suse/kgraft-patch-SLE12-SP3_Update_41&distro=HPE Helion OpenStack 8

Vulnerabilities (36)

• CVE-2021-34981May 7, 2024
  affected < 1-4.3.1fixed 1-4.3.1

  Linux Kernel Bluetooth CMTP Module Double Free Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target s

• CVE-2021-3659Aug 22, 2022
  affected < 1-4.3.1fixed 1-4.3.1

  A NULL pointer dereference flaw was found in the Linux kernel’s IEEE 802.15.4 wireless networking subsystem in the way the user closes the LR-WPAN connection. This flaw allows a local user to crash the system. The highest threat from this vulnerability is to system availability.

• CVE-2021-3732Mar 7, 2022
  affected < 1-4.3.1fixed 1-4.3.1

  A flaw was found in the Linux kernel's OverlayFS subsystem in the way the user mounts the TmpFS filesystem with OverlayFS. This flaw allows a local user to gain access to hidden files that should not be accessible.

• CVE-2021-3640Mar 3, 2022
  affected < 1-4.3.1fixed 1-4.3.1

  A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable fau

• CVE-2021-3715Mar 2, 2022
  affected < 1-4.3.1fixed 1-4.3.1

  A flaw was found in the "Routing decision" classifier in the Linux kernel's Traffic Control networking subsystem in the way it handled changing of classification filters, leading to a use-after-free condition. This flaw allows unprivileged local users to escalate their privileges

• CVE-2021-3772Mar 2, 2022
  affected < 1-4.3.1fixed 1-4.3.1

  A flaw was found in the Linux SCTP stack. A blind attacker may be able to kill an existing SCTP association through invalid chunks if the attacker knows the IP-addresses and port numbers being used and the attacker can send packets with spoofed IP addresses.

• CVE-2021-20322Feb 18, 2022
  affected < 1-4.3.1fixed 1-4.3.1

  A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomizat

• CVE-2021-3752Feb 16, 2022
  affected < 1-4.3.1fixed 1-4.3.1

  A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a race condition. This flaw allows a user to crash the system or escalate their privileges. The highest threat from this vuln

• CVE-2021-3760Feb 16, 2022
  affected < 1-4.3.1fixed 1-4.3.1

  A flaw was found in the Linux kernel. A use-after-free vulnerability in the NFC stack can lead to a threat to confidentiality, integrity, and system availability.

• CVE-2021-3753Feb 16, 2022
  affected < 1-4.3.1fixed 1-4.3.1

  A race problem was seen in the vt_k_ioctl in drivers/tty/vt/vt_ioctl.c in the Linux kernel, which may cause an out of bounds read in vt as the write access to vc_mode is not protected by lock-in vt_ioctl (KDSETMDE). The highest threat from this vulnerability is to data confidenti

• CVE-2021-43389Nov 4, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  An issue was discovered in the Linux kernel before 5.14.15. There is an array-index-out-of-bounds flaw in the detach_capi_ctr function in drivers/isdn/capi/kcapi.c.

• CVE-2021-42739Oct 20, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  The firewire subsystem in the Linux kernel through 5.14.13 has a buffer overflow related to drivers/media/firewire/firedtv-avc.c and drivers/media/firewire/firedtv-ci.c, because avc_ca_pmt mishandles bounds checking.

• CVE-2021-42008Oct 4, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  The decode_data function in drivers/net/hamradio/6pack.c in the Linux kernel before 5.13.13 has a slab out-of-bounds write. Input from a process that has the CAP_NET_ADMIN capability can lead to root access.

• CVE-2021-3653Sep 29, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "int_ctl" field, this issue co

• CVE-2021-40490Sep 3, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  A race condition was discovered in ext4_write_inline_data_end in fs/ext4/inline.c in the ext4 subsystem in the Linux kernel through 5.13.13.

• CVE-2021-38198Aug 8, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  arch/x86/kvm/mmu/paging_tmpl.h in the Linux kernel before 5.12.11 incorrectly computes the access permissions of a shadow page, leading to a missing guest protection page fault.

• CVE-2021-38204Aug 8, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  drivers/usb/host/max3421-hcd.c in the Linux kernel before 5.13.6 allows physically proximate attackers to cause a denial of service (use-after-free and panic) by removing a MAX-3421 USB device in certain situations.

• CVE-2021-38160Aug 7, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  In drivers/char/virtio_console.c in the Linux kernel before 5.13.4, data corruption or loss can be triggered by an untrusted device that supplies a buf->len value exceeding the buffer size. NOTE: the vendor indicates that the cited data corruption is not a vulnerability in any ex

• CVE-2021-3655Aug 5, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  A vulnerability was found in the Linux kernel in versions prior to v5.14-rc1. Missing size validations on inbound SCTP packets may allow the kernel to read uninitialized memory.

• CVE-2021-3679Aug 5, 2021
  affected < 1-4.3.1fixed 1-4.3.1

  A lack of CPU resource in the Linux kernel tracing module functionality in versions prior to 5.14-rc3 was found in the way user uses trace ring buffer in a specific way. Only privileged local users (with CAP_SYS_ADMIN capability) could use this flaw to starve the resources causin