rpm package
suse/kernel-default-base&distro=SUSE Linux Enterprise Micro 5.1
pkg:rpm/suse/kernel-default-base&distro=SUSE%20Linux%20Enterprise%20Micro%205.1
Vulnerabilities (1,638)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-41864 | — | < 5.3.18-59.34.1.18.21.1 | 5.3.18-59.34.1.18.21.1 | Oct 1, 2021 | prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write. | ||
| CVE-2021-3653 | — | < 5.3.18-59.24.1.18.12.1 | 5.3.18-59.24.1.18.12.1 | Sep 29, 2021 | A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "int_ctl" field, this issue co | ||
| CVE-2021-40490 | — | < 5.3.18-59.27.1.18.15.1 | 5.3.18-59.27.1.18.15.1 | Sep 3, 2021 | A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13. | ||
| CVE-2021-38198 | — | < 5.3.18-59.24.1.18.12.1 | 5.3.18-59.24.1.18.12.1 | Aug 8, 2021 | arch/x86/kvm/mmu/paging_tmpl.h in the Linux kernel before 5.12.11 incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault. | ||
| CVE-2021-38204 | — | < 5.3.18-59.24.1.18.12.1 | 5.3.18-59.24.1.18.12.1 | Aug 8, 2021 | drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations. | ||
| CVE-2021-38205 | — | < 5.3.18-59.24.1.18.12.1 | 5.3.18-59.24.1.18.12.1 | Aug 8, 2021 | drivers/net/ethernet/xilinx/xilinx_emaclite.c in the Linux kernel before 5.13.3 makes it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer (i.e., the real IOMEM pointer). | ||
| CVE-2021-38206 | — | < 5.3.18-59.24.1.18.12.1 | 5.3.18-59.24.1.18.12.1 | Aug 8, 2021 | The mac80211 subsystem in the Linux kernel before 5.12.13, when a device supporting only 5 GHz is used, allows attackers to cause a denial of service (NULL pointer dereference in the radiotap parser) by injecting a frame with 802.11a rates. | ||
| CVE-2021-38207 | — | < 5.3.18-59.24.1.18.12.1 | 5.3.18-59.24.1.18.12.1 | Aug 8, 2021 | drivers/net/ethernet/xilinx/ll_temac_main.c in the Linux kernel before 5.12.13 allows remote attackers to cause a denial of service (buffer overflow and lockup) by sending heavy network traffic for about ten minutes. | ||
| CVE-2021-38208 | — | < 5.3.18-150300.59.68.1.150300.18.41.3 | 5.3.18-150300.59.68.1.150300.18.41.3 | Aug 8, 2021 | net/nfc/llcp_sock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service (NULL pointer dereference and BUG) by making a getsockname call after a certain type of failure of a bind call. | ||
| CVE-2021-38209 | — | < 5.3.18-59.24.1.18.12.1 | 5.3.18-59.24.1.18.12.1 | Aug 8, 2021 | net/netfilter/nf_conntrack_standalone.c in the Linux kernel before 5.12.2 allows observation of changes in any net namespace because these changes are leaked into all other net namespaces. This is related to the NF_SYSCTL_CT_MAX, NF_SYSCTL_CT_EXPECT_MAX, and NF_SYSCTL_CT_BUCKETS | ||
| CVE-2021-38166 | — | < 5.3.18-59.24.1.18.12.1 | 5.3.18-59.24.1.18.12.1 | Aug 7, 2021 | In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability. | ||
| CVE-2021-38160 | — | < 5.3.18-59.24.1.18.12.1 | 5.3.18-59.24.1.18.12.1 | Aug 7, 2021 | In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size. NOTE: the vendor indicates that the cited data corruption is not a vulnerability in any ex | ||
| CVE-2021-3655 | — | < 5.3.18-59.34.1.18.21.1 | 5.3.18-59.34.1.18.21.1 | Aug 5, 2021 | A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP packets may allow the kernel to read uninitialized memory. | ||
| CVE-2021-3679 | — | < 5.3.18-59.24.1.18.12.1 | 5.3.18-59.24.1.18.12.1 | Aug 5, 2021 | A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causin | ||
| CVE-2021-34556 | — | < 5.3.18-59.24.1.18.12.1 | 5.3.18-59.24.1.18.12.1 | Aug 2, 2021 | In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack. | ||
| CVE-2021-35477 | — | < 5.3.18-59.24.1.18.12.1 | 5.3.18-59.24.1.18.12.1 | Aug 2, 2021 | In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation does not necessarily occur before a store operation that has an atta | ||
| CVE-2021-37159 | — | < 5.3.18-59.34.1.18.21.1 | 5.3.18-59.34.1.18.21.1 | Jul 21, 2021 | hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free. | ||
| CVE-2020-28097 | — | < 5.3.18-150300.59.49.1.150300.18.31.1 | 5.3.18-150300.59.49.1.150300.18.31.1 | Jun 24, 2021 | The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgacon_scrolldelta out-of-bounds read, aka CID-973c096f6a85. | ||
| CVE-2021-0129 | — | < 5.3.18-150300.59.170.1.150300.18.100.1 | 5.3.18-150300.59.170.1.150300.18.100.1 | Jun 9, 2021 | Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access. | ||
| CVE-2021-20292 | — | < 5.3.18-150300.59.68.1.150300.18.41.3 | 5.3.18-150300.59.68.1.150300.18.41.3 | May 28, 2021 | There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouveau_sgdma_create_ttm in Nouveau DRM subsystem. The issue results from the lack of validating the existence of an object prior to performing operations on the obje |
- CVE-2021-41864Oct 1, 2021affected < 5.3.18-59.34.1.18.21.1fixed 5.3.18-59.34.1.18.21.1
prealloc_elems_and_freelist in kernel/bpf/stackmap.c in the Linux kernel before 5.14.12 allows unprivileged users to trigger an eBPF multiplication integer overflow with a resultant out-of-bounds write.
