suse/kernel-livepatch-SLE15-SP1_Update_8&distro=SUSE Linux Enterprise Live Patching 15 SP1

Vulnerabilities (65)

• CVE-2020-25668May 26, 2021
  affected < 9-2.2fixed 9-2.2

  A flaw was found in Linux Kernel because access to the global variable fg_console is not properly synchronized leading to a use after free in con_font_op.

• CVE-2020-14381Dec 3, 2020
  affected < 7-2.2fixed 7-2.2

  A flaw was found in the Linux kernel’s futex implementation. This flaw allows a local attacker to corrupt system memory or escalate their privileges when creating a futex on a filesystem that is about to be unmounted. The highest threat from this vulnerability is to confidentiali

• CVE-2020-12351Nov 23, 2020
  affected < 8-2.2fixed 8-2.2

  Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

• CVE-2020-25705Nov 17, 2020
  affected < 9-2.2fixed 9-2.2

  A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well

• CVE-2020-8694Nov 12, 2020
  affected < 9-2.2fixed 9-2.2

  Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

• CVE-2020-25645Oct 13, 2020
  affected < 8-2.2fixed 8-2.2

  A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic u

• CVE-2020-0431Sep 17, 2020
  affected < 7-2.2fixed 7-2.2

  In kbd_keycode of keyboard.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android

• CVE-2020-14386Sep 16, 2020
  affected < 7-2.2fixed 7-2.2

  A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity.

• CVE-2020-14331Sep 15, 2020
  affected < 6-2.2fixed 6-2.2

  A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VT_RESIZE, which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VGA cons

• CVE-2020-25212Sep 9, 2020
  affected < 7-2.2fixed 7-2.2

  A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.

• CVE-2020-1749Sep 9, 2020
  affected < 3-2.1fixed 3-2.1

  A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending

• CVE-2020-24394Aug 19, 2020
  affected < 7-2.2fixed 7-2.2

  In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131. This occurs because the current umask is not considered.

• CVE-2020-15780Jul 15, 2020
  affected < 6-2.2fixed 6-2.2

  An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7. Injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions, aka CID-75b0cea7bf30.

• CVE-2020-10757Jun 9, 2020
  affected < 5-2.1fixed 5-2.1

  A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system.

• CVE-2020-12654May 5, 2020
  affected < 4-2.1fixed 4-2.1

  An issue was found in Linux kernel before 5.5.4. mwifiex_ret_wmm_get_status() in drivers/net/wireless/marvell/mwifiex/wmm.c allows a remote AP to trigger a heap-based buffer overflow because of an incorrect memcpy, aka CID-3a9b153c5591.

• CVE-2020-12653May 5, 2020
  affected < 4-2.1fixed 4-2.1

  An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of an incorrect memcpy and buffer overflow, aka CID-b70261a288ea.

• CVE-2020-11668Apr 9, 2020
  affected < 6-2.2fixed 6-2.2

  In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles invalid descriptors, aka CID-a246b4d54770.

• CVE-2019-5108Dec 23, 2019
  affected < 3-2.1fixed 3-2.1

  An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to d

• CVE-2019-19447Dec 8, 2019
  affected < 6-2.2fixed 6-2.2

  In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c.

• CVE-2019-19543Dec 3, 2019
  affected < 1-3.3.1fixed 1-3.3.1

  In the Linux kernel before 5.1.6, there is a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c.