suse/kernel-livepatch-SLE15-SP2_Update_9&distro=SUSE Linux Enterprise Live Patching 15 SP2

Vulnerabilities (48)

• CVE-2021-23133Apr 22, 2021
  affected < 8-2.2fixed 8-2.2

  A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_destroy_sock is called without sock_net(sk)->sctp.addr_wq_lock then an element is re

• CVE-2020-36322Apr 14, 2021
  affected < 6-2.2fixed 6-2.2

  An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf. fuse_do_getattr() calls make_bad_inode() in inappropriate situations, causing a system crash. NOTE: the original fix for this vulnerability was incomplete, and i

• CVE-2021-29154Apr 8, 2021
  affected < 6-2.2fixed 6-2.2

  BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c.

• CVE-2021-28688Apr 6, 2021
  affected < 5-2.2fixed 5-2.2

  The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup wo

• CVE-2021-3444Mar 23, 2021
  affected < 5-2.2fixed 5-2.2

  The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs could use this gain out-of-bounds reads in kernel memory leading to information di

• CVE-2021-28660Mar 17, 2021
  affected < 5-2.2fixed 5-2.2

  rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array. NOTE: from the perspective of kernel.org releases, CVE IDs are not normally used for drivers/staging/* (unfinished work); howe

• CVE-2021-27365Mar 7, 2021
  affected < 4-2.2fixed 4-2.2

  An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up t

• CVE-2021-27364Mar 7, 2021
  affected < 4-2.2fixed 4-2.2

  An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages.

• CVE-2021-27363Mar 7, 2021
  affected < 4-2.2fixed 4-2.2

  An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via t

• CVE-2021-26931Feb 17, 2021
  affected < 5-2.2fixed 5-2.2

  An issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen. Block, net, and SCSI backends consider certain errors a plain bug, deliberately causing a kernel crash. For errors potentially being at least under the influence of guests (such as out of memory c

• CVE-2021-26930Feb 17, 2021
  affected < 5-2.2fixed 5-2.2

  An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driver maps grant references provided by the frontend. In this process, errors may be encountered. In one case, an error encountered earlier might be disca

• CVE-2021-3347Jan 29, 2021
  affected < 3-2.2fixed 3-2.2

  An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling, allowing local users to execute code in the kernel, aka CID-34b1a1ce1458.

• CVE-2020-28374Jan 13, 2021
  affected < 1-5.3.1fixed 1-5.3.1

  In drivers/target/target_core_xcopy.c in the Linux kernel before 5.10.7, insufficient identifier checking in the LIO SCSI target code can be used by remote attackers to read or write files via directory traversal in an XCOPY request, aka CID-2896c93811e3. For example, an attack c

• CVE-2020-36158Jan 5, 2021
  affected < 1-5.3.1fixed 1-5.3.1

  mwifiex_cmd_802_11_ad_hoc_start in drivers/net/wireless/marvell/mwifiex/join.c in the Linux kernel through 5.10.4 might allow remote attackers to execute arbitrary code via a long SSID value, aka CID-5c455c5ab332.

• CVE-2020-29569Dec 15, 2020
  affected < 2-2.1fixed 2-2.1

  An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux kernel PV block backend expects the kernel thread handler to reset ring->xenblkd to NULL when stopped. However, the handler may not have time to run if the frontend quickly togg

• CVE-2020-27777Dec 15, 2020
  affected < 1-5.3.1fixed 1-5.3.1

  A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase

• CVE-2020-27068Dec 15, 2020
  affected < 1-5.3.1fixed 1-5.3.1

  Product: AndroidVersions: Android kernelAndroid ID: A-127973231References: Upstream kernel

• CVE-2020-0465Dec 14, 2020
  affected < 1-5.3.1fixed 1-5.3.1

  In various methods of hid-multitouch.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions

• CVE-2020-0444Dec 14, 2020
  affected < 1-5.3.1fixed 1-5.3.1

  In audit_free_lsm_field of auditfilter.c, there is a possible bad kfree due to a logic error in audit_data_to_entry. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVe

• CVE-2020-0466Dec 14, 2020
  affected < 1-5.3.1fixed 1-5.3.1

  In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion