suse/kgraft-patch-SLE12-SP5_Update_19&distro=SUSE Linux Enterprise Live Patching 12 SP5

Vulnerabilities (45)

• CVE-2022-22942Dec 13, 2023
  affected < 12-2.1fixed 12-2.1

  The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other processes on the system through a dangling 'file' pointer.

• CVE-2022-1016Aug 29, 2022
  affected < 13-2.1fixed 13-2.1

  A flaw was found in the Linux kernel in net/netfilter/nf_tables_core.c:nft_do_chain, which can cause a use-after-free. This issue needs to handle 'return' with proper preconditions, as it can lead to a kernel information leak problem caused by a local, unprivileged attacker.

• CVE-2022-30594May 12, 2022
  affected < 16-2.2fixed 16-2.2

  The Linux kernel before 5.17.2 mishandles seccomp permissions. The PTRACE_SEIZE code path allows attackers to bypass intended restrictions on setting the PT_SUSPEND_SECCOMP flag.

• CVE-2022-1048Apr 29, 2022
  affected < 16-2.2fixed 16-2.2

  A use-after-free flaw was found in the Linux kernel’s sound subsystem in the way a user triggers concurrent calls of PCM hw_params. The hw_free ioctls or similar race condition happens inside ALSA PCM for other ioctls. This flaw allows a local user to crash or potentially escalat

• CVE-2022-1280Apr 13, 2022
  affected < 15-2.1fixed 15-2.1

  A use-after-free vulnerability was found in drm_lease_held in drivers/gpu/drm/drm_lease.c in the Linux kernel due to a race problem. This flaw allows a local user privilege attacker to cause a denial of service (DoS) or a kernel information leak.

• CVE-2021-4202Mar 25, 2022
  affected < 9-2.2fixed 9-2.2

  A use-after-free flaw was found in nci_request in net/nfc/nci/core.c in NFC Controller Interface (NCI) in the Linux kernel. This flaw could allow a local attacker with user privileges to cause a data race problem while the device is getting removed, leading to a privilege escalat

• CVE-2022-0435Mar 25, 2022
  affected < 9-2.2fixed 9-2.2

  A stack overflow flaw was found in the Linux kernel's TIPC protocol functionality in the way a user sends a packet with malicious content where the number of domain member nodes is higher than the 64 allowed. This flaw allows a remote user to crash the system or possibly escalate

• CVE-2022-0330Mar 25, 2022
  affected < 14-2.1fixed 14-2.1

  A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system.

• CVE-2022-27666Mar 23, 2022
  affected < 12-2.1fixed 12-2.1

  A heap buffer overflow flaw was found in IPsec ESP transformation code in net/ipv4/esp4.c and net/ipv6/esp6.c. This flaw allows a local attacker with a normal user privilege to overwrite kernel heap objects and may cause a local privilege escalation threat.

• CVE-2022-1011Mar 18, 2022
  affected < 13-2.1fixed 13-2.1

  A use-after-free flaw was found in the Linux kernel’s FUSE filesystem in the way a user triggers write(). This flaw allows a local user to gain unauthorized access to data from the FUSE filesystem, resulting in privilege escalation.

• CVE-2021-3656Mar 4, 2022
  affected < 4-2.2fixed 4-2.2

  A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "virt_ext" field, this issue c

• CVE-2021-3640Mar 3, 2022
  affected < 5-2.1fixed 5-2.1

  A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way triggers race condition of the call sco_conn_del() together with the call sco_sock_sendmsg() with the expected controllable fau

• CVE-2021-3609Mar 3, 2022
  affected < 3-2.1fixed 3-2.1

  .A flaw was found in the CAN BCM networking protocol in the Linux kernel, where a local attacker can abuse a flaw in the CAN subsystem to corrupt memory, crash the system or escalate privileges. This race condition in net/can/bcm.c in the Linux kernel allows for local privilege e

• CVE-2022-0492Mar 3, 2022
  affected < 11-2.1fixed 11-2.1

  A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel/cgroup/cgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpecte

• CVE-2021-20322Feb 18, 2022
  affected < 7-2.1fixed 7-2.1

  A flaw in the processing of received ICMP errors (ICMP fragment needed and ICMP redirect) in the Linux kernel functionality was found to allow the ability to quickly scan open UDP ports. This flaw allows an off-path remote user to effectively bypass the source port UDP randomizat

• CVE-2021-3752Feb 16, 2022
  affected < 6-2.2fixed 6-2.2

  A use-after-free flaw was found in the Linux kernel’s Bluetooth subsystem in the way user calls connect to the socket and disconnect simultaneously due to a race condition. This flaw allows a user to crash the system or escalate their privileges. The highest threat from this vuln

• CVE-2022-0487Feb 4, 2022
  affected < 11-2.1fixed 11-2.1

  A use-after-free vulnerability was found in rtsx_usb_ms_drv_remove in drivers/memstick/host/rtsx_usb_ms.c in memstick in the Linux kernel. In this flaw, a local attacker with a user privilege may impact system Confidentiality. This flaw affects kernel versions prior to 5.14 rc1.

• CVE-2021-4083Jan 18, 2022
  affected < 9-2.2fixed 9-2.2

  A read-after-free memory flaw was found in the Linux kernel's garbage collection for Unix domain socket file handlers in the way users call close() and fget() simultaneously and can potentially trigger a race condition. This flaw allows a local user to crash the system or escalat

• CVE-2021-0920KEVDec 15, 2021
  affected < 10-2.1fixed 10-2.1

  In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndro

• CVE-2021-0935Oct 25, 2021
  affected < 6-2.2fixed 6-2.2

  In ip6_xmit of ip6_output.c, there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid