suse/kernel-source-azure&distro=SUSE Linux Enterprise Server 12 SP4

Vulnerabilities (213)

• CVE-2019-15219MedAug 19, 2019
  affected < 4.12.14-6.26.1fixed 4.12.14-6.26.1

  An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/sisusbvga/sisusb.c driver.

• CVE-2019-15218MedAug 19, 2019
  affected < 4.12.14-6.26.1fixed 4.12.14-6.26.1

  An issue was discovered in the Linux kernel before 5.1.8. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/siano/smsusb.c driver.

• CVE-2019-15217MedAug 19, 2019
  affected < 4.12.14-6.26.1fixed 4.12.14-6.26.1

  An issue was discovered in the Linux kernel before 5.2.3. There is a NULL pointer dereference caused by a malicious USB device in the drivers/media/usb/zr364xx/zr364xx.c driver.

• CVE-2019-15216MedAug 19, 2019
  affected < 4.12.14-6.26.1fixed 4.12.14-6.26.1

  An issue was discovered in the Linux kernel before 5.0.14. There is a NULL pointer dereference caused by a malicious USB device in the drivers/usb/misc/yurex.c driver.

• CVE-2019-15215MedAug 19, 2019
  affected < 4.12.14-6.26.1fixed 4.12.14-6.26.1

  An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/cpia2/cpia2_usb.c driver.

• CVE-2019-15214MedAug 19, 2019
  affected < 4.12.14-6.26.1fixed 4.12.14-6.26.1

  An issue was discovered in the Linux kernel before 5.0.10. There is a use-after-free in the sound subsystem because card disconnection causes certain data structures to be deleted too early. This is related to sound/core/init.c and sound/core/info.c.

• CVE-2019-15213MedAug 19, 2019
  affected < 4.12.14-6.34.1fixed 4.12.14-6.34.1

  An issue was discovered in the Linux kernel before 5.2.3. There is a use-after-free caused by a malicious USB device in the drivers/media/usb/dvb-usb/dvb-usb-init.c driver.

• CVE-2019-15212MedAug 19, 2019
  affected < 4.12.14-6.26.1fixed 4.12.14-6.26.1

  An issue was discovered in the Linux kernel before 5.1.8. There is a double-free caused by a malicious USB device in the drivers/usb/misc/rio500.c driver.

• CVE-2019-15211MedAug 19, 2019
  affected < 4.12.14-6.26.1fixed 4.12.14-6.26.1

  An issue was discovered in the Linux kernel before 5.2.6. There is a use-after-free caused by a malicious USB device in the drivers/media/v4l2-core/v4l2-dev.c driver because drivers/media/radio/radio-raremono.c does not properly allocate memory.

• CVE-2018-20976HigAug 19, 2019
  affected < 4.12.14-6.26.1fixed 4.12.14-6.26.1

  An issue was discovered in fs/xfs/xfs_super.c in the Linux kernel before 4.18. A use after free exists, related to xfs_fs_fill_super failure.

• CVE-2017-18551MedAug 19, 2019
  affected < 4.12.14-6.26.1fixed 4.12.14-6.26.1

  An issue was discovered in drivers/i2c/i2c-core-smbus.c in the Linux kernel before 4.14.15. There is an out of bounds write in the function i2c_smbus_xfer_emulated.

• CVE-2019-15118MedAug 16, 2019
  affected < 4.12.14-6.26.1fixed 4.12.14-6.26.1

  check_input_term in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles recursion, leading to kernel stack exhaustion.

• CVE-2019-15117HigAug 16, 2019
  affected < 4.12.14-6.26.1fixed 4.12.14-6.26.1

  parse_audio_mixer_unit in sound/usb/mixer.c in the Linux kernel through 5.2.9 mishandles a short descriptor, leading to out-of-bounds memory access.

• CVE-2019-15098MedAug 16, 2019
  affected < 4.12.14-6.26.1fixed 4.12.14-6.26.1

  drivers/net/wireless/ath/ath6kl/usb.c in the Linux kernel through 5.2.9 has a NULL pointer dereference via an incomplete address in an endpoint descriptor.

• CVE-2019-15090MedAug 16, 2019
  affected < 4.12.14-6.26.1fixed 4.12.14-6.26.1

  An issue was discovered in drivers/scsi/qedi/qedi_dbg.c in the Linux kernel before 5.1.12. In the qedi_dbg_* family of functions, there is an out-of-bounds read.

• CVE-2019-9506HigAug 14, 2019
  affected < 4.12.14-6.26.1fixed 4.12.14-6.26.1

  The Bluetooth BR/EDR specification up to and including version 5.1 permits sufficiently low encryption key length and does not prevent an attacker from influencing the key length negotiation. This allows practical brute-force attacks (aka "KNOB") that can decrypt traffic and inje

• CVE-2019-14284MedJul 26, 2019
  affected < 4.12.14-6.23.1fixed 4.12.14-6.23.1

  In the Linux kernel before 5.2.3, drivers/block/floppy.c allows a denial of service by setup_format_params division-by-zero. Two consecutive ioctls can trigger the bug: the first one should set the drive geometry with .sect and .rate values that make F_SECT_PER_TRACK be zero. Nex

• CVE-2019-14283MedJul 26, 2019
  affected < 4.12.14-6.23.1fixed 4.12.14-6.23.1

  In the Linux kernel before 5.2.3, set_geometry in drivers/block/floppy.c does not validate the sect and head fields, as demonstrated by an integer overflow and out-of-bounds read. It can be triggered by an unprivileged local user when a floppy disk has been inserted. NOTE: QEMU c

• CVE-2018-20855LowJul 26, 2019
  affected < 4.12.14-6.23.1fixed 4.12.14-6.23.1

  An issue was discovered in the Linux kernel before 4.18.7. In create_qp_common in drivers/infiniband/hw/mlx5/qp.c, mlx5_ib_create_qp_resp was never initialized, resulting in a leak of stack memory to userspace.

• CVE-2019-13648MedJul 19, 2019
  affected < 4.12.14-6.23.1fixed 4.12.14-6.23.1

  In the Linux kernel through 5.2.1 on the powerpc platform, when hardware transactional memory is disabled, a local user can cause a denial of service (TM Bad Thing exception and system crash) via a sigreturn() system call that sends a crafted signal frame. This affects arch/power