suse/kgraft-patch-SLE12-SP3_Update_6&distro=SUSE Linux Enterprise Live Patching 12 SP3

Vulnerabilities (39)

• CVE-2017-18075Jan 24, 2018
  affected < 3-2.1fixed 3-2.1

  crypto/pcrypt.c in the Linux kernel before 4.14.13 mishandles freeing instances, allowing a local user able to access the AF_ALG-based AEAD interface (CONFIG_CRYPTO_USER_API_AEAD) and pcrypt (CONFIG_CRYPTO_PCRYPT) to cause a denial of service (kfree of an incorrect pointer) or po

• CVE-2018-1000004Jan 16, 2018
  affected < 4-2.1fixed 4-2.1

  In the Linux kernel 4.12, 3.10, 2.6 and possibly earlier versions a race condition vulnerability exists in the sound system, this can lead to a deadlock and denial of service condition.

• CVE-2017-17712HigDec 16, 2017
  affected < 2-2.1fixed 2-2.1

  The raw_sendmsg() function in net/ipv4/raw.c in the Linux kernel through 4.14.6 has a race condition in inet->hdrincl that leads to uninitialized stack pointer usage; this allows a local user to execute code and gain privileges.

• CVE-2017-1000410HigDec 7, 2017
  affected < 1-4.3.1fixed 1-4.3.1

  The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP commands - ConfigRequest, and ConfigResponse messages. This info leak is a result of uninitialized stack variables that may be returned to an attacker in their unini

• CVE-2017-17450HigDec 7, 2017
  affected < 1-4.3.1fixed 1-4.3.1

  net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callback and remove_callback operations, which allows local users to bypass intended access restrictions because the xt_osf_fingers data structure is shared across all

• CVE-2017-17449MedDec 7, 2017
  affected < 1-4.3.1fixed 1-4.3.1

  The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMON is enabled, does not restrict observations of Netlink messages to a single net namespace, which allows local users to obtain sensitive information by leveragin

• CVE-2017-17448HigDec 7, 2017
  affected < 1-4.3.1fixed 1-4.3.1

  net/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for new, get, and del operations, which allows local users to bypass intended access restrictions because the nfnl_cthelper_list data structure is shared across all

• CVE-2017-13166HigDec 6, 2017
  affected < 4-2.1fixed 4-2.1

  An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. Android ID A-34624167.

• CVE-2017-8824HigDec 5, 2017
  affected < 1-4.3.1fixed 1-4.3.1

  The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileges or cause a denial of service (use-after-free) via an AF_UNSPEC connect system call during the DCCP_LISTEN state.

• CVE-2017-16994MedNov 27, 2017
  affected < 1-4.3.1fixed 1-4.3.1

  The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.

• CVE-2017-12193MedNov 22, 2017
  affected < 1-4.3.1fixed 1-4.3.1

  The assoc_array_insert_into_terminal_node function in lib/assoc_array.c in the Linux kernel before 4.13.11 mishandles node splitting, which allows local users to cause a denial of service (NULL pointer dereference and panic) via a crafted application, as demonstrated by the keyri

• CVE-2017-0861HigNov 16, 2017
  affected < 5-2.2fixed 5-2.2

  Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors.

• CVE-2017-15115HigNov 15, 2017
  affected < 1-4.3.1fixed 1-4.3.1

  The sctp_do_peeloff function in net/sctp/socket.c in the Linux kernel before 4.14 does not check whether the intended netns is used in a peel-off action, which allows local users to cause a denial of service (use-after-free and system crash) or possibly have unspecified other imp

• CVE-2017-16646MedNov 7, 2017
  affected < 1-4.3.1fixed 1-4.3.1

  drivers/media/usb/dvb-usb/dib0700_devices.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (BUG and system crash) or possibly have unspecified other impact via a crafted USB device.

• CVE-2017-16645MedNov 7, 2017
  affected < 1-4.3.1fixed 1-4.3.1

  The ims_pcu_get_cdc_union_desc function in drivers/input/misc/ims-pcu.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (ims_pcu_parse_cdc_data out-of-bounds read and system crash) or possibly have unspecified other impact via a crafted USB dev

• CVE-2017-16537MedNov 4, 2017
  affected < 1-4.3.1fixed 1-4.3.1

  The imon_probe function in drivers/media/rc/imon.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.

• CVE-2017-16536MedNov 4, 2017
  affected < 1-4.3.1fixed 1-4.3.1

  The cx231xx_usb_probe function in drivers/media/usb/cx231xx/cx231xx-cards.c in the Linux kernel through 4.13.11 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a crafted USB device.

• CVE-2017-16528MedNov 4, 2017
  affected < 1-4.3.1fixed 1-4.3.1

  sound/core/seq_device.c in the Linux kernel before 4.13.4 allows local users to cause a denial of service (snd_rawmidi_dev_seq_free use-after-free and system crash) or possibly have unspecified other impact via a crafted USB device.

• CVE-2017-11600HigJul 24, 2017
  affected < 1-4.3.1fixed 1-4.3.1

  net/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, does not ensure that the dir value of xfrm_userpolicy_id is XFRM_POLICY_MAX or less, which allows local users to cause a denial of service (out-of-bounds access) or possibly have unspe