suse/kgraft-patch-SLE12-SP3_Update_23&distro=SUSE Linux Enterprise Live Patching 12 SP3

Vulnerabilities (19)

• CVE-2019-11478Jun 18, 2019
  affected < 3-2.1fixed 3-2.1

  Jonathan Looney discovered that the TCP retransmission queue implementation in tcp_fragment in the Linux kernel could be fragmented when handling certain TCP Selective Acknowledgment (SACK) sequences. A remote attacker could use this to cause a denial of service. This has been fi

• CVE-2019-11477Jun 18, 2019
  affected < 3-2.1fixed 3-2.1

  Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel

• CVE-2019-3846Jun 3, 2019
  affected < 3-2.1fixed 3-2.1

  A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network.

• CVE-2019-11487Apr 23, 2019
  affected < 3-2.1fixed 3-2.1

  The Linux kernel before 5.1-rc5 allows page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm

• CVE-2019-3460Apr 11, 2019
  affected < 1-4.7.1fixed 1-4.7.1

  A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before 5.1-rc1.

• CVE-2019-3459Apr 11, 2019
  affected < 1-4.7.1fixed 1-4.7.1

  A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel before 5.1-rc1.

• CVE-2018-19985Mar 17, 2019
  affected < 1-4.7.1fixed 1-4.7.1

  The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object out-of-bounds (OOB) read that potentially allows arbitrary read in the kernel address

• CVE-2019-7222Mar 17, 2019
  affected < 1-4.7.1fixed 1-4.7.1

  The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.

• CVE-2019-7221Mar 17, 2019
  affected < 1-4.7.1fixed 1-4.7.1

  The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.

• CVE-2019-9213Mar 5, 2019
  affected < 2-2.1fixed 2-2.1

  In the Linux kernel before 4.20.14, expand_downwards in mm/mmap.c lacks a check for the mmap minimum address, which makes it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task.

• CVE-2019-6974Feb 15, 2019
  affected < 1-4.7.1fixed 1-4.7.1

  In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free.

• CVE-2018-16884Dec 18, 2018
  affected < 1-4.7.1fixed 1-4.7.1

  A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time can make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user can cause a host kernel m

• CVE-2018-20169Dec 17, 2018
  affected < 1-4.7.1fixed 1-4.7.1

  An issue was discovered in the Linux kernel before 4.19.9. The USB subsystem mishandles size checks during the reading of an extra descriptor, related to __usb_get_extra_descriptor in drivers/usb/core/usb.c.

• CVE-2018-9568Dec 6, 2018
  affected < 1-4.7.1fixed 1-4.7.1

  In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. A

• CVE-2018-19824Dec 3, 2018
  affected < 1-4.7.1fixed 1-4.7.1

  In the Linux kernel through 4.19.6, a local user could exploit a use-after-free in the ALSA driver by supplying a malicious USB Sound device (with zero interfaces) that is mishandled in usb_audio_probe in sound/usb/card.c.

• CVE-2018-16862Nov 26, 2018
  affected < 1-4.7.1fixed 1-4.7.1

  A security flaw was found in the Linux kernel in a way that the cleancache subsystem clears an inode after the final file truncation (removal). The new file created with the same inode may contain leftover pages from cleancache and the old file data instead of the new one.

• CVE-2018-19407Nov 21, 2018
  affected < 1-4.7.1fixed 1-4.7.1

  The vcpu_scan_ioapic function in arch/x86/kvm/x86.c in the Linux kernel through 4.19.2 allows local users to cause a denial of service (NULL pointer dereference and BUG) via crafted system calls that reach a situation where ioapic is uninitialized.

• CVE-2018-5391Sep 6, 2018
  affected < 1-4.7.1fixed 1-4.7.1

  The Linux kernel, versions 3.9+, is vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in I

• CVE-2018-1120Jun 20, 2018
  affected < 1-4.7.1fixed 1-4.7.1

  A flaw was found affecting the Linux kernel before version 4.17. By mmap()ing a FUSE-backed file onto a process's memory containing command line arguments (or environment strings), an attacker can cause utilities from psutils or procps (such as ps, w) or any other program which m