suse/kgraft-patch-SLE12-SP5_Update_13&distro=SUSE Linux Enterprise Live Patching 12 SP5

Vulnerabilities (52)

• CVE-2020-0466Dec 14, 2020
  affected < 2-2.1fixed 2-2.1

  In do_epoll_ctl and ep_loop_check_proc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion

• CVE-2020-27786Dec 11, 2020
  affected < 3-2.2fixed 3-2.2

  A flaw was found in the Linux kernel’s implementation of MIDI, where an attacker with a local account and the permissions to issue ioctl commands to midi devices could trigger a use-after-free issue. A write to this specific memory while freed and before use causes the flow of ex

• CVE-2020-29660Dec 9, 2020
  affected < 2-2.1fixed 2-2.1

  A locking inconsistency issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_io.c and drivers/tty/tty_jobctrl.c may allow a read-after-free attack against TIOCGSID, aka CID-c8bcd9c5be24.

• CVE-2020-29661Dec 9, 2020
  affected < 2-2.1fixed 2-2.1

  A locking issue was discovered in the tty subsystem of the Linux kernel through 5.9.13. drivers/tty/tty_jobctrl.c allows a use-after-free attack against TIOCSPGRP, aka CID-54ffccbf053b.

• CVE-2020-25704Dec 2, 2020
  affected < 1-8.3.1fixed 1-8.3.1

  A flaw memory leak in the Linux kernel performance monitoring subsystem was found in the way if using PERF_EVENT_IOC_SET_FILTER. A local user could use this flaw to starve the resources causing denial of service.

• CVE-2020-29368Nov 28, 2020
  affected < 2-2.1fixed 2-2.1

  An issue was discovered in __split_huge_pmd in mm/huge_memory.c in the Linux kernel before 5.7.5. The copy-on-write implementation can grant unintended write access because of a race condition in a THP mapcount check, aka CID-c444eb564fb1.

• CVE-2020-29371Nov 28, 2020
  affected < 1-8.3.1fixed 1-8.3.1

  An issue was discovered in romfs_dev_read in fs/romfs/storage.c in the Linux kernel before 5.8.4. Uninitialized memory leaks to userspace, aka CID-bcf85fcedfdd.

• CVE-2020-15437Nov 23, 2020
  affected < 1-8.3.1fixed 1-8.3.1

  The Linux kernel before version 5.8 is vulnerable to a NULL pointer dereference in drivers/tty/serial/8250/8250_core.c:serial8250_isa_init_ports() that allows local users to cause a denial of service by using the p->serial_in pointer which uninitialized.

• CVE-2020-15436Nov 23, 2020
  affected < 1-8.3.1fixed 1-8.3.1

  Use-after-free vulnerability in fs/block_dev.c in the Linux kernel before 5.8 allows local users to gain privileges or cause a denial of service by leveraging improper access to a certain error field.

• CVE-2020-28974Nov 20, 2020
  affected < 1-8.3.1fixed 1-8.3.1

  A slab-out-of-bounds read in fbcon in the Linux kernel before 5.9.7 could be used by local attackers to read privileged information or potentially crash the kernel, aka CID-3c4e0dff2095. This occurs because KD_FONT_OP_COPY in drivers/tty/vt/vt.c can be used for manipulations such

• CVE-2020-28915Nov 18, 2020
  affected < 1-8.3.1fixed 1-8.3.1

  A buffer over-read (at the framebuffer layer) in the fbcon code in the Linux kernel before 5.8.15 could be used by local attackers to read kernel memory, aka CID-6735b4632def.

• CVE-2020-25705Nov 17, 2020
  affected < 1-8.3.1fixed 1-8.3.1

  A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an off-path remote attacker to effectively bypass source port UDP randomization. Software that relies on UDP source port randomization are indirectly affected as well