 slab on a virtual host which may lead to a kernel memory corruption and a system panic. D

• CVE-2019-3819MedJan 25, 2019
  affected < 4.12.14-5.24.1fixed 4.12.14-5.24.1

  A flaw was found in the Linux kernel in the function hid_debug_events_read() in drivers/hid/hid-debug.c file which may enter an infinite loop with certain parameters passed from a userspace. A local privileged user ("root") can cause a system lock up and a denial of service. Vers

• CVE-2019-5489MedJan 7, 2019
  affected < 4.12.14-5.30.1fixed 4.12.14-5.30.1

  The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the output of the fincor