suse/kernel-livepatch-SLE15_Update_26&distro=SUSE Linux Enterprise Live Patching 15

Vulnerabilities (77)

• CVE-2022-21499Jun 9, 2022
  affected < 11-150000.2.3fixed 11-150000.2.3

  KGDB and KDB allow read and write access to kernel memory, and thus should be restricted during lockdown. An attacker with access to a serial port could trigger the debugger so it is important that the debugger respect the lockdown mode when/if it is triggered. CVSS 3.1 Base Scor

• CVE-2022-1652May 31, 2022
  affected < 14-150000.2.2fixed 14-150000.2.2

  Linux Kernel could allow a local attacker to execute arbitrary code on the system, caused by a concurrency use-after-free flaw in the bad_flp_intr function. By executing a specially-crafted program, an attacker could exploit this vulnerability to execute arbitrary code or cause a

• CVE-2022-1419May 31, 2022
  affected < 12-150000.2.2fixed 12-150000.2.2

  The root cause of this vulnerability is that the ioctl$DRM_IOCTL_MODE_DESTROY_DUMB can decrease refcount of *drm_vgem_gem_object *(created in *vgem_gem_dumb_create*) concurrently, and *vgem_gem_dumb_create *will access the freed drm_vgem_gem_object.

• CVE-2022-1734May 18, 2022
  affected < 10-150000.2.2fixed 10-150000.2.2

  A flaw in Linux Kernel found in nfcmrvl_nci_unregister_dev() in drivers/nfc/nfcmrvl/main.c can lead to use after free both read or write when non synchronized between cleanup routine and firmware download routine.

• CVE-2022-1679May 16, 2022
  affected < 12-150000.2.2fixed 12-150000.2.2

  A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9k_htc_wait_for_target function to fail with some input messages. This flaw allows a local user to crash or potentially escalate their privileges on the system.

• CVE-2022-30594May 12, 2022
  affected < 9-150000.2.2fixed 9-150000.2.2

  The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.

• CVE-2022-1048Apr 29, 2022
  affected < 9-150000.2.2fixed 9-150000.2.2

  A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalat

• CVE-2022-28389Apr 3, 2022
  affected < 12-150000.2.2fixed 12-150000.2.2

  mcba_usb_start_xmit in drivers/net/can/usb/mcba_usb.c in the Linux kernel through 5.17.1 has a double free.

• CVE-2022-28390Apr 3, 2022
  affected < 12-150000.2.2fixed 12-150000.2.2

  ems_usb_start_xmit in drivers/net/can/usb/ems_usb.c in the Linux kernel through 5.17.1 has a double free.

• CVE-2021-4202Mar 25, 2022
  affected < 3-2.2fixed 3-2.2

  A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalat

• CVE-2022-0435Mar 25, 2022
  affected < 3-2.2fixed 3-2.2

  A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate

• CVE-2022-0330Mar 25, 2022
  affected < 8-150000.2.1fixed 8-150000.2.1

  A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system.

• CVE-2022-27666Mar 23, 2022
  affected < 6-150000.2.1fixed 6-150000.2.1

  A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat.

• CVE-2022-1011Mar 18, 2022
  affected < 7-150000.2.1fixed 7-150000.2.1

  A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.

• CVE-2021-39713Mar 16, 2022
  affected < 7-150000.2.1fixed 7-150000.2.1

  Product: AndroidVersions: Android kernelAndroid ID: A-173788806References: Upstream kernel

• CVE-2021-3732Mar 7, 2022
  affected < 1-1.3.1fixed 1-1.3.1

  A flaw was found in the Linux kernel's OverlayFS subsystem in the way the user mounts the TmpFS filesystem with OverlayFS. This flaw allows a local user to gain access to hidden files that should not be accessible.

• CVE-2022-26490Mar 6, 2022
  affected < 12-150000.2.2fixed 12-150000.2.2

  st21nfca_connectivity_event_received in drivers/nfc/st21nfca/se.c in the Linux kernel through 5.16.12 has EVT_TRANSACTION buffer overflows because of untrusted length parameters.

• CVE-2021-3656Mar 4, 2022
  affected < 1-1.3.1fixed 1-1.3.1

  A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "virt_ext" field, this issue c

• CVE-2021-3744Mar 4, 2022
  affected < 1-1.3.1fixed 1-1.3.1

  A memory leak flaw was found in the Linux kernel in the ccp_run_aes_gcm_cmd() function in drivers/crypto/ccp/ccp-ops.c, which allows attackers to cause a denial of service (memory consumption). This vulnerability is similar with the older CVE-2019-18808.

• CVE-2021-3640Mar 3, 2022
  affected < 1-1.3.1fixed 1-1.3.1

  A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable fau