suse/kgraft-patch-SLE12-SP4_Update_14&distro=SUSE Linux Enterprise Live Patching 12 SP4

Vulnerabilities (56)

• CVE-2020-29368Nov 28, 2020
  affected < 6-2.2fixed 6-2.2

  An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1.

• CVE-2020-12351Nov 23, 2020
  affected < 4-2.2fixed 4-2.2

  Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

• CVE-2020-25705Nov 17, 2020
  affected < 5-2.2fixed 5-2.2

  A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well

• CVE-2020-8694Nov 12, 2020
  affected < 5-2.2fixed 5-2.2

  Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

• CVE-2020-25645Oct 13, 2020
  affected < 4-2.2fixed 4-2.2

  A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic u

• CVE-2020-0430Sep 17, 2020
  affected < 4-2.2fixed 4-2.2

  In skb_headlen of /include/linux/skbuff.h, there is a possible out of bounds read due to memory corruption. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: A

• CVE-2020-14386Sep 16, 2020
  affected < 3-2.2fixed 3-2.2

  A flaw was found in the Linux kernel before 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity.

• CVE-2020-14331Sep 15, 2020
  affected < 2-2.2fixed 2-2.2

  A flaw was found in the Linux kernel’s implementation of the invert video code on VGA consoles when a local attacker attempts to resize the console, calling an ioctl VT_RESIZE, which causes an out-of-bounds write to occur. This flaw allows a local user with access to the VGA cons

• CVE-2020-25212Sep 9, 2020
  affected < 3-2.2fixed 3-2.2

  A TOCTOU mismatch in the NFS client code in the Linux kernel before 5.8.3 could be used by local attackers to corrupt memory or possibly have unspecified other impact because a size check is in fs/nfs/nfs4proc.c instead of fs/nfs/nfs4xdr.c, aka CID-b4487b935452.

• CVE-2020-1749Sep 9, 2020
  affected < 2-2.2fixed 2-2.2

  A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending

• CVE-2020-10720Sep 3, 2020
  affected < 1-6.3.1fixed 1-6.3.1

  A flaw was found in the Linux kernel's implementation of GRO in versions before 5.2. This flaw allows an attacker with local access to crash the system.

• CVE-2020-24394Aug 19, 2020
  affected < 3-2.2fixed 3-2.2

  In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka CID-22cf8419f131. This occurs because the current umask is not considered.

• CVE-2020-15780Jul 15, 2020
  affected < 2-2.2fixed 2-2.2

  An issue was discovered in drivers/acpi/acpi_configfs.c in the Linux kernel before 5.7.7. Injection of malicious ACPI tables via configfs could be used by attackers to bypass lockdown and secure boot restrictions, aka CID-75b0cea7bf30.

• CVE-2020-0543Jun 15, 2020
  affected < 1-6.3.1fixed 1-6.3.1

  Incomplete cleanup from specific special register read operations in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

• CVE-2020-10732Jun 12, 2020
  affected < 1-6.3.1fixed 1-6.3.1

  A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and exfiltrate private kernel data.

• CVE-2020-10757Jun 9, 2020
  affected < 1-6.3.1fixed 1-6.3.1

  A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system.

• CVE-2019-20812Jun 3, 2020
  affected < 1-6.3.1fixed 1-6.3.1

  An issue was discovered in the Linux kernel before 5.4.7. The prb_calc_retire_blk_tmo() function in net/packet/af_packet.c can result in a denial of service (CPU consumption and soft lockup) in a certain failure case involving TPACKET_V3, aka CID-b43d1f9f7067.

• CVE-2019-20806May 27, 2020
  affected < 1-6.3.1fixed 1-6.3.1

  An issue was discovered in the Linux kernel before 5.2. There is a NULL pointer dereference in tw5864_handle_frame() in drivers/media/pci/tw5864/tw5864-video.c, which may cause denial of service, aka CID-2e7682ebfc75.

• CVE-2020-10751May 26, 2020
  affected < 1-6.3.1fixed 1-6.3.1

  A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest

• CVE-2020-10711May 22, 2020
  affected < 1-6.3.1fixed 1-6.3.1

  A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bitmap via the' ebitmap_netlbl_import' routi