suse/kernel-livepatch-SLE15_Update_13&distro=SUSE Linux Enterprise Live Patching 15

Vulnerabilities (18)

• CVE-2020-1749Sep 9, 2020
  affected < 6-2.1fixed 6-2.1

  A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending

• CVE-2020-10757Jun 9, 2020
  affected < 8-2.1fixed 8-2.1

  A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system.

• CVE-2020-12654May 5, 2020
  affected < 7-2.1fixed 7-2.1

  An issue was found in Linux kernel before 5.5.4. mwifiex_ret_wmm_get_status() in drivers/net/wireless/marvell/mwifiex/wmm.c allows a remote AP to trigger a heap-based buffer overflow because of an incorrect memcpy, aka CID-3a9b153c5591.

• CVE-2020-12653May 5, 2020
  affected < 7-2.1fixed 7-2.1

  An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of an incorrect memcpy and buffer overflow, aka CID-b70261a288ea.

• CVE-2019-5108Dec 23, 2019
  affected < 6-2.1fixed 6-2.1

  An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to d

• CVE-2019-10220Nov 27, 2019
  affected < 3-2.1fixed 3-2.1

  Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists.

• CVE-2019-17133Oct 4, 2019
  affected < 3-2.1fixed 3-2.1

  In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.

• CVE-2019-14835Sep 17, 2019
  affected < 2-2.1fixed 2-2.1

  A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the

• CVE-2019-1125Sep 3, 2019
  affected < 1-1.5.1fixed 1-1.5.1

  An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries. To exploit this vulnerability, an attacker would ha

• CVE-2019-15666Aug 27, 2019
  affected < 8-2.1fixed 8-2.1

  An issue was discovered in the Linux kernel before 5.0.19. There is an out-of-bounds array access in __xfrm_policy_unlink, which will cause denial of service, because verify_newpolicy_info in net/xfrm/xfrm_user.c mishandles directory validation.

• CVE-2019-15239Aug 20, 2019
  affected < 4-2.1fixed 4-2.1

  In the Linux kernel, a certain net/ipv4/tcp_output.c change, which was properly incorporated into 4.16.12, was incorrectly backported to the earlier longterm kernels, introducing a new vulnerability that was potentially more severe than the issue that was intended to be fixed by

• CVE-2019-14284Jul 26, 2019
  affected < 1-1.5.1fixed 1-1.5.1

  In the Linux kernel before 5.2.3, drivers/block/floppy.c allows a denial of service by setup_format_params division-by-zero. Two consecutive ioctls can trigger the bug: the first one should set the drive geometry with .sect and .rate values that make F_SECT_PER_TRACK be zero. Nex

• CVE-2019-14283Jul 26, 2019
  affected < 1-1.5.1fixed 1-1.5.1

  In the Linux kernel before 5.2.3, set_geometry in drivers/block/floppy.c does not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It can be triggered by an unprivileged local user when a floppy disk has been inserted. NOTE: QEMU c

• CVE-2018-20855Jul 26, 2019
  affected < 1-1.5.1fixed 1-1.5.1

  An issue was discovered in the Linux kernel before 4.18.7. In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace.

• CVE-2019-13648Jul 19, 2019
  affected < 1-1.5.1fixed 1-1.5.1

  In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a crafted signal frame. This affects arch/power

• CVE-2019-13631Jul 17, 2019
  affected < 1-1.5.1fixed 1-1.5.1

  In parse_hid_report_descriptor in drivers/input/tablet/gtco.c in the Linux kernel through 5.2.1, a malicious USB device can send an HID report that triggers an out-of-bounds write during generation of debugging messages.

• CVE-2019-11810May 7, 2019
  affected < 1-1.5.1fixed 1-1.5.1

  An issue was discovered in the Linux kernel before 5.0.7. A NULL pointer dereference can occur when megasas_create_frame_pool() fails in megasas_alloc_cmds() in drivers/scsi/megaraid/megaraid_sas_base.c. This causes a Denial of Service, related to a use-after-free.

• CVE-2018-1000199May 24, 2018
  affected < 8-2.1fixed 8-2.1

  The Linux Kernel version 3.18 contains a dangerous feature vulnerability in modify_user_hw_breakpoint() that can result in crash and possibly memory corruption. This attack appear to be exploitable via local code execution and the ability to use ptrace. This vulnerability appears