suse/kernel-default&distro=SUSE Manager Server 4.0

Vulnerabilities (72)

• CVE-2021-30002Apr 2, 2021
  affected < 4.12.14-197.89.2fixed 4.12.14-197.89.2

  An issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists. video_usercopy in drivers/media/v4l2-core/v4l2-ioctl.c has a memory leak for large arguments, aka CID-fb18802a338b.

• CVE-2021-29647Mar 30, 2021
  affected < 4.12.14-197.89.2fixed 4.12.14-197.89.2

  An issue was discovered in the Linux kernel before 5.11.11. qrtr_recvmsg in net/qrtr/qrtr.c allows attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure, aka CID-50535249f624.

• CVE-2021-29650Mar 30, 2021
  affected < 4.12.14-197.89.2fixed 4.12.14-197.89.2

  An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h lack a full memory barrier upon the assignment of a new table value, a

• CVE-2021-29264Mar 26, 2021
  affected < 4.12.14-197.89.2fixed 4.12.14-197.89.2

  An issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver allows attackers to cause a system crash because a negative fragment size is calculated in situations involving an rx queue overrun when

• CVE-2021-29265Mar 26, 2021
  affected < 4.12.14-197.89.2fixed 4.12.14-197.89.2

  An issue was discovered in the Linux kernel before 5.11.7. usbip_sockfd_store in drivers/usb/usbip/stub_dev.c allows attackers to cause a denial of service (GPF) because the stub-up sequence has race conditions during an update of the local and shared status, aka CID-9380afd6df70

• CVE-2021-3444Mar 23, 2021
  affected < 4.12.14-197.89.2fixed 4.12.14-197.89.2

  The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs could use this gain out-of-bounds reads in kernel memory leading to information di

• CVE-2021-20219Mar 23, 2021
  affected < 4.12.14-197.89.2fixed 4.12.14-197.89.2

  A denial of service vulnerability was found in n_tty_receive_char_special in drivers/tty/n_tty.c of the Linux kernel. In this flaw a local attacker with a normal user privilege could delay the loop (due to a changing ldata->read_head, and a missing sanity check) and cause a threa

• CVE-2021-28971Mar 22, 2021
  affected < 4.12.14-197.89.2fixed 4.12.14-197.89.2

  In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, userspace applications (such as perf-fuzzer) can cause a system crash because the PEBS status in a PEBS record is mishandled, aka CID-d88d05a9e0b6.

• CVE-2021-28972Mar 22, 2021
  affected < 4.12.14-197.89.2fixed 4.12.14-197.89.2

  In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occur

• CVE-2021-28964Mar 22, 2021
  affected < 4.12.14-197.89.2fixed 4.12.14-197.89.2

  A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (BUG) because of a lack of locking on an extent buffer before a cloning operation, aka CID-dbcc7d57bffc.

• CVE-2020-27171Mar 20, 2021
  affected < 4.12.14-197.89.2fixed 4.12.14-197.89.2

  An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c has an off-by-one error (with a resultant integer underflow) affecting out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sens

• CVE-2020-27170Mar 20, 2021
  affected < 4.12.14-197.89.2fixed 4.12.14-197.89.2

  An issue was discovered in the Linux kernel before 5.11.8. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory, aka CID-f232

• CVE-2021-28950Mar 20, 2021
  affected < 4.12.14-197.89.2fixed 4.12.14-197.89.2

  An issue was discovered in fs/fuse/fuse_i.h in the Linux kernel before 5.11.8. A "stall on CPU" can occur because a retry loop continually finds the same bad inode, aka CID-775c5033a0d1.

• CVE-2021-28660Mar 17, 2021
  affected < 4.12.14-197.89.2fixed 4.12.14-197.89.2

  rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array. NOTE: from the perspective of kernel.org releases, CVE IDs are not normally used for drivers/staging/* (unfinished work); howe

• CVE-2021-27365Mar 7, 2021
  affected < 4.12.14-197.89.2fixed 4.12.14-197.89.2

  An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up t

• CVE-2021-27364Mar 7, 2021
  affected < 4.12.14-197.89.2fixed 4.12.14-197.89.2

  An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages.

• CVE-2021-27363Mar 7, 2021
  affected < 4.12.14-197.89.2fixed 4.12.14-197.89.2

  An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via t

• CVE-2021-28038Mar 5, 2021
  affected < 4.12.14-197.89.2fixed 4.12.14-197.89.2

  An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of servic

• CVE-2020-25639Mar 4, 2021
  affected < 4.12.14-197.83.1fixed 4.12.14-197.83.1

  A NULL pointer dereference flaw was found in the Linux kernel's GPU Nouveau driver functionality in versions prior to 5.12-rc1 in the way the user calls ioctl DRM_IOCTL_NOUVEAU_CHANNEL_ALLOC. This flaw allows a local user to crash the system.

• CVE-2021-26932Feb 17, 2021
  affected < 4.12.14-197.86.1fixed 4.12.14-197.86.1

  An issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant mapping operations often occur in batch hypercalls, where a number of operations are done in a single hypercall, the success or failure of each one is reported to the backend driver, and the ba