suse/kernel-source-rt&distro=SUSE Linux Enterprise Real Time 12 SP4

Vulnerabilities (187)

• CVE-2019-14615MedJan 17, 2020
  affected < 4.12.14-8.12.1fixed 4.12.14-8.12.1

  Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticated user to potentially enable information disclosure via local access.

• CVE-2020-7053HigJan 14, 2020
  affected < 4.12.14-8.12.1fixed 4.12.14-8.12.1

  In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x before 5.2), there is a use-after-free (write) in the i915_ppgtt_close function in drivers/gpu/drm/i915/i915_gem_gtt.c, aka CID-7dc40713618c. This is related to i915_gem_context_destroy_

• CVE-2019-19332MedJan 9, 2020
  affected < 4.12.14-8.12.1fixed 4.12.14-8.12.1

  An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access t

• CVE-2019-20096MedDec 30, 2019
  affected < 4.12.14-8.12.1fixed 4.12.14-8.12.1

  In the Linux kernel before 5.1, there is a memory leak in __feat_register_sp() in net/dccp/feat.c, which may cause denial of service, aka CID-1d3ff0950e2b.

• CVE-2019-20095MedDec 30, 2019
  affected < 4.12.14-8.12.1fixed 4.12.14-8.12.1

  mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handling cases that did not free allocated hostcmd memory, aka CID-003b686ace82. This will cause a memory leak and denial of service.

• CVE-2019-20054MedDec 28, 2019
  affected < 4.12.14-8.12.1fixed 4.12.14-8.12.1

  In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e.

• CVE-2019-19966MedDec 25, 2019
  affected < 4.12.14-8.12.1fixed 4.12.14-8.12.1

  In the Linux kernel before 5.1.6, there is a use-after-free in cpia2_exit() in drivers/media/usb/cpia2/cpia2_v4l.c that will cause denial of service, aka CID-dea37a972655.

• CVE-2019-19965MedDec 25, 2019
  affected < 4.12.14-8.12.1fixed 4.12.14-8.12.1

  In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5.

• CVE-2019-19770HigDec 12, 2019
  affected < 4.12.14-8.18.1fixed 4.12.14-8.18.1

  In the Linux kernel 4.19.83, there is a use-after-free (read) in the debugfs_remove function in fs/debugfs/inode.c (which is used to remove a file or directory in debugfs that was previously created with a call to another debugfs function such as debugfs_create_file). NOTE: Linux

• CVE-2019-19768HigDec 12, 2019
  affected < 4.12.14-8.18.1fixed 4.12.14-8.18.1

  In the Linux kernel 5.4.0-rc2, there is a use-after-free (read) in the __blk_add_trace function in kernel/trace/blktrace.c (which is used to fill out a blk_io_trace structure and place it in a per-cpu sub-buffer).

• CVE-2019-19767MedDec 12, 2019
  affected < 4.12.14-8.12.1fixed 4.12.14-8.12.1

  The Linux kernel before 5.4.2 mishandles ext4_expand_extra_isize, as demonstrated by use-after-free errors in __ext4_expand_extra_isize and ext4_xattr_set_entry, related to fs/ext4/inode.c and fs/ext4/super.c, aka CID-4ea99936a163.

• CVE-2019-19447HigDec 8, 2019
  affected < 4.12.14-8.12.1fixed 4.12.14-8.12.1

  In the Linux kernel 5.0.21, mounting a crafted ext4 filesystem image, performing some operations, and unmounting can lead to a use-after-free in ext4_put_super in fs/ext4/super.c, related to dump_orphan_list in fs/ext4/super.c.

• CVE-2019-19543HigDec 3, 2019
  affected < 4.12.14-8.12.1fixed 4.12.14-8.12.1

  In the Linux kernel before 5.1.6, there is a use-after-free in serial_ir_init_module() in drivers/media/rc/serial_ir.c.

• CVE-2019-19537MedDec 3, 2019
  affected < 4.12.14-8.12.1fixed 4.12.14-8.12.1

  In the Linux kernel before 5.2.10, there is a race condition bug that can be caused by a malicious USB device in the USB character device driver layer, aka CID-303911cfc5b9. This affects drivers/usb/core/file.c.

• CVE-2019-19536MedDec 3, 2019
  affected < 4.12.14-8.12.1fixed 4.12.14-8.12.1

  In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_pro.c driver, aka CID-ead16e53c2f0.

• CVE-2019-19535MedDec 3, 2019
  affected < 4.12.14-8.12.1fixed 4.12.14-8.12.1

  In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver, aka CID-30a8beeb3042.

• CVE-2019-19534LowDec 3, 2019
  affected < 4.12.14-8.12.1fixed 4.12.14-8.12.1

  In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_core.c driver, aka CID-f7a1337f0d29.

• CVE-2019-19533LowDec 3, 2019
  affected < 4.12.14-8.12.1fixed 4.12.14-8.12.1

  In the Linux kernel before 5.3.4, there is an info-leak bug that can be caused by a malicious USB device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver, aka CID-a10feaf8c464.

• CVE-2019-19532MedDec 3, 2019
  affected < 4.12.14-8.12.1fixed 4.12.14-8.12.1

  In the Linux kernel before 5.3.9, there are multiple out-of-bounds write bugs that can be caused by a malicious USB device in the Linux kernel HID drivers, aka CID-d9d4b1e46d95. This affects drivers/hid/hid-axff.c, drivers/hid/hid-dr.c, drivers/hid/hid-emsff.c, drivers/hid/hid-ga

• CVE-2019-19531MedDec 3, 2019
  affected < 4.12.14-8.12.1fixed 4.12.14-8.12.1

  In the Linux kernel before 5.2.9, there is a use-after-free bug that can be caused by a malicious USB device in the drivers/usb/misc/yurex.c driver, aka CID-fc05481b2fca.