suse/kgraft-patch-SLE12-SP4_Update_12&distro=SUSE Linux Enterprise Live Patching 12 SP4

Vulnerabilities (74)

• CVE-2020-25212Sep 9, 2020
  affected < 6-2.2fixed 6-2.2

  A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.

• CVE-2020-1749Sep 9, 2020
  affected < 2-2.1fixed 2-2.1

  A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending

• CVE-2020-24394Aug 19, 2020
  affected < 6-2.2fixed 6-2.2

  In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131. This occurs because the current umask is not considered.

• CVE-2020-15780Jul 15, 2020
  affected < 5-2.2fixed 5-2.2

  An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7. Injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions, aka CID-75b0cea7bf30.

• CVE-2019-19338Jul 13, 2020
  affected < 1-6.3.1fixed 1-6.3.1

  A flaw was found in the fix for CVE-2019-11135, in the Linux upstream kernel versions before 5.5 where, the way Intel CPUs handle speculative execution of instructions when a TSX Asynchronous Abort (TAA) error occurs. When a guest is running on a host CPU affected by the TAA flaw

• CVE-2020-10757Jun 9, 2020
  affected < 4-2.1fixed 4-2.1

  A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system.

• CVE-2020-12654May 5, 2020
  affected < 3-2.1fixed 3-2.1

  An issue was found in Linux kernel before 5.5.4. mwifiex_ret_wmm_get_status() in drivers/net/wireless/marvell/mwifiex/wmm.c allows a remote AP to trigger a heap-based buffer overflow because of an incorrect memcpy, aka CID-3a9b153c5591.

• CVE-2020-12653May 5, 2020
  affected < 3-2.1fixed 3-2.1

  An issue was found in Linux kernel before 5.5.4. The mwifiex_cmd_append_vsie_tlv() function in drivers/net/wireless/marvell/mwifiex/scan.c allows local users to gain privileges or cause a denial of service because of an incorrect memcpy and buffer overflow, aka CID-b70261a288ea.

• CVE-2020-11668Apr 9, 2020
  affected < 5-2.2fixed 5-2.2

  In the Linux kernel before 5.6.1, drivers/media/usb/gspca/xirlink_cit.c (aka the Xirlink camera USB driver) mishandles invalid descriptors, aka CID-a246b4d54770.

• CVE-2020-2732Apr 8, 2020
  affected < 1-6.3.1fixed 1-6.3.1

  A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstances, an L2 guest may trick the L0 guest into accessing sensitive L1 resources that should be inaccessible to the L2 g

• CVE-2020-8992Feb 14, 2020
  affected < 1-6.3.1fixed 1-6.3.1

  ext4_protect_reserved_inode in fs/ext4/block_validity.c in the Linux kernel through 5.5.3 allows attackers to cause a denial of service (soft lockup) via a crafted journal size.

• CVE-2020-8648Feb 6, 2020
  affected < 1-6.3.1fixed 1-6.3.1

  There is a use-after-free vulnerability in the Linux kernel through 5.5.2 in the n_tty_receive_buf_common function in drivers/tty/n_tty.c.

• CVE-2020-8428Jan 28, 2020
  affected < 1-6.3.1fixed 1-6.3.1

  fs/namei.c in the Linux kernel before 5.5 has a may_create_in_sticky use-after-free, which allows local users to cause a denial of service (OOPS) or possibly obtain sensitive information from kernel memory, aka CID-d0cb50185ae9. One attack vector may be an open system call for a

• CVE-2019-14615Jan 17, 2020
  affected < 1-6.3.1fixed 1-6.3.1

  Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticated user to potentially enable information disclosure via local access.

• CVE-2020-7053Jan 14, 2020
  affected < 1-6.3.1fixed 1-6.3.1

  In the Linux kernel 4.14 longterm through 4.14.165 and 4.19 longterm through 4.19.96 (and 5.x before 5.2), there is a use-after-free (write) in the i915_ppgtt_close function in drivers/gpu/drm/i915/i915_gem_gtt.c, aka CID-7dc40713618c. This is related to i915_gem_context_destroy_

• CVE-2019-19332Jan 9, 2020
  affected < 1-6.3.1fixed 1-6.3.1

  An out-of-bounds memory write issue was found in the Linux Kernel, version 3.13 through 5.4, in the way the Linux kernel's KVM hypervisor handled the 'KVM_GET_EMULATED_CPUID' ioctl(2) request to get CPUID features emulated by the KVM hypervisor. A user or process able to access t

• CVE-2019-20095Dec 30, 2019
  affected < 1-6.3.1fixed 1-6.3.1

  mwifiex_tm_cmd in drivers/net/wireless/marvell/mwifiex/cfg80211.c in the Linux kernel before 5.1.6 has some error-handling cases that did not free allocated hostcmd memory, aka CID-003b686ace82. This will cause a memory leak and denial of service.

• CVE-2019-20096Dec 30, 2019
  affected < 1-6.3.1fixed 1-6.3.1

  In the Linux kernel before 5.1, there is a memory leak in __feat_register_sp() in net/dccp/feat.c, which may cause denial of service, aka CID-1d3ff0950e2b.

• CVE-2019-20054Dec 28, 2019
  affected < 1-6.3.1fixed 1-6.3.1

  In the Linux kernel before 5.0.6, there is a NULL pointer dereference in drop_sysctl_table() in fs/proc/proc_sysctl.c, related to put_links, aka CID-23da9588037e.

• CVE-2019-19965Dec 25, 2019
  affected < 1-6.3.1fixed 1-6.3.1

  In the Linux kernel through 5.4.6, there is a NULL pointer dereference in drivers/scsi/libsas/sas_discover.c because of mishandling of port disconnection during discovery, related to a PHY down race condition, aka CID-f70267f379b5.