suse/kernel-livepatch-SLE15-SP1_Update_14&distro=SUSE Linux Enterprise Live Patching 15 SP1

Vulnerabilities (43)

• CVE-2021-26931Feb 17, 2021
  affected < 9-2.2fixed 9-2.2

  An issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen. Block, net, and SCSI backends consider certain errors a plain bug, deliberately causing a kernel crash. For errors potentially being at least under the influence of guests (such as out of memory c

• CVE-2021-26930Feb 17, 2021
  affected < 9-2.2fixed 9-2.2

  An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driver maps grant references provided by the frontend. In this process, errors may be encountered. In one case, an error encountered earlier might be disca

• CVE-2021-3347Jan 29, 2021
  affected < 7-2.2fixed 7-2.2

  An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling, allowing local users to execute code in the kernel, aka CID-34b1a1ce1458.

• CVE-2020-28374Jan 13, 2021
  affected < 7-2.2fixed 7-2.2

  In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an XCOPY request, aka CID-2896c93811e3. For example, an attack c

• CVE-2021-0342Jan 11, 2021
  affected < 7-2.2fixed 7-2.2

  In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. User interaction is not required for exploitation. Product: Android; Versions: Android kernel; Androi

• CVE-2020-36158Jan 5, 2021
  affected < 6-2.1fixed 6-2.1

  mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332.

• CVE-2020-29569Dec 15, 2020
  affected < 6-2.1fixed 6-2.1

  An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux kernel PV block backend expects the kernel thread handler to reset ring->xenblkd to NULL when stopped. However, the handler may not have time to run if the frontend quickly togg

• CVE-2020-0465Dec 14, 2020
  affected < 6-2.1fixed 6-2.1

  In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions

• CVE-2020-0466Dec 14, 2020
  affected < 6-2.1fixed 6-2.1

  In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion

• CVE-2020-27786Dec 11, 2020
  affected < 7-2.2fixed 7-2.2

  A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a use-after-free issue. A write to this specific memory while freed and before use causes the flow of ex

• CVE-2020-29660Dec 9, 2020
  affected < 6-2.1fixed 6-2.1

  A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may allow a read-after-free attack against TIOCGSID, aka CID-c8bcd9c5be24.

• CVE-2020-29661Dec 9, 2020
  affected < 6-2.1fixed 6-2.1

  A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.

• CVE-2020-14381Dec 3, 2020
  affected < 3-2.1fixed 3-2.1

  A flaw was found in the Linux kernel’s futex implementation. This flaw allows a local attacker to corrupt system memory or escalate their privileges when creating a futex on a filesystem that is about to be unmounted. The highest threat from this vulnerability is to confidentiali

• CVE-2020-29368Nov 28, 2020
  affected < 6-2.1fixed 6-2.1

  An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1.

• CVE-2020-12351Nov 23, 2020
  affected < 4-2.1fixed 4-2.1

  Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

• CVE-2020-25705Nov 17, 2020
  affected < 5-2.1fixed 5-2.1

  A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well

• CVE-2020-8694Nov 12, 2020
  affected < 5-2.1fixed 5-2.1

  Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

• CVE-2020-25645Oct 13, 2020
  affected < 4-2.1fixed 4-2.1

  A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic u

• CVE-2020-14386Sep 16, 2020
  affected < 3-2.1fixed 3-2.1

  A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity.

• CVE-2020-14331Sep 15, 2020
  affected < 2-2.2fixed 2-2.2

  A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VT_RESIZE, which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VGA cons