suse/kgraft-patch-SLE12-SP3_Update_41&distro=SUSE Linux Enterprise Server 12 SP3-LTSS

Vulnerabilities (52)

• CVE-2021-4083Jan 18, 2022
  affected < 4-2.2fixed 4-2.2

  A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalat

• CVE-2021-0920KEVDec 15, 2021
  affected < 5-2.1fixed 5-2.1

  In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro

• CVE-2018-25020Dec 8, 2021
  affected < 3-2.2fixed 3-2.2

  The BPF subsystem in the Linux kernel before 4.17 mishandles situations with a long jump over an instruction sequence where inner instructions require substantial expansions into multiple BPF instructions, leading to an overflow. This affects kernel/bpf/core.c and net/core/filter

• CVE-2021-43389Nov 4, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c.

• CVE-2021-0935Oct 25, 2021
  affected < 2-2.1fixed 2-2.1

  In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid

• CVE-2021-42739Oct 20, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandles bounds checking.

• CVE-2021-42008Oct 4, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access.

• CVE-2021-3653Sep 29, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "int_ctl" field, this issue co

• CVE-2021-40490Sep 3, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.

• CVE-2021-38198Aug 8, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  arch/x86/kvm/mmu/paging_tmpl.h in the Linux kernel before 5.12.11 incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault.

• CVE-2021-38204Aug 8, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations.

• CVE-2021-38160Aug 7, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size. NOTE: the vendor indicates that the cited data corruption is not a vulnerability in any ex

• CVE-2021-3655Aug 5, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP packets may allow the kernel to read uninitialized memory.

• CVE-2021-3679Aug 5, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causin

• CVE-2021-34556Aug 2, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because the protection mechanism neglects the possibility of uninitialized memory locations on the BPF stack.

• CVE-2021-35477Aug 2, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  In the Linux kernel through 5.13.7, an unprivileged BPF program can obtain sensitive information from kernel memory via a Speculative Store Bypass side-channel attack because a certain preempting store operation does not necessarily occur before a store operation that has an atta

• CVE-2021-37576Jul 26, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e.

• CVE-2021-37159Jul 21, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  hso_free_net_device in drivers/net/usb/hso.c in the Linux kernel through 5.13.4 calls unregister_netdev without checking for the NETREG_REGISTERED state, leading to a use-after-free and a double free.

• CVE-2021-33033May 14, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value.

• CVE-2021-31916May 6, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memo