- CVE-2021-3653Sep 29, 2021affected < 5.3.18-59.24.1.18.12.1fixed 5.3.18-59.24.1.18.12.1
A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "int_ctl" field, this issue co
- CVE-2021-40490Sep 3, 2021affected < 5.3.18-59.27.1.18.15.1fixed 5.3.18-59.27.1.18.15.1
A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.
- CVE-2021-38198Aug 8, 2021affected < 5.3.18-59.24.1.18.12.1fixed 5.3.18-59.24.1.18.12.1
arch/x86/kvm/mmu/paging_tmpl.h in the Linux kernel before 5.12.11 incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault.
- CVE-2021-38204Aug 8, 2021affected < 5.3.18-59.24.1.18.12.1fixed 5.3.18-59.24.1.18.12.1
drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations.
- CVE-2021-38205Aug 8, 2021affected < 5.3.18-59.24.1.18.12.1fixed 5.3.18-59.24.1.18.12.1
drivers/net/ethernet/xilinx/xilinx_emaclite.c in the Linux kernel before 5.13.3 makes it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer (i.e., the real IOMEM pointer).
- CVE-2021-38206Aug 8, 2021affected < 5.3.18-59.24.1.18.12.1fixed 5.3.18-59.24.1.18.12.1
The mac80211 subsystem in the Linux kernel before 5.12.13, when a device supporting only 5 GHz is used, allows attackers to cause a denial of service (NULL pointer dereference in the radiotap parser) by injecting a frame with 802.11a rates.
- CVE-2021-38207Aug 8, 2021affected < 5.3.18-59.24.1.18.12.1fixed 5.3.18-59.24.1.18.12.1
drivers/net/ethernet/xilinx/ll_temac_main.c in the Linux kernel before 5.12.13 allows remote attackers to cause a denial of service (buffer overflow and lockup) by sending heavy network traffic for about ten minutes.
- CVE-2021-38208Aug 8, 2021affected < 5.3.18-150300.59.68.1.150300.18.41.3fixed 5.3.18-150300.59.68.1.150300.18.41.3
net/nfc/llcp_sock.c in the Linux kernel before 5.12.10 allows local unprivileged users to cause a denial of service (NULL pointer dereference and BUG) by making a getsockname call after a certain type of failure of a bind call.
- CVE-2021-38209Aug 8, 2021affected < 5.3.18-59.24.1.18.12.1fixed 5.3.18-59.24.1.18.12.1
net/netfilter/nf_conntrack_standalone.c in the Linux kernel before 5.12.2 allows observation of changes in any net namespace because these changes are leaked into all other net namespaces. This is related to the NF_SYSCTL_CT_MAX, NF_SYSCTL_CT_EXPECT_MAX, and NF_SYSCTL_CT_BUCKETS
- CVE-2021-38166Aug 7, 2021affected < 5.3.18-59.24.1.18.12.1fixed 5.3.18-59.24.1.18.12.1
In kernel/bpf/hashtab.c in the Linux kernel through 5.13.8, there is an integer overflow and out-of-bounds write when many elements are placed in a single bucket. NOTE: exploitation might be impractical without the CAP_SYS_ADMIN capability.
- CVE-2021-38160Aug 7, 2021affected < 5.3.18-59.24.1.18.12.1fixed 5.3.18-59.24.1.18.12.1
In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size. NOTE: the vendor indicates that the cited data corruption is not a vulnerability in any ex
- CVE-2021-3655Aug 5, 2021affected < 5.3.18-59.34.1.18.21.1fixed 5.3.18-59.34.1.18.21.1
A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP packets may allow the kernel to read uninitialized memory.
- CVE-2021-3679Aug 5, 2021affected < 5.3.18-59.24.1.18.12.1fixed 5.3.18-59.24.1.18.12.1
A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causin
- CVE-2021-34556Aug 2, 2021affected < 5.3.18-59.24.1.18.12.1fixed 5.3.18-59.24.1.18.12.1
In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack.
- CVE-2021-35477Aug 2, 2021affected < 5.3.18-59.24.1.18.12.1fixed 5.3.18-59.24.1.18.12.1
In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation does not necessarily occur before a store operation that has an atta
- CVE-2021-37159Jul 21, 2021affected < 5.3.18-59.34.1.18.21.1fixed 5.3.18-59.34.1.18.21.1
hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free.
- CVE-2020-28097Jun 24, 2021affected < 5.3.18-150300.59.49.1.150300.18.31.1fixed 5.3.18-150300.59.49.1.150300.18.31.1
The vgacon subsystem in the Linux kernel before 5.8.10 mishandles software scrollback. There is a vgacon_scrolldelta out-of-bounds read, aka CID-973c096f6a85.
- CVE-2021-0129Jun 9, 2021affected < 5.3.18-150300.59.170.1.150300.18.100.1fixed 5.3.18-150300.59.170.1.150300.18.100.1
Improper access control in BlueZ may allow an authenticated user to potentially enable information disclosure via adjacent access.
- CVE-2021-20292May 28, 2021affected < 5.3.18-150300.59.68.1.150300.18.41.3fixed 5.3.18-150300.59.68.1.150300.18.41.3
There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveau_sgdma.c in nouveau_sgdma_create_ttm in Nouveau DRM subsystem. The issue results from the lack of validating the existence of an object prior to performing operations on the obje
Page 81 of 82