suse/kernel-docs&distro=SUSE Linux Enterprise Module for Development Tools 15 SP1

Vulnerabilities (276)

• CVE-2019-15216MedAug 19, 2019
  affected < 4.12.14-197.18.1fixed 4.12.14-197.18.1

  An issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c driver.

• CVE-2019-15215MedAug 19, 2019
  affected < 4.12.14-197.18.1fixed 4.12.14-197.18.1

  An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2_usb.c driver.

• CVE-2019-15214MedAug 19, 2019
  affected < 4.12.14-197.18.1fixed 4.12.14-197.18.1

  An issue was discovered in the Linux kernel before 5.0.10. There is a use-after-free in the sound subsystem because card disconnection causes certain data structures to be deleted too early. This is related to sound/core/init.c and sound/core/info.c.

• CVE-2019-15213MedAug 19, 2019
  affected < 4.12.14-197.34.1fixed 4.12.14-197.34.1

  An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver.

• CVE-2019-15212MedAug 19, 2019
  affected < 4.12.14-197.18.1fixed 4.12.14-197.18.1

  An issue was discovered in the Linux kernel before 5.1.8. There is a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver.

• CVE-2019-15211MedAug 19, 2019
  affected < 4.12.14-197.18.1fixed 4.12.14-197.18.1

  An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver because drivers/media/radio/radio-raremono.c does not properly allocate memory.

• CVE-2018-20976HigAug 19, 2019
  affected < 4.12.14-197.18.1fixed 4.12.14-197.18.1

  An issue was discovered in fs/xfs/xfs_super.c in the Linux kernel before 4.18. A use after free exists, related to xfs_fs_fill_super failure.

• CVE-2017-18551MedAug 19, 2019
  affected < 4.12.14-197.18.1fixed 4.12.14-197.18.1

  An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. There is an out of bounds write in the function i2c_smbus_xfer_emulated.

• CVE-2019-15118MedAug 16, 2019
  affected < 4.12.14-197.18.1fixed 4.12.14-197.18.1

  check_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion.

• CVE-2019-15117HigAug 16, 2019
  affected < 4.12.14-197.18.1fixed 4.12.14-197.18.1

  parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access.

• CVE-2019-15099HigAug 16, 2019
  affected < 4.12.14-197.18.1fixed 4.12.14-197.18.1

  drivers/net/wireless/ath/ath10k/usb.c in the Linux kernel through 5.2.8 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.

• CVE-2019-15098MedAug 16, 2019
  affected < 4.12.14-197.18.1fixed 4.12.14-197.18.1

  drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.

• CVE-2019-15090MedAug 16, 2019
  affected < 4.12.14-197.18.1fixed 4.12.14-197.18.1

  An issue was discovered in drivers/scsi/qedi/qedi_dbg.c in the Linux kernel before 5.1.12. In the qedi_dbg_* family of functions, there is an out-of-bounds read.

• CVE-2019-9506HigAug 14, 2019
  affected < 4.12.14-197.21.1fixed 4.12.14-197.21.1

  The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inje

• CVE-2018-16871HigJul 30, 2019
  affected < 4.12.14-197.7.1fixed 4.12.14-197.7.1

  A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine an

• CVE-2019-14284MedJul 26, 2019
  affected < 4.12.14-197.15.1fixed 4.12.14-197.15.1

  In the Linux kernel before 5.2.3, drivers/block/floppy.c allows a denial of service by setup_format_params division-by-zero. Two consecutive ioctls can trigger the bug: the first one should set the drive geometry with .sect and .rate values that make F_SECT_PER_TRACK be zero. Nex

• CVE-2019-14283MedJul 26, 2019
  affected < 4.12.14-197.15.1fixed 4.12.14-197.15.1

  In the Linux kernel before 5.2.3, set_geometry in drivers/block/floppy.c does not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It can be triggered by an unprivileged local user when a floppy disk has been inserted. NOTE: QEMU c

• CVE-2018-20855LowJul 26, 2019
  affected < 4.12.14-197.15.1fixed 4.12.14-197.15.1

  An issue was discovered in the Linux kernel before 4.18.7. In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace.

• CVE-2019-13648MedJul 19, 2019
  affected < 4.12.14-197.15.1fixed 4.12.14-197.15.1

  In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a crafted signal frame. This affects arch/power

• CVE-2019-13631MedJul 17, 2019
  affected < 4.12.14-197.15.1fixed 4.12.14-197.15.1

  In parse_hid_report_descriptor in drivers/input/tablet/gtco.c in the Linux kernel through 5.2.1, a malicious USB device can send an HID report that triggers an out-of-bounds write during generation of debugging messages.