rpm package
suse/kernel-obs-build&distro=SUSE Linux Enterprise Module for Development Tools 15 SP3
pkg:rpm/suse/kernel-obs-build&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Development%20Tools%2015%20SP3
Vulnerabilities (316)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2021-4149 | — | < 5.3.18-150300.59.43.1 | 5.3.18-150300.59.43.1 | Mar 23, 2022 | A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. In this flaw, a user with a local privilege may cause a denial of service (DOS) due to a deadlock problem. | ||
| CVE-2021-4197 | — | < 5.3.18-150300.59.43.1 | 5.3.18-150300.59.43.1 | Mar 23, 2022 | An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process. It is actually both for cg | ||
| CVE-2022-0854 | — | < 5.3.18-150300.59.63.1 | 5.3.18-150300.59.63.1 | Mar 23, 2022 | A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls DMA_FROM_DEVICE. This flaw allows a local user to read random memory from the kernel space. | ||
| CVE-2022-27666 | — | < 5.3.18-150300.59.63.1 | 5.3.18-150300.59.63.1 | Mar 23, 2022 | A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat. | ||
| CVE-2021-45868 | — | < 5.3.18-150300.59.63.1 | 5.3.18-150300.59.63.1 | Mar 18, 2022 | In the Linux kernel before 5.15.3, fs/quota/quota_tree.c does not validate the block number in the quota tree (on disk). This can, for example, lead to a kernel/locking/rwsem.c use-after-free if there is a corrupted quota file. | ||
| CVE-2022-1011 | — | < 5.3.18-150300.59.63.1 | 5.3.18-150300.59.63.1 | Mar 18, 2022 | A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation. | ||
| CVE-2021-39698 | — | < 5.3.18-150300.59.60.4 | 5.3.18-150300.59.60.4 | Mar 16, 2022 | In aio_poll_complete_work of aio.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android ke | ||
| CVE-2021-39685 | — | < 5.3.18-150300.59.49.1 | 5.3.18-150300.59.49.1 | Mar 16, 2022 | In various setup methods of the USB gadget subsystem, there is a possible out of bounds write due to an incorrect flag check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: | ||
| CVE-2022-26966 | — | < 5.3.18-150300.59.60.4 | 5.3.18-150300.59.60.4 | Mar 12, 2022 | An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted frame lengths from a device. | ||
| CVE-2022-0002 | — | < 5.3.18-150300.59.54.1 | 5.3.18-150300.59.54.1 | Mar 11, 2022 | Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. | ||
| CVE-2021-26341 | — | < 5.3.18-150300.59.87.1 | 5.3.18-150300.59.87.1 | Mar 11, 2022 | Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage. | ||
| CVE-2022-0001 | — | < 5.3.18-150300.59.54.1 | 5.3.18-150300.59.54.1 | Mar 11, 2022 | Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access. | ||
| CVE-2022-23042 | — | < 5.3.18-150300.59.60.4 | 5.3.18-150300.59.60.4 | Mar 10, 2022 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access | ||
| CVE-2022-23041 | — | < 5.3.18-150300.59.60.4 | 5.3.18-150300.59.60.4 | Mar 10, 2022 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access | ||
| CVE-2022-23040 | — | < 5.3.18-150300.59.60.4 | 5.3.18-150300.59.60.4 | Mar 10, 2022 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access | ||
| CVE-2022-23039 | — | < 5.3.18-150300.59.60.4 | 5.3.18-150300.59.60.4 | Mar 10, 2022 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access | ||
| CVE-2022-23038 | — | < 5.3.18-150300.59.60.4 | 5.3.18-150300.59.60.4 | Mar 10, 2022 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access | ||
| CVE-2022-23037 | — | < 5.3.18-150300.59.60.4 | 5.3.18-150300.59.60.4 | Mar 10, 2022 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access | ||
| CVE-2022-23036 | — | < 5.3.18-150300.59.60.4 | 5.3.18-150300.59.60.4 | Mar 10, 2022 | Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access | ||
| CVE-2022-0516 | — | < 5.3.18-150300.59.54.1 | 5.3.18-150300.59.54.1 | Mar 8, 2022 | A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with a normal user privilege to obtain unauthorized memory write access. This flaw affects Linux kernel versions pri |
- CVE-2021-4149Mar 23, 2022affected < 5.3.18-150300.59.43.1fixed 5.3.18-150300.59.43.1
A vulnerability was found in btrfs_alloc_tree_b in fs/btrfs/extent-tree.c in the Linux kernel due to an improper lock operation in btrfs. In this flaw, a user with a local privilege may cause a denial of service (DOS) due to a deadlock problem.
