suse/kernel-livepatch-SLE15_Update_8&distro=SUSE Linux Enterprise Live Patching 15

Vulnerabilities (28)

• CVE-2019-10220Nov 27, 2019
  affected < 6-2.1fixed 6-2.1

  Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists.

• CVE-2019-17133Oct 4, 2019
  affected < 6-2.1fixed 6-2.1

  In the Linux kernel through 5.3.2, cfg80211_mgd_wext_giwessid in net/wireless/wext-sme.c does not reject a long SSID IE, leading to a Buffer Overflow.

• CVE-2019-14835Sep 17, 2019
  affected < 5-2.1fixed 5-2.1

  A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the

• CVE-2019-15917Sep 4, 2019
  affected < 7-2.3fixed 7-2.3

  An issue was discovered in the Linux kernel before 5.0.5. There is a use-after-free issue when hci_uart_register_dev() fails in hci_uart_set_proto() in drivers/bluetooth/hci_ldisc.c.

• CVE-2018-16871Jul 30, 2019
  affected < 7-2.3fixed 7-2.3

  A flaw was found in the Linux kernel's NFS implementation, all versions 3.x and all versions 4.x up to 4.20. An attacker, who is able to mount an exported NFS filesystem, is able to trigger a null pointer dereference by using an invalid NFS sequence. This can panic the machine an

• CVE-2019-13272KEVJul 17, 2019
  affected < 7-2.3fixed 7-2.3

  In the Linux kernel before 5.1.17, ptrace_link in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relati

• CVE-2019-11478Jun 18, 2019
  affected < 3-2.1fixed 3-2.1

  Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fi

• CVE-2019-11477Jun 18, 2019
  affected < 3-2.1fixed 3-2.1

  Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel

• CVE-2019-3846Jun 3, 2019
  affected < 3-2.1fixed 3-2.1

  A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network.

• CVE-2019-11085May 17, 2019
  affected < 3-2.1fixed 3-2.1

  Insufficient input validation in Kernel Mode Driver in Intel(R) i915 Graphics for Linux before version 5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.

• CVE-2019-11487Apr 23, 2019
  affected < 3-2.1fixed 3-2.1

  The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm

• CVE-2018-19985Mar 17, 2019
  affected < 1-1.3.1fixed 1-1.3.1

  The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object out-of-bounds (OOB) read that potentially allows arbitrary read in the kernel address

• CVE-2019-7221Mar 17, 2019
  affected < 2-2.1fixed 2-2.1

  The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.

• CVE-2019-9213Mar 5, 2019
  affected < 2-2.1fixed 2-2.1

  In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task.

• CVE-2019-8912Feb 18, 2019
  affected < 2-2.1fixed 2-2.1

  In the Linux kernel through 4.20.11, af_alg_release() in crypto/af_alg.c neglects to set a NULL value for a certain structure member, which leads to a use-after-free in sockfs_setattr.

• CVE-2019-6974Feb 15, 2019
  affected < 2-2.1fixed 2-2.1

  In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.

• CVE-2018-16884Dec 18, 2018
  affected < 1-1.3.1fixed 1-1.3.1

  A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user can cause a host kernel m

• CVE-2018-20169Dec 17, 2018
  affected < 1-1.3.1fixed 1-1.3.1

  An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.

• CVE-2018-18397Dec 12, 2018
  affected < 1-1.3.1fixed 1-1.3.1

  The userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for certain UFFDIO_ ioctl calls, as demonstrated by allowing local users to write data into holes in a tmpfs file (if the user has read-only access to that file, and that file contains hole

• CVE-2018-9568Dec 6, 2018
  affected < 1-1.3.1fixed 1-1.3.1

  In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. A