suse/kgraft-patch-SLE12-SP3_Update_39&distro=SUSE OpenStack Cloud 8

Vulnerabilities (23)

• CVE-2020-25673May 26, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  A vulnerability was found in Linux kernel where non-blocking socket in llcp_sock_connect() leads to leak and eventually hanging-up the system.

• CVE-2020-25671May 26, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  A vulnerability was found in Linux Kernel, where a refcount leak in llcp_sock_connect() causing use-after-free which might lead to privilege escalations.

• CVE-2020-25670May 26, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  A vulnerability was found in Linux Kernel where refcount leak in llcp_sock_bind() causing use-after-free which might lead to privilege escalations.

• CVE-2020-25672May 25, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  A memory leak vulnerability was found in Linux kernel in llcp_sock_connect

• CVE-2021-3483May 17, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  A flaw was found in the Nosy driver in the Linux kernel. This issue allows a device to be inserted twice into a doubly-linked list, leading to a use-after-free when one of these devices is removed. The highest threat from this vulnerability is to confidentiality, integrity, as we

• CVE-2020-36322Apr 14, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  An issue was discovered in the FUSE filesystem implementation in the Linux kernel before 5.10.6, aka CID-5d069dbe8aaf. fuse_do_getattr() calls make_bad_inode() in inappropriate situations, causing a system crash. NOTE: the original fix for this vulnerability was incomplete, and i

• CVE-2021-29154Apr 8, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c.

• CVE-2020-36312Apr 6, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  An issue was discovered in the Linux kernel before 5.8.10. virt/kvm/kvm_main.c has a kvm_io_bus_unregister_dev memory leak upon a kmalloc failure, aka CID-f65886606c2d.

• CVE-2021-30002Apr 2, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  An issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists. video_usercopy in drivers/media/v4l2-core/v4l2-ioctl.c has a memory leak for large arguments, aka CID-fb18802a338b.

• CVE-2021-29650Mar 30, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h lack a full memory barrier upon the assignment of a new table value, a

• CVE-2021-29264Mar 26, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  An issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver allows attackers to cause a system crash because a negative fragment size is calculated in situations involving an rx queue overrun when

• CVE-2021-29265Mar 26, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  An issue was discovered in the Linux kernel before 5.11.7. usbip_sockfd_store in drivers/usb/usbip/stub_dev.c allows attackers to cause a denial of service (GPF) because the stub-up sequence has race conditions during an update of the local and shared status, aka CID-9380afd6df70

• CVE-2021-20219Mar 23, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  A denial of service vulnerability was found in n_tty_receive_char_special in drivers/tty/n_tty.c of the Linux kernel. In this flaw a local attacker with a normal user privilege could delay the loop (due to a changing ldata->read_head, and a missing sanity check) and cause a threa

• CVE-2021-28972Mar 22, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occur

• CVE-2021-28950Mar 20, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  An issue was discovered in fs/fuse/fuse_i.h in the Linux kernel before 5.11.8. A "stall on CPU" can occur because a retry loop continually finds the same bad inode, aka CID-775c5033a0d1.

• CVE-2021-28660Mar 17, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array. NOTE: from the perspective of kernel.org releases, CVE IDs are not normally used for drivers/staging/* (unfinished work); howe

• CVE-2021-27365Mar 7, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up t

• CVE-2021-27364Mar 7, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages.

• CVE-2021-27363Mar 7, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via t

• CVE-2021-28038Mar 5, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of servic