- CVE-2021-4197Mar 23, 2022affected < 5.3.18-150300.59.43.1fixed 5.3.18-150300.59.43.1
An unprivileged write to the file handler flaw in the Linux kernel's control groups and namespaces subsystem was found in the way users have access to some less privileged process that are controlled by cgroups and have higher privileged parent process. It is actually both for cg
- CVE-2022-0854Mar 23, 2022affected < 5.3.18-150300.59.63.1fixed 5.3.18-150300.59.63.1
A memory leak flaw was found in the Linux kernel’s DMA subsystem, in the way a user calls DMA_FROM_DEVICE. This flaw allows a local user to read random memory from the kernel space.
- CVE-2022-27666Mar 23, 2022affected < 5.3.18-150300.59.63.1fixed 5.3.18-150300.59.63.1
A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat.
- CVE-2021-45868Mar 18, 2022affected < 5.3.18-150300.59.63.1fixed 5.3.18-150300.59.63.1
In the Linux kernel before 5.15.3, fs/quota/quota_tree.c does not validate the block number in the quota tree (on disk). This can, for example, lead to a kernel/locking/rwsem.c use-after-free if there is a corrupted quota file.
- CVE-2022-1011Mar 18, 2022affected < 5.3.18-150300.59.63.1fixed 5.3.18-150300.59.63.1
A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.
- CVE-2021-39698Mar 16, 2022affected < 5.3.18-150300.59.60.4fixed 5.3.18-150300.59.60.4
In aio_poll_complete_work of aio.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android ke
- CVE-2021-39685Mar 16, 2022affected < 5.3.18-150300.59.49.1fixed 5.3.18-150300.59.49.1
In various setup methods of the USB gadget subsystem, there is a possible out of bounds write due to an incorrect flag check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:
- CVE-2022-26966Mar 12, 2022affected < 5.3.18-150300.59.60.4fixed 5.3.18-150300.59.60.4
An issue was discovered in the Linux kernel before 5.16.12. drivers/net/usb/sr9700.c allows attackers to obtain sensitive information from heap memory via crafted frame lengths from a device.
- CVE-2022-0002Mar 11, 2022affected < 5.3.18-150300.59.54.1fixed 5.3.18-150300.59.54.1
Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
- CVE-2021-26341Mar 11, 2022affected < 5.3.18-150300.59.87.1fixed 5.3.18-150300.59.87.1
Some AMD CPUs may transiently execute beyond unconditional direct branches, which may potentially result in data leakage.
- CVE-2022-0001Mar 11, 2022affected < 5.3.18-150300.59.54.1fixed 5.3.18-150300.59.54.1
Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
- CVE-2022-23042Mar 10, 2022affected < 5.3.18-150300.59.60.4fixed 5.3.18-150300.59.60.4
Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access
- CVE-2022-23041Mar 10, 2022affected < 5.3.18-150300.59.60.4fixed 5.3.18-150300.59.60.4
Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access
- CVE-2022-23040Mar 10, 2022affected < 5.3.18-150300.59.60.4fixed 5.3.18-150300.59.60.4
Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access
- CVE-2022-23039Mar 10, 2022affected < 5.3.18-150300.59.60.4fixed 5.3.18-150300.59.60.4
Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access
- CVE-2022-23038Mar 10, 2022affected < 5.3.18-150300.59.60.4fixed 5.3.18-150300.59.60.4
Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access
- CVE-2022-23037Mar 10, 2022affected < 5.3.18-150300.59.60.4fixed 5.3.18-150300.59.60.4
Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access
- CVE-2022-23036Mar 10, 2022affected < 5.3.18-150300.59.60.4fixed 5.3.18-150300.59.60.4
Linux PV device frontends vulnerable to attacks by backends T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Several Linux PV device frontends are using the grant table interfaces for removing access
- CVE-2022-0516Mar 8, 2022affected < 5.3.18-150300.59.54.1fixed 5.3.18-150300.59.54.1
A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with a normal user privilege to obtain unauthorized memory write access. This flaw affects Linux kernel versions pri
Page 8 of 16