suse/kernel-livepatch-SLE15_Update_2&distro=SUSE Linux Enterprise Live Patching 15

Vulnerabilities (19)

• CVE-2019-11478Jun 18, 2019
  affected < 9-2.1fixed 9-2.1

  Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fi

• CVE-2019-11477Jun 18, 2019
  affected < 9-2.1fixed 9-2.1

  Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel

• CVE-2019-3846Jun 3, 2019
  affected < 9-2.1fixed 9-2.1

  A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network.

• CVE-2019-11085May 17, 2019
  affected < 9-2.1fixed 9-2.1

  Insufficient input validation in Kernel Mode Driver in Intel(R) i915 Graphics for Linux before version 5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

• CVE-2019-11487Apr 23, 2019
  affected < 9-2.1fixed 9-2.1

  The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm

• CVE-2019-7221Mar 17, 2019
  affected < 8-2.1fixed 8-2.1

  The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.

• CVE-2019-9213Mar 5, 2019
  affected < 8-2.1fixed 8-2.1

  In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task.

• CVE-2019-8912Feb 18, 2019
  affected < 8-2.1fixed 8-2.1

  In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr.

• CVE-2019-6974Feb 15, 2019
  affected < 8-2.1fixed 8-2.1

  In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.

• CVE-2018-16884Dec 18, 2018
  affected < 7-2.1fixed 7-2.1

  A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user can cause a host kernel m

• CVE-2018-14633Sep 25, 2018
  affected < 5-2.1fixed 5-2.1

  A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in the Linux kernel in a way an authentication request from an ISCSI initiator is processed. An unauthenticated remote attacker can cause a stack buffer overflow and smash up to 17 bytes

• CVE-2018-17182Sep 19, 2018
  affected < 5-2.1fixed 5-2.1

  An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and de

• CVE-2018-10853Sep 11, 2018
  affected < 3-2.1fixed 3-2.1

  A flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as sgdt/sidt/fxsave/fxrstor. It did not check current privilege(CPL) level while emulating unprivileged instructions. An unprivileged guest user/process could use this flaw to potential

• CVE-2018-5391Sep 6, 2018
  affected < 6-2.1fixed 6-2.1

  The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in I

• CVE-2018-10938Aug 27, 2018
  affected < 4-2.1fixed 4-2.1

  A flaw was found in the Linux kernel present since v4.0-rc1 and through v4.13-rc4. A crafted network packet sent remotely by an attacker may force the kernel to enter an infinite loop in the cipso_v4_optptr() function in net/ipv4/cipso_ipv4.c leading to a denial-of-service. A cer

• CVE-2018-15471Aug 17, 2018
  affected < 3-2.1fixed 3-2.1

  An issue was discovered in xenvif_set_hash_mapping in drivers/net/xen-netback/hash.c in the Linux kernel through 4.18.1, as used in Xen through 4.11.x and other products. The Linux netback driver allows frontends to control mapping of requests to request queues. When processing a

• CVE-2018-3646Aug 14, 2018
  affected < 2-2.1fixed 2-2.1

  Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis

• CVE-2018-5390Aug 6, 2018
  affected < 1-1.3.1fixed 1-1.3.1

  Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service.

• CVE-2017-18344Jul 26, 2018
  affected < 1-1.3.1fixed 1-1.3.1

  The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigevent->sigev_notify field, which leads to out-of-bounds access in the show_timer function (called when /proc/$PID/timers is read). This allows